last executing test programs: 1m19.500605234s ago: executing program 2 (id=294): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20e400, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x1}, 0x6) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1m19.349762438s ago: executing program 2 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x106002, 0x109) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r3) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee00, 0xee01, 0x1000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r1, 0x5, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x0) 1m19.089950595s ago: executing program 2 (id=302): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000001) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00007f1000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x100000, 0x3, 0x8, 0x265a599f, 0x0, [{0xa6, 0x1b, 0x0, '\x00', 0x26}, {0x74, 0x4, 0x7, '\x00', 0x81}, {0x6, 0x3, 0x0, '\x00', 0xf}, {0x4c, 0x3, 0x6}, {0x0, 0x4, 0x4, '\x00', 0x7f}, {0x4, 0x3, 0x8, '\x00', 0x7}, {0x6, 0x6, 0x1, '\x00', 0xc}, {0x3, 0x9, 0x9, '\x00', 0x2}, {0x6, 0xf2, 0xf8, '\x00', 0x3}, {0x0, 0x2, 0x7f, '\x00', 0x2}, {0x2, 0xff, 0xff, '\x00', 0x57}, {0x5, 0x42, 0x2, '\x00', 0x7}, {0x40, 0x80, 0x0, '\x00', 0xd}, {0x0, 0xfc, 0x3, '\x00', 0x7f}, {0x6, 0x71, 0x5, '\x00', 0xff}, {0x4, 0x3, 0x1, '\x00', 0x7}, {0x40, 0x80, 0xd1, '\x00', 0x92}, {0x1c, 0x4, 0x0, '\x00', 0x1}, {0xa, 0x4, 0xeb}, {0x1, 0x0, 0xff, '\x00', 0x8}, {0x5, 0xd7, 0x7, '\x00', 0xf}, {0x0, 0x9, 0xe, '\x00', 0x7}, {0xe, 0x9, 0x81, '\x00', 0xc0}, {0x1, 0x4, 0x8, '\x00', 0x1}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000a14c72e2dbd7000fedbdf250800010001"], 0x18}, 0x1, 0x0, 0x0, 0x20000024}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r5, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 1m18.118488343s ago: executing program 2 (id=309): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x3e, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000b00), 0x64) (fail_nth: 1) 1m17.981103913s ago: executing program 2 (id=311): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socket$packet(0x11, 0xc2340cf684d20d18, 0x300) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0x0, 0x2, 0x42, 0x2}) 1m17.508041913s ago: executing program 2 (id=317): ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000018c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.381992657s ago: executing program 32 (id=317): ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000018c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.990502376s ago: executing program 0 (id=331): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x8, 0x270bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0x8, 0x8}, {0x6, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20049010}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e000100000000000000009201000000000000060000000000000000000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffff01000000002abd700004350000020001000000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m13.840558465s ago: executing program 0 (id=334): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffffad34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x20000006, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0x7, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x7, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x2c6, 0xa, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x5, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x2, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x8000, 0x10080, 0x3, 0x7e, 0x100, 0x38, 0x7, 0xaf, 0x8, 0x4, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x280, 0xffff3441, 0x1]}, 0x45c) r10 = request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f00000002c0)='syz', 0xfffffffffffffffc) keyctl$search(0xa, r3, &(0x7f0000000100)='ceph\x00', &(0x7f00000001c0)={'syz', 0x0}, r10) ppoll(&(0x7f0000000340)=[{}, {}, {r7, 0x1000}, {r1}, {r5}, {r7, 0x4080}, {r1}, {r7, 0x8800}], 0x8, 0x0, 0x0, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read(r11, &(0x7f0000000880)=""/183, 0xb7) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) 1m10.79164683s ago: executing program 0 (id=358): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1m9.898348617s ago: executing program 0 (id=366): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f00000001c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xfc01}]}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='0x', 0x2) mmap$usbfs(&(0x7f0000411000/0x2000)=nil, 0x2000, 0x1000008, 0x50, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m9.800594249s ago: executing program 0 (id=367): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000080)={0x7, 0x0, 0x2c5}) (async) r1 = msgget$private(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) (async) io_setup(0x8, &(0x7f0000004200)=0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0xf0}]) (async) r4 = msgget(0x1, 0x60) msgctl$IPC_STAT(r4, 0x2, &(0x7f00000010c0)=""/4096) (async) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) (async, rerun: 32) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r5) (async) wait4(r5, 0x0, 0x40000000, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) (async, rerun: 64) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) (async, rerun: 64) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/34) (async, rerun: 64) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) (rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x9202}) 1m9.561110356s ago: executing program 0 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x5, 0x6, 0x100, 0x2, 0x3, 0x1, 0x6, 0x7ffffffc}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) 54.452985626s ago: executing program 33 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x5, 0x6, 0x100, 0x2, 0x3, 0x1, 0x6, 0x7ffffffc}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) 19.980962091s ago: executing program 5 (id=812): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100), 0x10) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x6, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 19.980765262s ago: executing program 5 (id=813): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="02ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa1140402}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 19.830816573s ago: executing program 5 (id=815): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010040aa11f6bbf44d00000000008984", 0x39}, {&(0x7f0000000040)="e7afb7a065490a17d305392882cc1082d9aa646ab57fbd07578e80a7b0df6efca17da357354286d2572c5d2352acf725e13238", 0x33}, {&(0x7f0000000080)="12f74de388dd3cb02b6997ac172a13181860", 0x12}, {&(0x7f0000000200)="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", 0x102}], 0x4) r1 = socket(0x1e, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000080) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x50}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = eventfd2(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r7, 0x1, 0x13, 0x0, &(0x7f0000006380)) io_submit(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x400, r5, 0x0, 0x0, 0x6, 0x0, 0x2, r6}]) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x4}}, 0x10) 19.629979957s ago: executing program 5 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="170000d58dc7b200680001000900000000000000004011600a08000000000000008c12bf"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000200)=0x9, 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000500)={0x0, 0x64, &(0x7f0000000280)={&(0x7f0000000540)="98bd80d1b51fac3cd4242ec52d3a9d97a2363395b5add192d6bb49", 0x1b}, 0x1, 0x0, 0x0, 0x8000}, 0x20000016) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="020d0000180000002cbd700000000000080012000000020000000000000000000600000000000000fdffffff00000000ac1efa01000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000700000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000004000300", @ANYRESDEC], 0xc0}}, 0x0) bind$bt_sco(r5, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x51}}, 0x8) listen(r5, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee00, 0xee00) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000300)={'bond0\x00', @ifru_names='sit0\x00'}) setreuid(0x0, 0xee01) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000e00)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x0, 0x2e0, 0x2e0, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'pimreg0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x178}, {[0x4e20, 0x4e20], [0x4e21, 0x4e2c], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0x62f7, 0xba7d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x9, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x4005, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x4, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x0, 0x2, 0x1, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x1, 0x0, 0x6, 0x2, 0x7, 0x1], 0x0, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1c, "f30053790051bf3ffd3f72b279e4368029840d3facd44179be46d350310b"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r11, 0xc0485630, &(0x7f0000000080)={0x1, "072b20d017bbf2bd1632992e8c5c357cb8507e8dfa0a347a2852e54a4b71ab3a", 0x1, 0x1, 0x100, 0xff06ff, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendto$inet(r1, 0x0, 0x0, 0x2000884, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) 19.206117038s ago: executing program 5 (id=822): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x10, 0x70bd25, 0x259fdbfc, {0x80, 0x0, 0x0, 0x7, 0xfc, 0x0, 0xff, 0x1, 0x100}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4000003e, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) (async) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000e8896e4e02fae99e1d"], 0x14}}, 0x4000080) (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000100)) 19.120704839s ago: executing program 5 (id=823): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000280)=0x5}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0x0, 0x2, 0x42, 0x2}) 5.140483009s ago: executing program 1 (id=948): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4e8, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4d4, 0x1, [@m_skbedit={0x9c, 0x1b, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x3, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x5, 0x5, 0x7, 0x76}}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x7ff, 0x86, 0x2, 0xcd, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x8, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4e8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c001100004001"], 0xfdef) 4.989293525s ago: executing program 1 (id=949): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x129a82, 0x0) sendfile(r1, r1, 0x0, 0x8) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='smb3\x00', 0x200800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x15, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfff}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdb2}}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x10, 0xb, 0xd, 0x166}]}, &(0x7f0000000640)='GPL\x00', 0x3, 0x4c, &(0x7f0000000740)=""/76, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000007c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x2, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000840)=[r1, r1, r1], &(0x7f0000000880)=[{0x2, 0x5, 0x6, 0x4}, {0x6, 0x5, 0xa, 0xa}, {0x2, 0x3, 0xa, 0x5}, {0x5, 0x5, 0x1, 0x6}, {0x1, 0x4, 0x1, 0x17}, {0x3, 0x3, 0xb, 0x9}], 0x10, 0x20000000}, 0x94) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x20, 0x140f, 0x1, 0x70bd27, 0x4, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x4004044) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000440)=""/141, 0x8d}], 0x2) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48, 0x7a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r7 = socket$nl_crypto(0x10, 0x3, 0x15) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r8, 0xc0345641, &(0x7f0000000140)={0x0, "5622d02e54e0090aa90108e267cd87ab932cf729f85c7bd8fa1cea70f891568c", 0x0, 0x1}) write(r7, &(0x7f00000000c0)="e0000000120005000000000000000000736861332d3235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000736861332d3235362d6c696200"/192, 0xe0) 4.683866501s ago: executing program 1 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000000380)={&(0x7f0000000340)=[{&(0x7f0000000200)="f89a3ee5c15ff4e2dbda263177ce7515a3ce67a7e1457c67cad3c3d10070c47c78c78c9621f01ce29073f711784f68246e5c1137ce73efe01e5f2bff5b502ea0e38c2e7d70ca0723dac54cfa3292e4b9e79f73fd4140be48dc6e4373296764e96f81c2b5a1c282a526bde48434d781966929ae2fad37b7601cbfbc4e4d9cba590fe5bafcf739ea49c09b7ed85e984e7bd9692b0666a307930122b2867c75622f73689d8ab9115f97a06849fc49", 0xad}, {&(0x7f00000002c0)="8b1bdf5fe4be92dfd40fd503b065b5e04f4f7a3c1433d2f4c78330766788eeaa87dc9607f6fa84aefa610a29f7fa019c02ac38d7da33f296", 0x38}, {&(0x7f0000000300)="c863dfa82c475f94364e015044107b3edaf0dd15", 0x14}], 0x3, 0x40, 0x0, 0xc3a5, 0x7, 0xab, 0x3, 0x5}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b010902"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) 4.13356218s ago: executing program 34 (id=823): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000280)=0x5}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0x0, 0x2, 0x42, 0x2}) 3.7110453s ago: executing program 4 (id=962): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x53, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0xff, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x1, 0x0, @pic={0xa4, 0x9, 0xe, 0x3, 0x0, 0x4, 0x81, 0x0, 0x6, 0xfb, 0x81, 0x8, 0x0, 0x2, 0xd, 0xb}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f0000000b00), 0x64) 3.466344441s ago: executing program 4 (id=966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x5}}, 0x30) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x6}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) chmod(&(0x7f0000000040)='./file0\x00', 0x8) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) (async) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000140)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x5}}, 0x30) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x6}]}) (async) 3.390717401s ago: executing program 3 (id=967): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f0000000280)='gid', 0x202200, &(0x7f00000002c0)={@align=0x31, {0x4ce, 0x9, 0xf}}, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x2}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xfd7a\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00i\xf5-\xd6\xb6\x1631\xa1\xa2\x96\x8c\x11\x841\xc9O\x10\xfb\x8a\x80)eQ8%\r\x93\xa1\x84(MA_\xf6\x92\xc3Rpp:\xac\xe4\x8b\xaf\xdcl~\xe7lGZ\xd6f\xa4\xbaj\xea\xf7\xae\xca\xa6z0\xa9\xd6\xd4\xa6\xa8Y\x06\xa6S\xfe\xb7oR\x8c7\x00\x94J\xc5\xc9\x9a\xdd5\xed\x01/\xa3oH\x9a!\xfa2f\xfe\xc8\n\xa5(g\x93%\xe4|\xd0\xe6\xf9\xe1tS8P\"\xf0\xe8\xf8\xc2pI\bh\xca\x00\xc2\xb2\xb5\xbb\xb2\\\xee\xb3W|N\xfa\xb4O\xf4jkv\xa3\x19\xd7\xca\xa4/\n\xa7>\x1c\xa27f\'o\xd7\x90\xbe\xe3\xa2\xc0!bq \x83m;X\x96<\x1a\xb1\x19_\x1f\xa9e\x87\x82\x1b\xcaX\xd5\x11L\xb9\x99rhN\xb7\xe9\xb8\xcb\x1dy\xe8\xe7U\xfaQ\xdc\xf8', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.390432268s ago: executing program 1 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ce\x00'}, 0x58) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80100, 0x40) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x80, 0x2}}}}, 0x11) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="3ef30f20dc0f32400fe18a6e000000b9a00b0000b801000000ba000000000f30c744240061000000c744240200a00000ff2c2466ba4300b0f8ee420f070f2139c744240004000000c744240200000000c7442406000000000f011c24450f01c5", 0x60}], 0x1, 0x7c, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200, &(0x7f0000000640)={[{@gid}], [{@fsname={'fsname', 0x3d, '\\{&-)'}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f00000028c0)=ANY=[@ANYBLOB="18500000", @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250800000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.390083103s ago: executing program 3 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x141481, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r7, 0xfffff789) r8 = accept(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x8, 0xfffffffd, 0x0, 0xd0, 0x6, 0x2}, 0x9c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000000080)) 327.453693ms ago: executing program 4 (id=970): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002800), 0x60c00, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000028c0)={0x10, 0x1}) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 239.32114ms ago: executing program 1 (id=971): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000940)={0x0, 0x0, 0x15, 0x13, 0xcd, &(0x7f0000000540)="d7f7c98b0409165b7e482f26659e0c3a92bdcf32a9f0f9bcfcf317dd9e0743b3f62ebd11dcda21465a374b08cb36a005c61238647d91915e498774ec4106dd4e169066b204c50d7e84223bfdbf44b504a2938a6d3dd36d25ae0f9165226f23269e644278647258b9aa418c683736a9be698828d22f7c7b6a70fbf909c96f16f4a1d728706f2a82dde65d78120193813dd23b1cfebc9548ba726532bbe873db59a26f828672d3d17eb43f4b039642c3df360887dda23a744437521dfc8fa30904cf28a05a5f957a69db91ee29ebbd834e500b02a07ce9bb0f43d61f6a6203a617cd1bb1ad22732243d5902626359ff874268e1ee2fb09ebc3b35acc051a368c21997a700e4dd4f8215e855abf7c469d81db539d19144b27d94d52340ce4b3384fbbf0cb03b35b8e8d41a0c57afa2313ee474cc9088c7d023f129f0e10dabcd2f8ca0d86d0e5ec08cfd27220b730fedbb1ab7c9ee63c760a043690c9d16562086a9a209668d6578b3c3f29e6ea645015df842fce34605319e191c3ebb91c7c011f1c6e6da537669a0befdb7f49bb1fe55350af0741dd6392b39cd7eae85d7c6939fd90e8193c3eaa271e6d25efb3c9cab14bcb1e5984f43725151726e8a4225a3ebd3af8dfbc6d07632a9c3a3ae695c8e3ab3e392c4dd9f59dd76f3444315bff22d6a6203fb6a44c745d94ed4b4f8777a7d39df931bfca83e8230825161f350d315c437ace3e4c599a56a4a37776a31f71c0908062ff9bb24448cb938cf9e6454eb59521e4ef24cefe60076f82e4af4fbaeb68e4c5de1c55979062a0c053f57273eb4b05ee5f7bf5b60dca901b31181749b9ff9f0b8afa93841042d8c1f3ccd7b3a87408a2ef53d2884c66b62f6f729c9b276a524058d014872f560785f1a8040c0d4141aa0f81997419ddccb7f0bd81c83154d2eb36c9c4e39264c7c050986efbe4b6610c07ebe216d5d7d4aa2c13810ccc87fd25ecaa635937afd3475ed7ef69168d4483cbddaee266a1805e1f4ee1c3c6e50d285c37d8775e23a503aafc8969bad4aea957d0b6dcfa508136d7b399d25df2a4ddd5ff5fbfd99050d6be2ae11a1656236b05904838276e0bbc58e3144439e4201d08b39190ed73a1331b7fa7ee9a60eadff87a058ed636f47e4a7c349559b7359dcdab3411d47f71d1868bc61cd69c16063800602a27b688d65f4c6a98010a2d00f84a3ea911dad0aa52be39b0c4290eede0831bf2096a025508914eb306468e1cee172c1fdb81739be2a8c1588bf26d059ce75e5628f5d102a805974c58d64acd2811c0ab1427eda673c3b54cd5b825b8d73f989756b31bf7bf2b491978829d9e8211ef19a69fa8390c357d1b2c63efd47c78e7a3821e99389874b67399e5c2a4d6e5be3fa5525b9cdb216dfd32348a448ef642c753de6d60238f50d918c1158c0cea8353b3e538dfb241ec96"}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000132900", "2809e8dbe108598948224add4afac11d875397bdb22d0000b420a1a93c52cdec5f819e01177d3d458dd4992861abffe3000000000000000000000000ffff00", "f42205000000000000000000000000000000002000", [0x9, 0x2000000000001]}}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000180)) 239.013636ms ago: executing program 4 (id=972): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 238.672652ms ago: executing program 4 (id=973): bind$unix(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x40a02, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x21b}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003400088a8", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 238.514066ms ago: executing program 1 (id=974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x2e) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="640f01ca9af67f0000370066baf80cb8d0c1ff86ef66bafc0cecb990060000b81ffe0000ba000000000f303e0f794d1f66baf80cb8f4887e8aef66bafc0cb8f8d20000ef260f00db0f2297c4e1fbf0770d66baa00066b84bf066ef", 0x5b}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x2400) ioctl$CEC_DQEVENT(r13, 0xc0506107, &(0x7f0000000280)) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x24008081) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000140)={0x80, 0x0, 0x2}) 109.876932ms ago: executing program 3 (id=975): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0xa40006b4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x66a040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 109.676104ms ago: executing program 3 (id=976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x2c, 0x1, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x7, 0x2, @TCA_ETF_PARMS={0xffffff7f, 0x1, {0xffffffc0, 0xb, 0x1}}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x6, 0x1800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0xaf}}]}, 0x30}}, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 442.469µs ago: executing program 3 (id=977): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="adb0df9e749521c256a9d8443a"], 0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xb) setresuid(0x0, 0xee01, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='sysfs\x00', &(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0xb, 0x100, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x2, 0x0, 0x800}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x1f, 0x1000001, 0x400c09, 0x8, 0x8002, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000100)={0x60, 0x0, r5, {{0xa, 0x8, 0x8, 0x7, 0x7fff, 0x4, 0x7fffffff, 0x9}}}, 0x60) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 206.786µs ago: executing program 4 (id=978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff020000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) r2 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) 0s ago: executing program 3 (id=979): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6}) r7 = socket$netlink(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b27, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f0000000680)='dummy_udc.0', 0xb) r10 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r10, &(0x7f0000000b00)='\n', 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'veth1_vlan\x00', 0x0}) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r13}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r14, r11, 0x25, 0x0, @val=@netfilter={0xa, 0x1, 0x80, 0x1}}, 0x20) kernel console output (not intermixed with test programs): and 0x0c1a tx timeout [ 89.132033][ T5094] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.133942][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.201438][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 89.221791][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 89.234196][ T29] usb 8-1: no configurations [ 89.235902][ T29] usb 8-1: can't read configurations, error -22 [ 89.238833][ T29] usb usb8-port1: unable to enumerate USB device [ 89.317781][ T7303] netlink: 328 bytes leftover after parsing attributes in process `syz.1.449'. [ 89.554885][ T7310] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 89.560846][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'. [ 89.865219][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.452'. [ 89.868994][ T7313] netlink: 32 bytes leftover after parsing attributes in process `syz.4.452'. [ 89.875224][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.452'. [ 90.028886][ T7319] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 90.215381][ T7325] proc: Unknown parameter 'trans' [ 90.230752][ T7326] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 90.286325][ T7325] team0: Device vlan0 is up. Set it down before adding it as a team port [ 90.592472][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 90.592498][ T42] audit: type=1400 audit(1785421110.531:5964): avc: denied { setopt } for pid=7330 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.600353][ T42] audit: type=1400 audit(1785421110.531:5965): avc: denied { read } for pid=7330 comm="syz.1.458" lport=30071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.124407][ T7351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.465'. [ 91.124427][ T7352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.465'. [ 91.221227][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.221453][ T5094] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.359114][ T7357] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 91.368434][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 91.376962][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 91.379824][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 91.521281][ T42] audit: type=1400 audit(1785421111.451:5966): avc: denied { ioctl } for pid=7373 comm="syz.3.468" path="socket:[19368]" dev="sockfs" ino=19368 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.636371][ T42] audit: type=1400 audit(1785421111.571:5967): avc: denied { read } for pid=7389 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 91.683685][ T42] audit: type=1400 audit(1785421111.621:5968): avc: denied { getopt } for pid=7389 comm="syz.3.469" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.825974][ T7395] openvswitch: netlink: Actions may not be safe on all matching packets [ 92.013306][ T7397] syzkaller0: entered promiscuous mode [ 92.015445][ T7397] syzkaller0: entered allmulticast mode [ 92.203393][ T42] audit: type=1400 audit(1785421112.141:5969): avc: denied { write } for pid=7401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.261323][ T42] audit: type=1400 audit(1785421112.191:5970): avc: denied { write } for pid=7404 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.368209][ T42] audit: type=1400 audit(1785421112.301:5971): avc: denied { write } for pid=7406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.428559][ T42] audit: type=1400 audit(1785421112.361:5972): avc: denied { write } for pid=7409 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.512331][ T7419] macvlan0: entered promiscuous mode [ 92.516604][ T7423] binder: 7417:7423 ioctl c0306201 200000000640 returned -22 [ 92.516607][ T7419] binder: 7417:7419 ioctl c0306201 200000000640 returned -22 [ 92.517373][ T42] audit: type=1400 audit(1785421112.451:5973): avc: denied { write } for pid=7417 comm="syz.3.473" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.524804][ T7423] binder: 7417:7423 ioctl 400442c8 200000000040 returned -22 [ 92.530131][ T7419] binder: 7417:7419 ioctl 400442c8 200000000040 returned -22 [ 92.558564][ T5749] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 92.841407][ T9] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 92.981385][ T9] usb 8-1: device descriptor read/64, error -71 [ 93.242837][ T9] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 93.291522][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.328741][ T7448] netlink: 'syz.4.485': attribute type 7 has an invalid length. [ 93.332214][ T7448] netlink: 'syz.4.485': attribute type 7 has an invalid length. [ 93.368928][ T7450] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 93.372212][ T5094] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 93.372222][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 93.404060][ T9] usb 8-1: device descriptor read/64, error -71 [ 93.522637][ T9] usb usb8-port1: attempt power cycle [ 93.550788][ T7460] overlayfs: failed to resolve './file1': -2 [ 93.558804][ T7460] support for the xor transformation has been removed. [ 93.778947][ T7469] netlink: 'syz.4.493': attribute type 7 has an invalid length. [ 93.782629][ T7469] netlink: 'syz.4.493': attribute type 7 has an invalid length. [ 93.881565][ T9] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 93.901979][ T9] usb 8-1: device descriptor read/8, error -71 [ 94.001532][ T7473] xt_hashlimit: size too large, truncated to 1048576 [ 94.151270][ T9] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 94.168991][ T7480] netlink: 'syz.4.497': attribute type 10 has an invalid length. [ 94.187102][ T7480] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.191964][ T9] usb 8-1: device descriptor read/8, error -71 [ 94.262797][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 94.277324][ T7482] macvlan1: entered allmulticast mode [ 94.285045][ T7482] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 94.304921][ T9] usb usb8-port1: unable to enumerate USB device [ 94.423427][ T7493] binder: Bad value for 'max' [ 94.731797][ T7508] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.734070][ T7508] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.736050][ T7508] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.738256][ T7508] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.797690][ T7511] kAFS: unable to lookup cell 'syz1' [ 94.869904][ T7516] tmpfs: Bad value for 'huge' [ 94.922673][ T7517] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7517 comm=syz.1.507 [ 95.072098][ T7521] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.074687][ T7521] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.077018][ T7521] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.079125][ T7521] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.342230][ T7529] netlink: 168 bytes leftover after parsing attributes in process `syz.4.511'. [ 95.739225][ T7545] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.769189][ T7547] netlink: 'syz.1.519': attribute type 10 has an invalid length. [ 95.786720][ T7547] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.948281][ T7557] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.972707][ T7557] kvm: pic: level sensitive irq not supported [ 95.973100][ T7557] kvm: pic: non byte read [ 95.986144][ T7557] kvm: pic: level sensitive irq not supported [ 95.986491][ T7557] kvm: pic: non byte read [ 95.990939][ T7557] kvm: pic: level sensitive irq not supported [ 95.991566][ T7557] kvm: pic: non byte read [ 95.997094][ T7557] kvm: pic: level sensitive irq not supported [ 95.997371][ T7557] kvm: pic: non byte read [ 96.018054][ T7565] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 96.053698][ T7565] bond2: entered promiscuous mode [ 96.056381][ T7565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.170176][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 96.170207][ T42] audit: type=1400 audit(1785421116.101:5988): avc: denied { watch watch_reads } for pid=7572 comm="syz.1.528" path="pipe:[22775]" dev="pipefs" ino=22775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 96.232026][ T7576] FAULT_INJECTION: forcing a failure. [ 96.232026][ T7576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.237235][ T7576] CPU: 0 UID: 0 PID: 7576 Comm: syz.4.529 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.237264][ T7576] Tainted: [L]=SOFTLOCKUP [ 96.237270][ T7576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.237290][ T7576] Call Trace: [ 96.237307][ T7576] [ 96.237315][ T7576] dump_stack_lvl+0x100/0x190 [ 96.237358][ T7576] should_fail_ex.cold+0x5/0xa [ 96.237381][ T7576] _copy_from_iter+0x1f4/0x1690 [ 96.237423][ T7576] ? __pfx__copy_from_iter+0x10/0x10 [ 96.237446][ T7576] ? sock_has_perm+0x25a/0x2f0 [ 96.237477][ T7576] ? __pfx_sock_has_perm+0x10/0x10 [ 96.237507][ T7576] hci_sock_sendmsg+0x4a1/0x2620 [ 96.237542][ T7576] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 96.237562][ T7576] ? selinux_socket_sendmsg+0x198/0x2f0 [ 96.237589][ T7576] sock_write_iter+0x53a/0x5b0 [ 96.237632][ T7576] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 96.237652][ T7576] ? __pfx_sock_write_iter+0x10/0x10 [ 96.237688][ T7576] ? bpf_lsm_file_permission+0x9/0x10 [ 96.237714][ T7576] ? security_file_permission+0x76/0x210 [ 96.237732][ T7576] ? rw_verify_area+0xce/0x6d0 [ 96.237758][ T7576] vfs_write+0x6ac/0x1050 [ 96.237784][ T7576] ? __pfx_sock_write_iter+0x10/0x10 [ 96.237811][ T7576] ? __pfx_vfs_write+0x10/0x10 [ 96.237833][ T7576] ? find_held_lock+0x2b/0x80 [ 96.237875][ T7576] ksys_write+0x1f8/0x250 [ 96.237900][ T7576] ? __pfx_ksys_write+0x10/0x10 [ 96.237932][ T7576] do_syscall_64+0x115/0x870 [ 96.237958][ T7576] ? clear_bhb_loop+0x40/0x90 [ 96.237979][ T7576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.237997][ T7576] RIP: 0033:0x7fac8139df99 [ 96.238014][ T7576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.238030][ T7576] RSP: 002b:00007fac8229a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.238057][ T7576] RAX: ffffffffffffffda RBX: 00007fac81625fa0 RCX: 00007fac8139df99 [ 96.238067][ T7576] RDX: 000000000000000d RSI: 0000200000000000 RDI: 000000000000000d [ 96.238076][ T7576] RBP: 00007fac8229a090 R08: 0000000000000000 R09: 0000000000000000 [ 96.238086][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.238097][ T7576] R13: 00007fac81626038 R14: 00007fac81625fa0 R15: 00007fff63040a78 [ 96.238121][ T7576] [ 96.432558][ T1351] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 96.484298][ T5749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.493610][ T5749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.497679][ T5749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.507300][ T5749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.510922][ T5749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.592168][ T1351] usb 6-1: Using ep0 maxpacket: 8 [ 96.597465][ T1351] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 96.601081][ T7588] netlink: 'syz.3.533': attribute type 29 has an invalid length. [ 96.611700][ T1351] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.616086][ T1351] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.620094][ T1351] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.624514][ T1351] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.629809][ T1351] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.635101][ T1351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.795379][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 96.811852][ T7609] batadv0: entered promiscuous mode [ 96.817448][ T7609] macsec2: entered promiscuous mode [ 96.819682][ T7609] macsec2: entered allmulticast mode [ 96.826898][ T7609] batadv0: entered allmulticast mode [ 96.830186][ T7609] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 96.833846][ T7609] batadv0: left allmulticast mode [ 96.835740][ T7609] batadv0: left promiscuous mode [ 96.848568][ T1351] usb 6-1: usb_control_msg returned -32 [ 96.850984][ T1351] usbtmc 6-1:16.0: can't read capabilities [ 96.941240][ T42] audit: type=1400 audit(1785421116.871:5989): avc: denied { mounton } for pid=7619 comm="syz.3.540" path="/141/config" dev="configfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.955078][ T42] audit: type=1400 audit(1785421116.891:5990): avc: denied { read } for pid=7619 comm="syz.3.540" name="out_ports" dev="configfs" ino=22015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 96.971716][ T42] audit: type=1400 audit(1785421116.891:5991): avc: denied { ioctl } for pid=7619 comm="syz.3.540" path="/141/config/usb_gadget/g1/functions/midi.usb0/out_ports" dev="configfs" ino=22015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 96.987451][ T42] audit: type=1800 audit(1785421116.891:5992): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.540" name="out_ports" dev="configfs" ino=22015 res=0 errno=0 [ 97.001240][ T42] audit: type=1800 audit(1785421116.891:5993): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.540" name="out_ports" dev="configfs" ino=22015 res=0 errno=0 [ 97.009838][ T42] audit: type=1800 audit(1785421116.891:5994): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.540" name="out_ports" dev="configfs" ino=22015 res=0 errno=0 [ 97.017945][ T42] audit: type=1800 audit(1785421116.901:5995): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.540" name="out_ports" dev="configfs" ino=22015 res=0 errno=0 [ 97.026338][ T42] audit: type=1800 audit(1785421116.901:5996): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.540" name="out_ports" dev="configfs" ino=22015 res=0 errno=0 [ 97.033576][ T42] audit: type=1800 audit(1785421116.901:5997): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.540" name="out_ports" dev="configfs" ino=22015 res=0 errno=0 [ 97.131376][ T5094] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.131795][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.134048][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.213969][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.216784][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.219534][ T7582] bridge_slave_0: entered allmulticast mode [ 97.223829][ T7582] bridge_slave_0: entered promiscuous mode [ 97.228280][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.231049][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.233600][ T7582] bridge_slave_1: entered allmulticast mode [ 97.237290][ T7582] bridge_slave_1: entered promiscuous mode [ 97.262745][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.268931][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.295118][ T7582] team0: Port device team_slave_0 added [ 97.299586][ T7582] team0: Port device team_slave_1 added [ 97.314848][ T7640] SELinux: context truncated [ 97.317840][ T7640] SELinux: invalid ocon [ 97.331582][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.334242][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.343667][ T7582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.349340][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.352048][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.362763][ T7582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.410164][ T7582] hsr_slave_0: entered promiscuous mode [ 97.413593][ T7582] hsr_slave_1: entered promiscuous mode [ 97.415275][ T7640] SELinux: failed to load policy [ 97.416468][ T7582] debugfs: 'hsr0' already exists in 'hsr' [ 97.419540][ T7582] Cannot create hsr debugfs directory [ 97.559504][ T7650] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 97.578379][ T7652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=7652 comm=syz.3.547 [ 97.623472][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.627270][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.653863][ T7582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.661088][ T7582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.665274][ T7582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.670842][ T7582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.674772][ T7582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.680420][ T7582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.683798][ T7582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.689556][ T7582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.715171][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.718201][ T7582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.721511][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.724525][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.783820][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.788334][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.819227][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.857069][ T7582] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.865473][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.867833][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.878021][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.881014][ T7369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.220239][ T7582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.440849][ T7582] veth0_vlan: entered promiscuous mode [ 98.450932][ T7582] veth1_vlan: entered promiscuous mode [ 98.470181][ T7582] veth0_macvtap: entered promiscuous mode [ 98.476082][ T7582] veth1_macvtap: entered promiscuous mode [ 98.490390][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.501578][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.517174][ T5814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.522592][ T5814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.533984][ T5814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.537777][ T5814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.571531][ T5094] Bluetooth: hci4: command tx timeout [ 98.628448][ T7669] FAULT_INJECTION: forcing a failure. [ 98.628448][ T7669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.634466][ T7370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.637793][ T7370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.640900][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.4.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.640926][ T7669] Tainted: [L]=SOFTLOCKUP [ 98.640932][ T7669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.640942][ T7669] Call Trace: [ 98.640950][ T7669] [ 98.640958][ T7669] dump_stack_lvl+0x100/0x190 [ 98.640986][ T7669] should_fail_ex.cold+0x5/0xa [ 98.641007][ T7669] _copy_from_user+0x2e/0xd0 [ 98.641047][ T7669] restore_altstack+0x98/0x170 [ 98.641064][ T7669] ? __pfx_restore_altstack+0x10/0x10 [ 98.641083][ T7669] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.641116][ T7669] ? lockdep_hardirqs_on+0x78/0x100 [ 98.641135][ T7669] ? _raw_spin_unlock_irq+0x2e/0x50 [ 98.641152][ T7669] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 98.641173][ T7669] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 98.641193][ T7669] ? trace_hardirqs_off+0x70/0x170 [ 98.641222][ T7669] do_syscall_64+0x115/0x870 [ 98.641241][ T7669] ? clear_bhb_loop+0x40/0x90 [ 98.641265][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.641283][ T7669] RIP: 0033:0x7fac8133f319 [ 98.641299][ T7669] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 98.641315][ T7669] RSP: 002b:00007fac82299340 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 98.641333][ T7669] RAX: ffffffffffffffda RBX: 00007fac81625fa0 RCX: 00007fac8133f319 [ 98.641344][ T7669] RDX: 00007fac82299340 RSI: 00007fac82299470 RDI: 0000000000000011 [ 98.641354][ T7669] RBP: 00007fac8229a090 R08: 0000000000000000 R09: 0000000000000000 [ 98.641365][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.641375][ T7669] R13: 00007fac81626038 R14: 00007fac81625fa0 R15: 00007fff63040a78 [ 98.641395][ T7669] [ 98.688702][ T7365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.722706][ T7365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.780298][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.785287][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.789146][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.792948][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.796938][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.800652][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.803957][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.807475][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.810693][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.814432][ T7692] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 98.814492][ T7694] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 98.937745][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.557'. [ 99.020042][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.558'. [ 99.083436][ T7705] netlink: 1 bytes leftover after parsing attributes in process `syz.5.558'. [ 99.087911][ T7708] /dev/sg0: Can't lookup blockdev [ 99.090564][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 99.100950][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 99.117197][ T6836] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.119112][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 99.125503][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 99.126941][ T6836] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.140497][ T6836] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.162675][ T6836] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.194636][ T50] usb 6-1: USB disconnect, device number 3 [ 99.310559][ T7722] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7722 comm=syz.5.564 [ 99.334158][ T7722] netlink: 'syz.5.564': attribute type 1 has an invalid length. [ 99.392934][ T7722] team0: Port device dummy0 added [ 99.514941][ T7729] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 99.619908][ T7742] gfs2: path_lookup on c::: returned error -2 [ 99.714997][ T7748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7748 comm=syz.1.572 [ 99.725775][ T7748] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 99.751657][ T7748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 99.759899][ T7748] netlink: 'syz.1.572': attribute type 10 has an invalid length. [ 99.810444][ T7751] ucma_write: process 408 (syz.1.573) changed security contexts after opening file descriptor, this is not allowed. [ 99.891550][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 100.141439][ T7765] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3108460079 (12433840316 ns) > initial count (4732552468 ns). Using initial count to start timer. [ 100.150740][ T7765] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1462839683 (46810869856 ns) > initial count (35198749888 ns). Using initial count to start timer. [ 100.503970][ T7789] input: syz0 as /devices/virtual/input/input7 [ 100.550010][ T7794] dlm: no locking on control device [ 100.648912][ T7801] o2cb: This node has not been configured. [ 100.656611][ T7801] o2cb: Cluster check failed. Fix errors before retrying. [ 100.661765][ T5094] Bluetooth: hci4: command tx timeout [ 100.664799][ T7801] (syz.3.589,7801,3):user_dlm_register:674 ERROR: status = -22 [ 100.669076][ T7801] (syz.3.589,7801,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 100.679551][ T7801] __nla_validate_parse: 2 callbacks suppressed [ 100.679563][ T7801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.589'. [ 100.761313][ T7805] xt_hashlimit: size too large, truncated to 1048576 [ 100.767374][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 100.770864][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 100.774778][ T7807] FAULT_INJECTION: forcing a failure. [ 100.774778][ T7807] name failslab, interval 1, probability 0, space 0, times 0 [ 100.778680][ T7807] CPU: 3 UID: 0 PID: 7807 Comm: syz.4.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.778708][ T7807] Tainted: [L]=SOFTLOCKUP [ 100.778715][ T7807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.778725][ T7807] Call Trace: [ 100.778732][ T7807] [ 100.778739][ T7807] dump_stack_lvl+0x100/0x190 [ 100.778766][ T7807] should_fail_ex.cold+0x5/0xa [ 100.778785][ T7807] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 100.778830][ T7807] should_failslab+0xc2/0x120 [ 100.778854][ T7807] kmem_cache_alloc_noprof+0x91/0x6a0 [ 100.778876][ T7807] ? skb_clone+0x190/0x400 [ 100.778903][ T7807] skb_clone+0x190/0x400 [ 100.778926][ T7807] netlink_deliver_tap+0xaed/0xcc0 [ 100.778971][ T7807] netlink_unicast+0x62b/0x850 [ 100.778993][ T7807] ? __pfx_netlink_unicast+0x10/0x10 [ 100.779012][ T7807] ? __pfx_sock_has_perm+0x10/0x10 [ 100.779043][ T7807] netlink_sendmsg+0x8b0/0xda0 [ 100.779066][ T7807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.779087][ T7807] ? selinux_socket_sendmsg+0x198/0x2f0 [ 100.779117][ T7807] ____sys_sendmsg+0xa4d/0xbe0 [ 100.779143][ T7807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.779164][ T7807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.779194][ T7807] ? __pfx__kstrtoull+0x10/0x10 [ 100.779219][ T7807] ___sys_sendmsg+0x190/0x1e0 [ 100.779254][ T7807] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.779296][ T7807] ? find_held_lock+0x2b/0x80 [ 100.779341][ T7807] __sys_sendmmsg+0x20c/0x440 [ 100.779367][ T7807] ? __pfx___sys_sendmmsg+0x10/0x10 [ 100.779389][ T7807] ? ksys_write+0x190/0x250 [ 100.779436][ T7807] ? fput+0x79/0x100 [ 100.779457][ T7807] ? ksys_write+0x1ac/0x250 [ 100.779483][ T7807] ? __pfx_ksys_write+0x10/0x10 [ 100.779515][ T7807] __x64_sys_sendmmsg+0x9c/0x100 [ 100.779537][ T7807] ? lockdep_hardirqs_on+0x78/0x100 [ 100.779558][ T7807] do_syscall_64+0x115/0x870 [ 100.779577][ T7807] ? clear_bhb_loop+0x40/0x90 [ 100.779600][ T7807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.779619][ T7807] RIP: 0033:0x7fac8139df99 [ 100.779635][ T7807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.779651][ T7807] RSP: 002b:00007fac8229a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.779670][ T7807] RAX: ffffffffffffffda RBX: 00007fac81625fa0 RCX: 00007fac8139df99 [ 100.779681][ T7807] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 100.779692][ T7807] RBP: 00007fac8229a090 R08: 0000000000000000 R09: 0000000000000000 [ 100.779703][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.779713][ T7807] R13: 00007fac81626038 R14: 00007fac81625fa0 R15: 00007fff63040a78 [ 100.779738][ T7807] [ 100.779772][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 100.880040][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 101.176618][ T7825] kernel profiling enabled (shift: 9) [ 101.205177][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 101.205198][ T42] audit: type=1400 audit(1785421121.141:6041): avc: denied { perfmon } for pid=7826 comm="syz.5.597" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.274079][ T7830] ======================================================= [ 101.274079][ T7830] WARNING: The mand mount option has been deprecated and [ 101.274079][ T7830] and is ignored by this kernel. Remove the mand [ 101.274079][ T7830] option from the mount to silence this warning. [ 101.274079][ T7830] ======================================================= [ 101.289013][ T7830] overlayfs: failed to resolve 'defcontext=user_u': -2 [ 101.311416][ T7830] kvm: user requested TSC rate below hardware speed [ 101.338866][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 101.506107][ T7835] fuse: Bad value for 'rootmode' [ 101.512839][ T42] audit: type=1400 audit(1785421121.451:6042): avc: denied { read } for pid=7834 comm="syz.3.600" lport=33250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.622274][ T29] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 101.782556][ T29] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 101.787901][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.792732][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.800551][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 101.807109][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.818453][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.823395][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 101.830323][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.834184][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.838913][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 101.843324][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.845811][ T42] audit: type=1400 audit(1785421121.781:6043): avc: denied { execstack } for pid=7841 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 101.847328][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.875421][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 101.881912][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.891264][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.898772][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 101.907260][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.913406][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.917705][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 101.923859][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.927933][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.932884][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 101.936264][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.939584][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.940519][ T7848] 9p: Bad value for 'rfdno' [ 101.941363][ T42] audit: type=1400 audit(1785421121.871:6044): avc: denied { read } for pid=7847 comm="syz.3.605" dev="sockfs" ino=24863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.944129][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 101.957548][ T29] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 101.961800][ T29] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 101.965364][ T29] usb 10-1: Product: syz [ 101.967721][ T29] usb 10-1: Manufacturer: syz [ 101.969670][ T29] usb 10-1: SerialNumber: syz [ 101.973983][ T29] usb 10-1: config 0 descriptor?? [ 101.979657][ T29] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 102.042676][ T42] audit: type=1400 audit(1785421121.981:6045): avc: denied { getopt } for pid=7855 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.048986][ T7856] netlink: 144 bytes leftover after parsing attributes in process `syz.1.608'. [ 102.056915][ T42] audit: type=1400 audit(1785421121.991:6046): avc: denied { map } for pid=7855 comm="syz.1.608" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.058696][ T7856] binder: BINDER_SET_CONTEXT_MGR already set [ 102.064318][ T42] audit: type=1400 audit(1785421121.991:6047): avc: denied { set_context_mgr } for pid=7855 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.066320][ T7856] binder: 7855:7856 ioctl 4018620d 200000000100 returned -16 [ 102.140168][ T7863] netlink: 144 bytes leftover after parsing attributes in process `syz.4.611'. [ 102.140542][ T5094] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 102.227893][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 102.253397][ T42] audit: type=1400 audit(1785421122.191:6048): avc: denied { module_request } for pid=7867 comm="syz.3.614" kmod="crypto-gcm(sm4)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 102.350776][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 102.353849][ T7877] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.356606][ T7877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.360969][ T7877] IPv6: NLM_F_CREATE should be set when creating new route [ 102.363409][ T7877] IPv6: NLM_F_CREATE should be set when creating new route [ 102.393673][ T7879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.741480][ T5094] Bluetooth: hci4: command tx timeout [ 102.979482][ T7902] No source specified [ 102.985618][ T7899] loop5: detected capacity change from 0 to 14 [ 102.989931][ T7899] Dev loop5: unable to read RDB block 14 [ 102.993498][ T7899] loop5: unable to read partition table [ 102.995761][ T7899] loop5: partition table beyond EOD, truncated [ 102.999990][ T7899] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.054780][ T7910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.411349][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 103.592124][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 103.595227][ T34] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 103.598795][ T34] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 103.603339][ T34] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.606882][ T34] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 103.614448][ T34] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 103.617520][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.620024][ T34] usb 9-1: Product: syz [ 103.622633][ T34] usb 9-1: Manufacturer: syz [ 103.624234][ T34] usb 9-1: SerialNumber: syz [ 103.638695][ C3] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 103.648877][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input8 [ 103.852771][ T34] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 103.859550][ T34] (id 0x00) [ 103.912056][ T34] rc_core: IR keymap rc-imon-pad not found [ 103.913948][ T34] Registered IR keymap rc-empty [ 103.915624][ T34] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 103.918845][ T34] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 104.010529][ T7932] team0: Port device syz_tun added [ 104.030539][ T7929] X25: received unknown 00 with LCI 000 [ 104.052342][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 104.062571][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input9 [ 104.088647][ T34] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:7> initialized [ 104.127500][ T7930] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 104.132446][ T42] audit: type=1400 audit(1785421124.061:6049): avc: denied { write } for pid=7940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.173306][ T149] IPVS: starting estimator thread 0... [ 104.205071][ T42] audit: type=1400 audit(1785421124.141:6050): avc: denied { write } for pid=7946 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.252370][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 104.257341][ C1] usb 10-1: yurex_control_callback - control failed: -32 [ 104.261024][ T7951] tipc: Started in network mode [ 104.263955][ T149] usb 10-1: USB disconnect, device number 2 [ 104.268239][ T7951] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 104.275247][ T149] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 104.276279][ T7951] tipc: Enabled bearer , priority 10 [ 104.287293][ T7945] IPVS: using max 43 ests per chain, 103200 per kthread [ 104.295671][ T7951] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 104.298249][ T7951] ALSA: mixer_oss: invalid index 1374381 [ 104.300161][ T7951] ALSA: mixer_oss: invalid OSS volume '' [ 104.302620][ T7951] ALSA: mixer_oss: invalid OSS volume '' [ 104.317083][ T5815] usb 9-1: USB disconnect, device number 7 [ 104.811706][ T5094] Bluetooth: hci4: command tx timeout [ 105.040235][ T7997] netlink: 'syz.5.650': attribute type 2 has an invalid length. [ 105.124777][ T8001] input: syz0 as /devices/virtual/input/input10 [ 105.216177][ T8004] netlink: 'syz.5.652': attribute type 1 has an invalid length. [ 105.255469][ T8004] veth5: entered promiscuous mode [ 105.394138][ T41] tipc: Node number set to 4269801492 [ 105.654910][ T5822] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 105.764388][ T8028] kvm: kvm [8027]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 105.769863][ T8028] kvm: kvm [8027]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 105.803761][ T8033] netlink: 'syz.4.663': attribute type 21 has an invalid length. [ 105.807748][ T8033] usb usb8: usbfs: process 8033 (syz.4.663) did not claim interface 0 before use [ 105.813501][ T8034] comedi comedi0: Minor 3 could not be opened [ 105.831797][ T5822] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 105.838986][ T5822] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.843001][ T5822] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.847462][ T5822] usb 10-1: config 0 interface 0 has no altsetting 0 [ 105.851747][ T5822] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.856636][ T5822] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.864219][ T5822] usb 10-1: config 0 interface 0 has no altsetting 0 [ 105.869585][ T5822] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.878175][ T5822] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.884532][ T5822] usb 10-1: config 0 interface 0 has no altsetting 0 [ 105.888456][ T5822] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.893129][ T5822] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.897590][ T5822] usb 10-1: config 0 interface 0 has no altsetting 0 [ 105.901487][ T5822] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.905457][ T5822] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.909899][ T5822] usb 10-1: config 0 interface 0 has no altsetting 0 [ 105.913857][ T5822] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.917863][ T5822] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.922411][ T5822] usb 10-1: config 0 interface 0 has no altsetting 0 [ 105.926452][ T5822] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.930570][ T5822] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.935218][ T5822] usb 10-1: config 0 interface 0 has no altsetting 0 [ 105.938902][ T5822] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.942724][ T5822] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.947141][ T5822] usb 10-1: config 0 interface 0 has no altsetting 0 [ 105.951907][ T5822] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 105.955671][ T5822] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 105.959102][ T5822] usb 10-1: Product: syz [ 105.960874][ T5822] usb 10-1: Manufacturer: syz [ 105.962978][ T5822] usb 10-1: SerialNumber: syz [ 105.971369][ T5822] usb 10-1: config 0 descriptor?? [ 105.982839][ T5822] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 106.255096][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 106.255135][ T42] audit: type=1400 audit(1785421126.191:6068): avc: denied { ioctl } for pid=8048 comm="syz.4.667" path="socket:[26733]" dev="sockfs" ino=26733 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.271496][ T149] usb 10-1: USB disconnect, device number 3 [ 106.276888][ T149] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 106.730751][ T8059] __nla_validate_parse: 4 callbacks suppressed [ 106.730763][ T8059] netlink: 32 bytes leftover after parsing attributes in process `syz.4.670'. [ 106.738647][ T8057] net_ratelimit: 55 callbacks suppressed [ 106.738665][ T8057] 0: reclassify loop, rule prio 0, protocol 03 [ 106.820303][ T42] audit: type=1400 audit(1785421126.751:6069): avc: denied { write } for pid=8062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.821347][ T8065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 106.868781][ T42] audit: type=1400 audit(1785421126.801:6070): avc: denied { write } for pid=8070 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.061072][ T8085] netlink: 240 bytes leftover after parsing attributes in process `syz.3.677'. [ 107.077543][ T8087] Cannot find set identified by id 0 to match [ 107.113379][ T8089] syz_tun: entered allmulticast mode [ 107.138899][ T8090] syz_tun: left allmulticast mode [ 107.170304][ T42] audit: type=1400 audit(1785421127.101:6071): avc: denied { write } for pid=8096 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.178185][ T42] audit: type=1400 audit(1785421127.111:6072): avc: denied { mount } for pid=8096 comm="syz.3.681" name="/" dev="ramfs" ino=25220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.254646][ T42] audit: type=1400 audit(1785421127.191:6073): avc: denied { read } for pid=8103 comm="syz.5.683" dev="nsfs" ino=4026532865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.264408][ T42] audit: type=1400 audit(1785421127.191:6074): avc: denied { open } for pid=8103 comm="syz.5.683" path="net:[4026532865]" dev="nsfs" ino=4026532865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.365578][ T42] audit: type=1400 audit(1785421127.301:6075): avc: denied { setopt } for pid=8103 comm="syz.5.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.491234][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.642532][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.645957][ T41] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.649218][ T41] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.653575][ T41] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.656669][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.662134][ T41] usb 6-1: config 0 descriptor?? [ 108.071864][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.076648][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.079232][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.082374][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.085001][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.087496][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.090211][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.092815][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.095292][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.097756][ T41] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.120611][ T41] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 108.340187][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 108.344011][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 108.350018][ T42] audit: type=1400 audit(1785421128.281:6076): avc: denied { call } for pid=8105 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 108.364204][ T5815] usb 6-1: USB disconnect, device number 4 [ 108.722446][ T8120] openvswitch: netlink: Actions may not be safe on all matching packets [ 108.965809][ T8133] syzkaller0: entered promiscuous mode [ 108.968196][ T8133] syzkaller0: entered allmulticast mode [ 109.082735][ T42] audit: type=1400 audit(1785421129.021:6077): avc: denied { connect } for pid=8141 comm="syz.1.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.097950][ T8142] Bluetooth: hci3: Frame reassembly failed (-84) [ 109.101024][ T7366] Bluetooth: hci3: Frame reassembly failed (-84) [ 109.245375][ T8153] FAULT_INJECTION: forcing a failure. [ 109.245375][ T8153] name failslab, interval 1, probability 0, space 0, times 0 [ 109.250815][ T8153] CPU: 3 UID: 0 PID: 8153 Comm: syz.3.699 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.250843][ T8153] Tainted: [L]=SOFTLOCKUP [ 109.250850][ T8153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.250874][ T8153] Call Trace: [ 109.250899][ T8153] [ 109.250907][ T8153] dump_stack_lvl+0x100/0x190 [ 109.250959][ T8153] should_fail_ex.cold+0x5/0xa [ 109.250983][ T8153] should_failslab+0xc2/0x120 [ 109.251005][ T8153] kmem_cache_alloc_noprof+0x91/0x6a0 [ 109.251027][ T8153] ? __pfx_map_id_range_down+0x10/0x10 [ 109.251047][ T8153] ? rcu_is_watching+0x12/0xc0 [ 109.251074][ T8153] ? security_inode_alloc+0x3b/0x2c0 [ 109.251131][ T8153] security_inode_alloc+0x3b/0x2c0 [ 109.251157][ T8153] inode_init_always_gfp+0xc77/0xfb0 [ 109.251189][ T8153] alloc_inode+0x8e/0x250 [ 109.251214][ T8153] new_inode+0x22/0x1c0 [ 109.251242][ T8153] proc_pid_make_inode+0x22/0x160 [ 109.251270][ T8153] ? do_raw_spin_unlock+0x145/0x1e0 [ 109.251296][ T8153] proc_fd_instantiate+0x57/0x230 [ 109.251325][ T8153] proc_lookupfd+0x11f/0x200 [ 109.251349][ T8153] ? __pfx_proc_lookupfd+0x10/0x10 [ 109.251380][ T8153] ? __pfx_proc_lookupfd+0x10/0x10 [ 109.251406][ T8153] path_openat+0x241f/0x4280 [ 109.251437][ T8153] ? __pfx_path_openat+0x10/0x10 [ 109.251464][ T8153] do_file_open+0x20e/0x430 [ 109.251486][ T8153] ? __pfx_do_file_open+0x10/0x10 [ 109.251516][ T8153] ? __pfx_kfree_link+0x10/0x10 [ 109.251551][ T8153] ? alloc_fd+0x471/0x7a0 [ 109.251573][ T8153] ? do_getname+0x191/0x390 [ 109.251599][ T8153] do_sys_openat2+0x10f/0x1e0 [ 109.251623][ T8153] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.251646][ T8153] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.251678][ T8153] ? __fget_files+0x21f/0x3d0 [ 109.251701][ T8153] __x64_sys_openat+0x12d/0x210 [ 109.251725][ T8153] ? __pfx___x64_sys_openat+0x10/0x10 [ 109.251752][ T8153] ? ksys_write+0x1ac/0x250 [ 109.251788][ T8153] do_syscall_64+0x115/0x870 [ 109.251808][ T8153] ? clear_bhb_loop+0x40/0x90 [ 109.251830][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.251849][ T8153] RIP: 0033:0x7f1658b5e7ce [ 109.251867][ T8153] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.251905][ T8153] RSP: 002b:00007f1659aefec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.251941][ T8153] RAX: ffffffffffffffda RBX: 00007f1659af06c0 RCX: 00007f1658b5e7ce [ 109.251952][ T8153] RDX: 0000000000000002 RSI: 00007f1659aeff90 RDI: ffffffffffffff9c [ 109.251963][ T8153] RBP: 00007f1659af0090 R08: 0000000000000000 R09: 0000000000000000 [ 109.251975][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.252000][ T8153] R13: 00007f1658e26038 R14: 00007f1658e25fa0 R15: 00007ffd5c15c688 [ 109.252026][ T8153] [ 110.005620][ T8190] netlink: 240 bytes leftover after parsing attributes in process `syz.4.709'. [ 110.138883][ T8193] netlink: 'syz.3.711': attribute type 21 has an invalid length. [ 110.141303][ T8193] netlink: 128 bytes leftover after parsing attributes in process `syz.3.711'. [ 110.143996][ T8193] netlink: 'syz.3.711': attribute type 5 has an invalid length. [ 110.146308][ T8193] netlink: 'syz.3.711': attribute type 6 has an invalid length. [ 110.148555][ T8193] netlink: 3 bytes leftover after parsing attributes in process `syz.3.711'. [ 110.152319][ T8193] netlink: 'syz.3.711': attribute type 21 has an invalid length. [ 110.154716][ T8193] netlink: 128 bytes leftover after parsing attributes in process `syz.3.711'. [ 110.157535][ T8193] netlink: 'syz.3.711': attribute type 5 has an invalid length. [ 110.160009][ T8193] netlink: 'syz.3.711': attribute type 6 has an invalid length. [ 110.162468][ T8193] netlink: 3 bytes leftover after parsing attributes in process `syz.3.711'. [ 110.453790][ T8201] 9pnet_fd: p9_fd_create_tcp (8201): problem connecting socket to 127.0.0.1 [ 111.131819][ T64] Bluetooth: hci3: command 0xfc11 tx timeout [ 111.132412][ T5094] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 111.379569][ T8224] overlayfs: failed to resolve './file0': -2 [ 111.479094][ T8228] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 111.615379][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 111.615413][ T42] audit: type=1400 audit(1785421131.561:6095): avc: denied { write } for pid=8233 comm="syz.1.727" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.638493][ T42] audit: type=1400 audit(1785421131.571:6096): avc: denied { remove_name } for pid=8233 comm="syz.1.727" name="file0" dev="9p" ino=76573405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.658837][ T42] audit: type=1400 audit(1785421131.571:6097): avc: denied { unlink } for pid=8233 comm="syz.1.727" name="file0" dev="9p" ino=76573405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.668677][ T42] audit: type=1400 audit(1785421131.591:6098): avc: denied { write } for pid=8233 comm="syz.1.727" name="/" dev="9p" ino=76573399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.685849][ T42] audit: type=1400 audit(1785421131.591:6099): avc: denied { create } for pid=8233 comm="syz.1.727" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.702096][ T42] audit: type=1400 audit(1785421131.611:6100): avc: denied { bind } for pid=8229 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 111.714896][ T42] audit: type=1400 audit(1785421131.621:6101): avc: denied { connect } for pid=8229 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 111.797790][ T5815] e1000 0000:00:06.0 eth0: Reset adapter [ 111.839221][ T42] audit: type=1400 audit(1785421131.771:6102): avc: denied { write } for pid=8239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.898754][ T42] audit: type=1400 audit(1785421131.831:6103): avc: denied { write } for pid=8243 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.044269][ T42] audit: type=1400 audit(1785421131.981:6104): avc: denied { write } for pid=8245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.131659][ T8252] FAULT_INJECTION: forcing a failure. [ 112.131659][ T8252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.156896][ T8252] CPU: 1 UID: 0 PID: 8252 Comm: syz.4.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.156918][ T8252] Tainted: [L]=SOFTLOCKUP [ 112.156922][ T8252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.156935][ T8252] Call Trace: [ 112.156952][ T8252] [ 112.156957][ T8252] dump_stack_lvl+0x100/0x190 [ 112.156989][ T8252] should_fail_ex.cold+0x5/0xa [ 112.157001][ T8252] ? prepare_alloc_pages+0x16d/0x5f0 [ 112.157019][ T8252] should_fail_alloc_page+0xeb/0x140 [ 112.157040][ T8252] prepare_alloc_pages+0x1f0/0x5f0 [ 112.157058][ T8252] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 112.157076][ T8252] ? stack_trace_save+0x8e/0xc0 [ 112.157089][ T8252] ? __pfx_stack_trace_save+0x10/0x10 [ 112.157101][ T8252] ? stack_depot_save_flags+0x27/0x9d0 [ 112.157127][ T8252] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.157141][ T8252] ? kasan_save_stack+0x3f/0x50 [ 112.157154][ T8252] ? kasan_save_stack+0x30/0x50 [ 112.157166][ T8252] ? kasan_save_track+0x14/0x30 [ 112.157179][ T8252] ? __kasan_slab_alloc+0x89/0x90 [ 112.157192][ T8252] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 112.157205][ T8252] ? security_inode_alloc+0x3b/0x2c0 [ 112.157227][ T8252] ? inode_init_always_gfp+0xc77/0xfb0 [ 112.157244][ T8252] ? alloc_inode+0x8e/0x250 [ 112.157259][ T8252] ? new_inode+0x22/0x1c0 [ 112.157273][ T8252] ? __debugfs_create_file+0x105/0x4f0 [ 112.157299][ T8252] ? debugfs_create_file_full+0x41/0x60 [ 112.157317][ T8252] ? ref_tracker_dir_debugfs+0x19e/0x2e0 [ 112.157333][ T8252] ? alloc_netdev_mqs+0x314/0x15c0 [ 112.157356][ T8252] ? rtnl_create_link+0xc13/0xf80 [ 112.157370][ T8252] ? rtnl_newlink+0x13bd/0x2380 [ 112.157384][ T8252] ? look_up_lock_class+0x64/0x120 [ 112.157402][ T8252] ? netlink_rcv_skb+0x159/0x420 [ 112.157420][ T8252] ? do_syscall_64+0x115/0x870 [ 112.157432][ T8252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.157447][ T8252] ? __lock_acquire+0x49f/0x1a40 [ 112.157461][ T8252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.157476][ T8252] ? policy_nodemask+0xed/0x4f0 [ 112.157493][ T8252] alloc_pages_mpol+0x1fb/0x540 [ 112.157509][ T8252] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 112.157524][ T8252] ? do_raw_spin_lock+0x128/0x260 [ 112.157541][ T8252] ? find_held_lock+0x2b/0x80 [ 112.157559][ T8252] ? inode_doinit_with_dentry+0x70b/0x1320 [ 112.157581][ T8252] alloc_pages_noprof+0x1a/0x160 [ 112.157599][ T8252] get_free_pages_noprof+0x10/0xb0 [ 112.157613][ T8252] inode_doinit_with_dentry+0x788/0x1320 [ 112.157633][ T8252] ? inode_set_ctime_current+0x283/0x850 [ 112.157647][ T8252] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 112.157665][ T8252] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 112.157678][ T8252] ? new_inode+0x15a/0x1c0 [ 112.157696][ T8252] selinux_d_instantiate+0x26/0x40 [ 112.157714][ T8252] security_d_instantiate+0x14c/0x1b0 [ 112.157728][ T8252] d_make_persistent+0x64/0x180 [ 112.157745][ T8252] __debugfs_create_file+0x25e/0x4f0 [ 112.157766][ T8252] debugfs_create_file_full+0x41/0x60 [ 112.157787][ T8252] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 112.157804][ T8252] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 112.157834][ T8252] ? lockdep_init_map_type+0x5c/0x250 [ 112.157850][ T8252] ? __pfx_vlan_setup+0x10/0x10 [ 112.157866][ T8252] alloc_netdev_mqs+0x314/0x15c0 [ 112.157884][ T8252] rtnl_create_link+0xc13/0xf80 [ 112.157901][ T8252] rtnl_newlink+0x13bd/0x2380 [ 112.157921][ T8252] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.157935][ T8252] ? find_held_lock+0x2b/0x80 [ 112.157953][ T8252] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 112.157966][ T8252] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 112.157982][ T8252] ? avc_has_perm_noaudit+0x145/0x3b0 [ 112.158008][ T8252] ? find_held_lock+0x2b/0x80 [ 112.158028][ T8252] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 112.158043][ T8252] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 112.158059][ T8252] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.158075][ T8252] rtnetlink_rcv_msg+0x95e/0xe90 [ 112.158092][ T8252] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.158111][ T8252] ? ref_tracker_free+0x37e/0x6c0 [ 112.158129][ T8252] netlink_rcv_skb+0x159/0x420 [ 112.158141][ T8252] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.158157][ T8252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.158174][ T8252] ? netlink_deliver_tap+0x1ae/0xcc0 [ 112.158195][ T8252] netlink_unicast+0x585/0x850 [ 112.158209][ T8252] ? __pfx_netlink_unicast+0x10/0x10 [ 112.158224][ T8252] netlink_sendmsg+0x8b0/0xda0 [ 112.158238][ T8252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.158252][ T8252] ? selinux_socket_sendmsg+0x198/0x2f0 [ 112.158272][ T8252] ____sys_sendmsg+0xa4d/0xbe0 [ 112.158294][ T8252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.158307][ T8252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.158331][ T8252] ___sys_sendmsg+0x190/0x1e0 [ 112.158350][ T8252] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.158368][ T8252] ? __lock_acquire+0x49f/0x1a40 [ 112.158382][ T8252] ? get_pid_task+0x106/0x250 [ 112.158416][ T8252] __sys_sendmsg+0x160/0x210 [ 112.158431][ T8252] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.158454][ T8252] do_syscall_64+0x115/0x870 [ 112.158466][ T8252] ? clear_bhb_loop+0x40/0x90 [ 112.158480][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.158492][ T8252] RIP: 0033:0x7fac8139df99 [ 112.158503][ T8252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.158514][ T8252] RSP: 002b:00007fac8229a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.158537][ T8252] RAX: ffffffffffffffda RBX: 00007fac81625fa0 RCX: 00007fac8139df99 [ 112.158544][ T8252] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 112.158550][ T8252] RBP: 00007fac8229a090 R08: 0000000000000000 R09: 0000000000000000 [ 112.158557][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.158563][ T8252] R13: 00007fac81626038 R14: 00007fac81625fa0 R15: 00007fff63040a78 [ 112.158577][ T8252] [ 112.439156][ T8263] __nla_validate_parse: 9 callbacks suppressed [ 112.439168][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 112.452493][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 112.465152][ T8263] FAULT_INJECTION: forcing a failure. [ 112.465152][ T8263] name failslab, interval 1, probability 0, space 0, times 0 [ 112.470786][ T8263] CPU: 2 UID: 0 PID: 8263 Comm: syz.4.733 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.470806][ T8263] Tainted: [L]=SOFTLOCKUP [ 112.470810][ T8263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.470817][ T8263] Call Trace: [ 112.470821][ T8263] [ 112.470825][ T8263] dump_stack_lvl+0x100/0x190 [ 112.470845][ T8263] should_fail_ex.cold+0x5/0xa [ 112.470861][ T8263] should_failslab+0xc2/0x120 [ 112.470876][ T8263] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 112.470891][ T8263] ? __alloc_skb+0x140/0x710 [ 112.470907][ T8263] __alloc_skb+0x140/0x710 [ 112.470919][ T8263] ? __alloc_skb+0x5b7/0x710 [ 112.470932][ T8263] ? __pfx___alloc_skb+0x10/0x10 [ 112.470945][ T8263] ? __igmp_group_dropped+0xb04/0x1110 [ 112.470972][ T8263] ? __igmp_group_dropped+0xb04/0x1110 [ 112.470992][ T8263] inet_ifmcaddr_notify+0xc7/0x1b0 [ 112.471011][ T8263] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 112.471034][ T8263] __ip_mc_dec_group+0x26c/0x340 [ 112.471074][ T8263] inetdev_event+0x142/0x17f0 [ 112.471088][ T8263] ? ib_netdevice_event+0xfc/0x330 [ 112.471107][ T8263] ? __pfx_inetdev_event+0x10/0x10 [ 112.471119][ T8263] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 112.471140][ T8263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.471157][ T8263] notifier_call_chain+0x99/0x3f0 [ 112.471172][ T8263] call_netdevice_notifiers_info+0xbe/0x110 [ 112.471190][ T8263] __dev_notify_flags+0x1f7/0x2e0 [ 112.471204][ T8263] ? __pfx___dev_notify_flags+0x10/0x10 [ 112.471220][ T8263] ? __pfx___dev_change_flags+0x10/0x10 [ 112.471237][ T8263] netif_change_flags+0x108/0x160 [ 112.471252][ T8263] do_setlink.isra.0+0x1ac4/0x3e60 [ 112.471272][ T8263] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 112.471289][ T8263] ? __lock_acquire+0x49f/0x1a40 [ 112.471309][ T8263] ? lock_acquire+0x1b9/0x370 [ 112.471325][ T8263] ? rcu_is_watching+0x12/0xc0 [ 112.471343][ T8263] ? trace_contention_end+0x126/0x160 [ 112.471358][ T8263] ? __mutex_lock+0x26d/0x1bd0 [ 112.471372][ T8263] ? rtnl_newlink+0x8bb/0x2380 [ 112.471389][ T8263] ? __pfx___mutex_lock+0x10/0x10 [ 112.471402][ T8263] ? rcu_is_watching+0x12/0xc0 [ 112.471419][ T8263] ? cap_capable+0x107/0x430 [ 112.471443][ T8263] rtnl_newlink+0x11c2/0x2380 [ 112.471462][ T8263] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.471476][ T8263] ? find_held_lock+0x2b/0x80 [ 112.471494][ T8263] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 112.471508][ T8263] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 112.471524][ T8263] ? avc_has_perm_noaudit+0x145/0x3b0 [ 112.471549][ T8263] ? find_held_lock+0x2b/0x80 [ 112.471566][ T8263] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 112.471581][ T8263] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 112.471597][ T8263] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.471612][ T8263] rtnetlink_rcv_msg+0x95e/0xe90 [ 112.471629][ T8263] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.471648][ T8263] ? ref_tracker_free+0x37e/0x6c0 [ 112.471667][ T8263] netlink_rcv_skb+0x159/0x420 [ 112.471679][ T8263] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.471695][ T8263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.471716][ T8263] ? netlink_deliver_tap+0x1ae/0xcc0 [ 112.471738][ T8263] netlink_unicast+0x585/0x850 [ 112.471751][ T8263] ? __pfx_netlink_unicast+0x10/0x10 [ 112.471767][ T8263] netlink_sendmsg+0x8b0/0xda0 [ 112.471780][ T8263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.471793][ T8263] ? selinux_socket_sendmsg+0x198/0x2f0 [ 112.471813][ T8263] ____sys_sendmsg+0xa4d/0xbe0 [ 112.471830][ T8263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.471843][ T8263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.471887][ T8263] ___sys_sendmsg+0x190/0x1e0 [ 112.471907][ T8263] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.471925][ T8263] ? __lock_acquire+0x49f/0x1a40 [ 112.471939][ T8263] ? get_pid_task+0x106/0x250 [ 112.471973][ T8263] __sys_sendmsg+0x160/0x210 [ 112.471988][ T8263] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.472010][ T8263] do_syscall_64+0x115/0x870 [ 112.472022][ T8263] ? clear_bhb_loop+0x40/0x90 [ 112.472036][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.472048][ T8263] RIP: 0033:0x7fac8139df99 [ 112.472059][ T8263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.472070][ T8263] RSP: 002b:00007fac8229a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.472082][ T8263] RAX: ffffffffffffffda RBX: 00007fac81625fa0 RCX: 00007fac8139df99 [ 112.472089][ T8263] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 112.472096][ T8263] RBP: 00007fac8229a090 R08: 0000000000000000 R09: 0000000000000000 [ 112.472102][ T8263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.472108][ T8263] R13: 00007fac81626038 R14: 00007fac81625fa0 R15: 00007fff63040a78 [ 112.472123][ T8263] [ 114.017762][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 117.810126][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 117.810142][ T42] audit: type=1400 audit(1785421137.741:6110): avc: denied { write } for pid=8276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.861385][ T42] audit: type=1400 audit(1785421137.801:6111): avc: denied { write } for pid=8279 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.690863][ T42] audit: type=1400 audit(1785421139.621:6112): avc: denied { write } for pid=8281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.747973][ T42] audit: type=1400 audit(1785421139.681:6113): avc: denied { write } for pid=8284 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.811453][ T42] audit: type=1400 audit(1785421141.751:6114): avc: denied { append } for pid=8287 comm="syz.1.737" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 121.833165][ T42] audit: type=1400 audit(1785421141.761:6115): avc: denied { read } for pid=8288 comm="syz.5.736" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.841478][ T42] audit: type=1400 audit(1785421141.761:6116): avc: denied { open } for pid=8288 comm="syz.5.736" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.848454][ T42] audit: type=1400 audit(1785421141.771:6117): avc: denied { ioctl } for pid=8288 comm="syz.5.736" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.872302][ T42] audit: type=1400 audit(1785421141.811:6118): avc: denied { read } for pid=8298 comm="syz.1.740" name="trace_pipe" dev="tracefs" ino=2729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 122.096046][ T8308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.239037][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 122.589562][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.745'. [ 122.730037][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 122.756381][ T8322] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.775143][ T8320] syzkaller0: entered promiscuous mode [ 122.777637][ T8320] syzkaller0: entered allmulticast mode [ 122.779875][ T42] audit: type=1400 audit(1785421142.711:6119): avc: denied { create } for pid=8323 comm="syz.5.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 122.805223][ T8322] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.815407][ T8359] nfs4: Unknown parameter 'rdma/sequencer2' [ 125.824498][ T8362] netlink: 'syz.1.759': attribute type 7 has an invalid length. [ 125.827707][ T8362] netlink: 'syz.1.759': attribute type 7 has an invalid length. [ 125.998044][ T8367] FAULT_INJECTION: forcing a failure. [ 125.998044][ T8367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.007527][ T8367] CPU: 3 UID: 0 PID: 8367 Comm: syz.5.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.007548][ T8367] Tainted: [L]=SOFTLOCKUP [ 126.007552][ T8367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.007568][ T8367] Call Trace: [ 126.007585][ T8367] [ 126.007590][ T8367] dump_stack_lvl+0x100/0x190 [ 126.007621][ T8367] should_fail_ex.cold+0x5/0xa [ 126.007636][ T8367] _copy_from_user+0x2e/0xd0 [ 126.007660][ T8367] kstrtouint_from_user+0xd6/0x1d0 [ 126.007673][ T8367] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 126.007685][ T8367] ? __lock_acquire+0x49f/0x1a40 [ 126.007705][ T8367] proc_fail_nth_write+0x83/0x220 [ 126.007729][ T8367] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.007750][ T8367] vfs_write+0x2aa/0x1050 [ 126.007769][ T8367] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.007787][ T8367] ? __pfx_vfs_write+0x10/0x10 [ 126.007830][ T8367] ? __fget_files+0x215/0x3d0 [ 126.007851][ T8367] ? __fget_files+0x21f/0x3d0 [ 126.007866][ T8367] ksys_write+0x12a/0x250 [ 126.007884][ T8367] ? __pfx_ksys_write+0x10/0x10 [ 126.007906][ T8367] do_syscall_64+0x115/0x870 [ 126.007925][ T8367] ? clear_bhb_loop+0x40/0x90 [ 126.007939][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.007951][ T8367] RIP: 0033:0x7ff69455e7ce [ 126.007974][ T8367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.007986][ T8367] RSP: 002b:00007ff6954ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.008012][ T8367] RAX: ffffffffffffffda RBX: 00007ff6954ed6c0 RCX: 00007ff69455e7ce [ 126.008020][ T8367] RDX: 0000000000000001 RSI: 00007ff6954ed0a0 RDI: 0000000000000006 [ 126.008026][ T8367] RBP: 00007ff6954ed090 R08: 0000000000000000 R09: 0000000000000000 [ 126.008033][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.008039][ T8367] R13: 00007ff694826038 R14: 00007ff694825fa0 R15: 00007ffc59a28378 [ 126.008058][ T8367] [ 126.185126][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 126.185140][ T42] audit: type=1400 audit(1785421146.121:6121): avc: denied { read } for pid=8371 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.204768][ T8372] XFS (nbd1): SB validate failed with error -5. [ 126.360799][ T8383] netlink: 'syz.1.765': attribute type 7 has an invalid length. [ 126.363436][ T8383] netlink: 'syz.1.765': attribute type 27 has an invalid length. [ 126.366394][ T8383] netlink: 'syz.1.765': attribute type 7 has an invalid length. [ 126.368835][ T8383] netlink: 'syz.1.765': attribute type 27 has an invalid length. [ 126.620755][ T8392] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 126.679387][ T8396] xt_hashlimit: size too large, truncated to 1048576 [ 126.968924][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 126.985974][ T8412] macvlan2: entered allmulticast mode [ 126.995232][ T8412] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 127.010932][ T41] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 127.079641][ T8418] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 127.231237][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 127.235432][ T41] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 127.238610][ T41] usb 9-1: config 0 has no interface number 0 [ 127.240703][ T41] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.240789][ T42] audit: type=1400 audit(1785421147.161:6122): avc: denied { write } for pid=8422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.247220][ T41] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 127.256622][ T41] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 127.261245][ T41] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 127.265738][ T41] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.273602][ T41] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 127.277348][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.280658][ T41] usb 9-1: Product: syz [ 127.282577][ T41] usb 9-1: Manufacturer: syz [ 127.284570][ T41] usb 9-1: SerialNumber: syz [ 127.290293][ T42] audit: type=1400 audit(1785421147.211:6123): avc: denied { write } for pid=8425 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.296738][ T41] usb 9-1: config 0 descriptor?? [ 127.311649][ T41] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input11 [ 127.510625][ T42] audit: type=1400 audit(1785421147.441:6124): avc: denied { append } for pid=8395 comm="syz.4.771" name="event4" dev="devtmpfs" ino=3140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 127.698550][ T8401] netlink: 60 bytes leftover after parsing attributes in process `syz.4.771'. [ 127.721955][ T5094] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 127.784347][ T5094] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.846372][ T41] usb 9-1: USB disconnect, device number 8 [ 128.070168][ T8392] Set syz1 is full, maxelem 65536 reached [ 128.582103][ T8448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.584994][ T8448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.587081][ T8448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.589213][ T8448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.591268][ T8448] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.610501][ T8448] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.678920][ T8456] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.861238][ T1351] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 128.982626][ T8469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.011407][ T1351] usb 8-1: device descriptor read/64, error -71 [ 129.256454][ T8482] syzkaller0: entered promiscuous mode [ 129.258838][ T8482] syzkaller0: entered allmulticast mode [ 129.266080][ T1351] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 129.391326][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 129.394646][ T1351] usb 8-1: device descriptor read/64, error -71 [ 129.417722][ T42] audit: type=1400 audit(1785421149.351:6125): avc: denied { write } for pid=8483 comm="syz.4.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 129.515414][ T1351] usb usb8-port1: attempt power cycle [ 129.551268][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 129.554366][ T29] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.561236][ T29] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.566614][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.570108][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.574559][ T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.577842][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.582637][ T29] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.585311][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.589669][ T29] usb 10-1: config 0 descriptor?? [ 129.606110][ T5094] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 129.693237][ T1166] wlan1: Trigger new scan to find an IBSS to join [ 129.768363][ T8497] ip6erspan0: entered allmulticast mode [ 129.804496][ T29] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 129.861309][ T1351] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 129.882268][ T1351] usb 8-1: device descriptor read/8, error -71 [ 129.900459][ T8504] netlink: 868 bytes leftover after parsing attributes in process `syz.1.802'. [ 130.009173][ T8480] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 130.012439][ T42] audit: type=1400 audit(1785421149.941:6126): avc: denied { ioctl } for pid=8479 comm="syz.5.795" path="/dev/usb/lp0" dev="devtmpfs" ino=3151 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 130.025531][ T8480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.029050][ T8480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.032852][ T5094] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 130.035837][ T149] usb 10-1: USB disconnect, device number 4 [ 130.043906][ T149] usblp0: removed [ 130.132203][ T1351] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 130.161986][ T1351] usb 8-1: device descriptor read/8, error -71 [ 130.272200][ T1351] usb usb8-port1: unable to enumerate USB device [ 130.391275][ T8526] input: syz0 as /devices/virtual/input/input12 [ 130.419245][ T8526] 8021q: VLANs not supported on sit0 [ 130.651374][ T5094] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.651438][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.977252][ T8542] netlink: 'syz.5.815': attribute type 63 has an invalid length. [ 130.980324][ T8542] netlink: 5 bytes leftover after parsing attributes in process `syz.5.815'. [ 131.172152][ T8548] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.287034][ T42] audit: type=1400 audit(1785421151.221:6127): avc: denied { append } for pid=8549 comm="syz.4.818" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.407211][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.819'. [ 131.413282][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.819'. [ 131.416589][ T8555] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 131.579375][ T8559] syzkaller0: entered promiscuous mode [ 131.581785][ T8559] syzkaller0: entered allmulticast mode [ 131.644822][ T42] audit: type=1400 audit(1785421151.581:6128): avc: denied { setattr } for pid=7582 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.946919][ T42] audit: type=1400 audit(1785421151.871:6129): avc: denied { write } for pid=8565 comm="syz.1.824" name="configs" dev="configfs" ino=11428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.959643][ T42] audit: type=1400 audit(1785421151.891:6130): avc: denied { write } for pid=8565 comm="syz.1.824" name="header" dev="configfs" ino=16798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.977140][ T42] audit: type=1400 audit(1785421151.911:6131): avc: denied { write } for pid=8565 comm="syz.1.824" name="fs" dev="configfs" ino=16807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.997497][ T42] audit: type=1400 audit(1785421151.921:6132): avc: denied { create } for pid=8565 comm="syz.1.824" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 132.022324][ T42] audit: type=1400 audit(1785421151.921:6133): avc: denied { write } for pid=8565 comm="syz.1.824" name="fs" dev="configfs" ino=16807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.039219][ T42] audit: type=1400 audit(1785421151.941:6134): avc: denied { write } for pid=8565 comm="syz.1.824" name="ss" dev="configfs" ino=16808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.046473][ T42] audit: type=1400 audit(1785421151.941:6135): avc: denied { write } for pid=8565 comm="syz.1.824" name="ss" dev="configfs" ino=16808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.287382][ T8575] ip6gretap0: entered promiscuous mode [ 132.658014][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660751][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.864853][ T8593] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.171248][ T8597] xt_hashlimit: size too large, truncated to 1048576 [ 133.281316][ T8607] netlink: 168 bytes leftover after parsing attributes in process `syz.3.835'. [ 133.491278][ T6663] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 133.616361][ T41] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 133.641378][ T6663] usb 6-1: Using ep0 maxpacket: 32 [ 133.646035][ T6663] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 133.649528][ T6663] usb 6-1: config 0 has no interface number 0 [ 133.654492][ T6663] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.658908][ T6663] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 133.663933][ T6663] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 133.668664][ T6663] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 133.673802][ T6663] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.681999][ T6663] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 133.686961][ T6663] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.690318][ T6663] usb 6-1: Product: syz [ 133.694020][ T6663] usb 6-1: Manufacturer: syz [ 133.696012][ T6663] usb 6-1: SerialNumber: syz [ 133.702380][ T6663] usb 6-1: config 0 descriptor?? [ 133.718546][ T6663] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input14 [ 133.858498][ T41] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 133.861948][ T41] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 133.865720][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.869428][ T41] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.872693][ T41] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.875978][ T41] usb 8-1: Product: syz [ 133.877677][ T41] usb 8-1: Manufacturer: syz [ 133.879540][ T41] usb 8-1: SerialNumber: syz [ 133.884438][ T41] usb 8-1: config 0 descriptor?? [ 133.889024][ T41] hub 8-1:0.0: bad descriptor, ignoring hub [ 133.891621][ T41] hub 8-1:0.0: probe with driver hub failed with error -5 [ 133.896848][ T41] usb 8-1: selecting invalid altsetting 0 [ 134.131809][ T8597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.832'. [ 134.144058][ T64] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 134.145473][ T5094] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 134.216502][ T50] usb 6-1: USB disconnect, device number 5 [ 134.278957][ T41] usb 8-1: USB disconnect, device number 19 [ 134.661788][ T1269] wlan1: Trigger new scan to find an IBSS to join [ 134.839226][ T8641] fuse: Unknown parameter 'u{er_id' [ 134.920121][ T8647] futex_wake_op: syz.1.846 tries to shift op by 144; fix this program [ 134.925062][ T8647] futex_wake_op: syz.1.846 tries to shift op by 144; fix this program [ 134.987037][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 135.013632][ T8651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.022289][ T8651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.037154][ T8651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.040184][ T8651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.190764][ T8653] netlink: 59 bytes leftover after parsing attributes in process `syz.4.848'. [ 135.239237][ T42] audit: type=1400 audit(1785421155.171:6136): avc: denied { getopt } for pid=8654 comm="syz.1.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.423537][ T8662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.475249][ T8662] dummy_hcd dummy_hcd.0: remove, state 4 [ 135.493834][ T8662] usb usb5: USB disconnect, device number 1 [ 135.521576][ T8665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.695060][ T8662] dummy_hcd dummy_hcd.0: stopped [ 135.696885][ T8662] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 135.831245][ T41] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 135.981392][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 135.992836][ T41] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 135.998834][ T41] usb 9-1: config 0 has no interface number 0 [ 136.011254][ T41] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.016877][ T41] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 136.033225][ T41] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 136.044022][ T41] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.068505][ T41] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 136.074342][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.077688][ T41] usb 9-1: Product: syz [ 136.079218][ T41] usb 9-1: Manufacturer: syz [ 136.080725][ T41] usb 9-1: SerialNumber: syz [ 136.085327][ T41] usb 9-1: config 0 descriptor?? [ 136.109223][ T41] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input15 [ 136.156395][ T8670] xt_hashlimit: size too large, truncated to 1048576 [ 136.286292][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 136.290258][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 136.298533][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 136.303075][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 136.339888][ T50] usb 9-1: USB disconnect, device number 9 [ 136.505604][ T41] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 136.524499][ T8679] syz.1.857 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 136.671350][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 136.677444][ T41] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 136.681091][ T41] usb 8-1: config 0 has no interface number 0 [ 136.685660][ T41] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.690271][ T41] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 136.695552][ T41] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 136.700314][ T41] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 136.705320][ T41] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.716231][ T41] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 136.720249][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.723874][ T41] usb 8-1: Product: syz [ 136.725691][ T41] usb 8-1: Manufacturer: syz [ 136.728055][ T41] usb 8-1: SerialNumber: syz [ 136.742316][ T41] usb 8-1: config 0 descriptor?? [ 136.764213][ T41] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input16 [ 136.922881][ T8687] xt_hashlimit: size too large, truncated to 1048576 [ 137.085318][ T8691] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 137.107136][ T8691] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 137.115985][ T8691] kvm: requested 32685 ns i8254 timer period limited to 200000 ns [ 137.171019][ T8691] kvm: requested 146666 ns i8254 timer period limited to 200000 ns [ 137.180585][ T8691] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 137.190837][ T8691] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 137.203403][ T8670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.854'. [ 137.204105][ T8691] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 137.221049][ T5094] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 137.283519][ T5842] usb 8-1: USB disconnect, device number 20 [ 137.377790][ T8703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.387186][ T8703] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 137.391516][ T8703] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 137.394101][ T8703] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 137.399325][ T8703] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 137.596248][ T8703] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 137.599076][ T8703] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 137.602775][ T8703] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 137.674427][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 137.674450][ T42] audit: type=1400 audit(1785421157.611:6138): avc: denied { append } for pid=8714 comm="syz.1.867" name="uprobe_events" dev="tracefs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 137.692909][ T1269] wlan1: Trigger new scan to find an IBSS to join [ 137.710871][ T42] audit: type=1400 audit(1785421157.641:6139): avc: denied { name_bind } for pid=8716 comm="syz.1.868" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 138.333019][ T8747] smc: net device dummy0 applied user defined pnetid SYZ0 [ 138.342900][ T8747] smc: net device xfrm0 applied user defined pnetid SYZ0 [ 138.395927][ T8752] xt_hashlimit: size too large, truncated to 1048576 [ 138.515888][ T42] audit: type=1400 audit(1785421158.451:6140): avc: denied { write } for pid=8755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.582369][ T42] audit: type=1400 audit(1785421158.521:6141): avc: denied { write } for pid=8761 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.600873][ T8763] FAULT_INJECTION: forcing a failure. [ 138.600873][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 138.606944][ T8763] CPU: 3 UID: 0 PID: 8763 Comm: syz.3.882 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.606963][ T8763] Tainted: [L]=SOFTLOCKUP [ 138.606967][ T8763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.606981][ T8763] Call Trace: [ 138.607019][ T8763] [ 138.607026][ T8763] dump_stack_lvl+0x100/0x190 [ 138.607075][ T8763] should_fail_ex.cold+0x5/0xa [ 138.607094][ T8763] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 138.607136][ T8763] should_failslab+0xc2/0x120 [ 138.607158][ T8763] kmem_cache_alloc_noprof+0x91/0x6a0 [ 138.607180][ T8763] ? skb_clone+0x190/0x400 [ 138.607217][ T8763] skb_clone+0x190/0x400 [ 138.607252][ T8763] netlink_deliver_tap+0xaed/0xcc0 [ 138.607297][ T8763] netlink_unicast+0x6a5/0x850 [ 138.607318][ T8763] ? __pfx_netlink_unicast+0x10/0x10 [ 138.607342][ T8763] netlink_ack+0x655/0xb80 [ 138.607364][ T8763] netlink_rcv_skb+0x333/0x420 [ 138.607381][ T8763] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.607407][ T8763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.607433][ T8763] ? netlink_deliver_tap+0x1ae/0xcc0 [ 138.607463][ T8763] netlink_unicast+0x585/0x850 [ 138.607483][ T8763] ? __pfx_netlink_unicast+0x10/0x10 [ 138.607507][ T8763] netlink_sendmsg+0x8b0/0xda0 [ 138.607528][ T8763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.607547][ T8763] ? selinux_socket_sendmsg+0x198/0x2f0 [ 138.607586][ T8763] ____sys_sendmsg+0xa4d/0xbe0 [ 138.607617][ T8763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.607636][ T8763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.607672][ T8763] ___sys_sendmsg+0x190/0x1e0 [ 138.607702][ T8763] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.607726][ T8763] ? __lock_acquire+0x49f/0x1a40 [ 138.607778][ T8763] ? get_pid_task+0x106/0x250 [ 138.607831][ T8763] __sys_sendmsg+0x160/0x210 [ 138.607854][ T8763] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.607889][ T8763] do_syscall_64+0x115/0x870 [ 138.607917][ T8763] ? clear_bhb_loop+0x40/0x90 [ 138.607939][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.607957][ T8763] RIP: 0033:0x7f1658b9df99 [ 138.607973][ T8763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.607990][ T8763] RSP: 002b:00007f1659af0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.608026][ T8763] RAX: ffffffffffffffda RBX: 00007f1658e25fa0 RCX: 00007f1658b9df99 [ 138.608037][ T8763] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000005 [ 138.608047][ T8763] RBP: 00007f1659af0090 R08: 0000000000000000 R09: 0000000000000000 [ 138.608062][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.608072][ T8763] R13: 00007f1658e26038 R14: 00007f1658e25fa0 R15: 00007ffd5c15c688 [ 138.608097][ T8763] [ 138.715307][ T8515] wlan1: Creating new IBSS network, BSSID fa:b2:19:c0:59:83 [ 138.796825][ T42] audit: type=1400 audit(1785421158.701:6142): avc: denied { mount } for pid=8765 comm="syz.1.883" name="/" dev="autofs" ino=29562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 138.805353][ T2325] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 138.838244][ T8772] ip6gretap0: entered promiscuous mode [ 138.859196][ T42] audit: type=1400 audit(1785421158.791:6143): avc: denied { write } for pid=8767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.918963][ T42] audit: type=1400 audit(1785421158.851:6144): avc: denied { write } for pid=8777 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.971430][ T2325] usb 9-1: Using ep0 maxpacket: 32 [ 138.978139][ T2325] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 138.981583][ T2325] usb 9-1: config 0 has no interface number 0 [ 138.984688][ T2325] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.988640][ T2325] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 138.992692][ T2325] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 138.996345][ T2325] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 139.000049][ T2325] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.009831][ T2325] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 139.018362][ T2325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.026654][ T2325] usb 9-1: Product: syz [ 139.029790][ T2325] usb 9-1: Manufacturer: syz [ 139.035348][ T2325] usb 9-1: SerialNumber: syz [ 139.059076][ T2325] usb 9-1: config 0 descriptor?? [ 139.067830][ T2325] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input17 [ 139.445497][ T2325] usb 9-1: USB disconnect, device number 10 [ 139.511474][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 139.661310][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 139.667152][ T50] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 139.674231][ T50] usb 6-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 139.678458][ T50] usb 6-1: config 1 interface 0 has no altsetting 0 [ 139.686613][ T50] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.690722][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.695164][ T50] usb 6-1: Product: syz [ 139.698146][ T50] usb 6-1: Manufacturer: syz [ 139.704058][ T50] usb 6-1: SerialNumber: syz [ 139.718359][ T8786] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.723048][ T8786] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.776959][ T42] audit: type=1400 audit(1785421159.711:6145): avc: denied { read write } for pid=8788 comm="syz.3.888" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 139.791300][ T42] audit: type=1400 audit(1785421159.711:6146): avc: denied { open } for pid=8788 comm="syz.3.888" path="/255/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 139.799916][ T42] audit: type=1400 audit(1785421159.711:6147): avc: denied { write } for pid=8788 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.065290][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 140.069584][ T8799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.892'. [ 140.134819][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 140.221018][ T8807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.422958][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 140.426082][ T8813] FAULT_INJECTION: forcing a failure. [ 140.426082][ T8813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.430460][ T8813] CPU: 2 UID: 0 PID: 8813 Comm: syz.3.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.430478][ T8813] Tainted: [L]=SOFTLOCKUP [ 140.430482][ T8813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.430489][ T8813] Call Trace: [ 140.430504][ T8813] [ 140.430509][ T8813] dump_stack_lvl+0x100/0x190 [ 140.430528][ T8813] should_fail_ex.cold+0x5/0xa [ 140.430541][ T8813] ? prepare_alloc_pages+0x16d/0x5f0 [ 140.430559][ T8813] should_fail_alloc_page+0xeb/0x140 [ 140.430575][ T8813] prepare_alloc_pages+0x1f0/0x5f0 [ 140.430594][ T8813] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 140.430615][ T8813] ? stack_trace_save+0x8e/0xc0 [ 140.430627][ T8813] ? __pfx_stack_trace_save+0x10/0x10 [ 140.430639][ T8813] ? stack_depot_save_flags+0x27/0x9d0 [ 140.430657][ T8813] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.430671][ T8813] ? kasan_save_stack+0x3f/0x50 [ 140.430683][ T8813] ? kasan_save_stack+0x30/0x50 [ 140.430696][ T8813] ? kasan_save_track+0x14/0x30 [ 140.430708][ T8813] ? __kasan_slab_alloc+0x89/0x90 [ 140.430722][ T8813] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 140.430734][ T8813] ? security_inode_alloc+0x3b/0x2c0 [ 140.430750][ T8813] ? inode_init_always_gfp+0xc77/0xfb0 [ 140.430770][ T8813] ? alloc_inode+0x8e/0x250 [ 140.430785][ T8813] ? new_inode+0x22/0x1c0 [ 140.430800][ T8813] ? __debugfs_create_file+0x105/0x4f0 [ 140.430829][ T8813] ? debugfs_create_file_full+0x41/0x60 [ 140.430851][ T8813] ? ref_tracker_dir_debugfs+0x19e/0x2e0 [ 140.430872][ T8813] ? alloc_netdev_mqs+0x314/0x15c0 [ 140.430893][ T8813] ? rtnl_create_link+0xc13/0xf80 [ 140.430912][ T8813] ? rtnl_newlink+0x13bd/0x2380 [ 140.430931][ T8813] ? look_up_lock_class+0x64/0x120 [ 140.430950][ T8813] ? netlink_rcv_skb+0x159/0x420 [ 140.430970][ T8813] ? __x64_sys_sendmmsg+0x9c/0x100 [ 140.430990][ T8813] ? do_syscall_64+0x115/0x870 [ 140.431007][ T8813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.431027][ T8813] ? __lock_acquire+0x49f/0x1a40 [ 140.431047][ T8813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.431069][ T8813] ? policy_nodemask+0xed/0x4f0 [ 140.431093][ T8813] alloc_pages_mpol+0x1fb/0x540 [ 140.431124][ T8813] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 140.431145][ T8813] ? do_raw_spin_lock+0x128/0x260 [ 140.431163][ T8813] ? find_held_lock+0x2b/0x80 [ 140.431182][ T8813] ? inode_doinit_with_dentry+0x70b/0x1320 [ 140.431203][ T8813] alloc_pages_noprof+0x1a/0x160 [ 140.431222][ T8813] get_free_pages_noprof+0x10/0xb0 [ 140.431238][ T8813] inode_doinit_with_dentry+0x788/0x1320 [ 140.431259][ T8813] ? inode_set_ctime_current+0x283/0x850 [ 140.431291][ T8813] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 140.431310][ T8813] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 140.431324][ T8813] ? new_inode+0x15a/0x1c0 [ 140.431344][ T8813] selinux_d_instantiate+0x26/0x40 [ 140.431362][ T8813] security_d_instantiate+0x14c/0x1b0 [ 140.431377][ T8813] d_make_persistent+0x64/0x180 [ 140.431394][ T8813] __debugfs_create_file+0x25e/0x4f0 [ 140.431417][ T8813] debugfs_create_file_full+0x41/0x60 [ 140.431438][ T8813] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 140.431457][ T8813] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 140.431489][ T8813] ? lockdep_init_map_type+0x5c/0x250 [ 140.431506][ T8813] ? __pfx_bond_setup+0x10/0x10 [ 140.431529][ T8813] alloc_netdev_mqs+0x314/0x15c0 [ 140.431548][ T8813] rtnl_create_link+0xc13/0xf80 [ 140.431566][ T8813] rtnl_newlink+0x13bd/0x2380 [ 140.431588][ T8813] ? __pfx_rtnl_newlink+0x10/0x10 [ 140.431604][ T8813] ? find_held_lock+0x2b/0x80 [ 140.431623][ T8813] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 140.431637][ T8813] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 140.431653][ T8813] ? avc_has_perm_noaudit+0x145/0x3b0 [ 140.431681][ T8813] ? find_held_lock+0x2b/0x80 [ 140.431699][ T8813] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 140.431716][ T8813] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 140.431758][ T8813] ? __pfx_rtnl_newlink+0x10/0x10 [ 140.431781][ T8813] rtnetlink_rcv_msg+0x95e/0xe90 [ 140.431804][ T8813] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.431825][ T8813] ? ref_tracker_free+0x37e/0x6c0 [ 140.431844][ T8813] netlink_rcv_skb+0x159/0x420 [ 140.431857][ T8813] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.431874][ T8813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.431892][ T8813] ? netlink_deliver_tap+0x1ae/0xcc0 [ 140.431914][ T8813] netlink_unicast+0x585/0x850 [ 140.431928][ T8813] ? __pfx_netlink_unicast+0x10/0x10 [ 140.431940][ T8813] ? __pfx_sock_has_perm+0x10/0x10 [ 140.431960][ T8813] netlink_sendmsg+0x8b0/0xda0 [ 140.431975][ T8813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.431988][ T8813] ? selinux_socket_sendmsg+0x198/0x2f0 [ 140.432009][ T8813] ____sys_sendmsg+0xa4d/0xbe0 [ 140.432026][ T8813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.432040][ T8813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.432060][ T8813] ? rcu_is_watching+0x12/0xc0 [ 140.432078][ T8813] ? ___sys_sendmsg+0x19d/0x1e0 [ 140.432096][ T8813] ? kfree+0x1e5/0x6c0 [ 140.432122][ T8813] ___sys_sendmsg+0x190/0x1e0 [ 140.432142][ T8813] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.432176][ T8813] ? __pfx___might_resched+0x10/0x10 [ 140.432194][ T8813] __sys_sendmmsg+0x20c/0x440 [ 140.432211][ T8813] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.432226][ T8813] ? ksys_write+0x190/0x250 [ 140.432256][ T8813] ? fput+0x79/0x100 [ 140.432270][ T8813] ? ksys_write+0x1ac/0x250 [ 140.432288][ T8813] ? __pfx_ksys_write+0x10/0x10 [ 140.432310][ T8813] __x64_sys_sendmmsg+0x9c/0x100 [ 140.432325][ T8813] ? lockdep_hardirqs_on+0x78/0x100 [ 140.432337][ T8813] do_syscall_64+0x115/0x870 [ 140.432353][ T8813] ? clear_bhb_loop+0x40/0x90 [ 140.432368][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.432380][ T8813] RIP: 0033:0x7f1658b9df99 [ 140.432393][ T8813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.432405][ T8813] RSP: 002b:00007f1659af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.432433][ T8813] RAX: ffffffffffffffda RBX: 00007f1658e25fa0 RCX: 00007f1658b9df99 [ 140.432445][ T8813] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 140.432455][ T8813] RBP: 00007f1659af0090 R08: 0000000000000000 R09: 0000000000000000 [ 140.432466][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.432475][ T8813] R13: 00007f1658e26038 R14: 00007f1658e25fa0 R15: 00007ffd5c15c688 [ 140.432500][ T8813] [ 140.705927][ T8816] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.899'. [ 141.009966][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.902'. [ 141.320142][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 141.324140][ T8835] netlink: 'syz.3.906': attribute type 10 has an invalid length. [ 141.327342][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 142.121562][ T8843] netlink: 96 bytes leftover after parsing attributes in process `syz.3.909'. [ 142.362269][ T50] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 142.374736][ T50] usb 6-1: USB disconnect, device number 6 [ 142.441316][ T41] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 142.543882][ T8850] overlayfs: missing 'lowerdir' [ 142.552508][ T8850] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 142.612620][ T41] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.617915][ T41] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 142.620466][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 142.622936][ T41] usb 8-1: Product: syz [ 142.624163][ T41] usb 8-1: Manufacturer: syz [ 142.625499][ T41] usb 8-1: SerialNumber: syz [ 142.758790][ T8854] syzkaller0: entered promiscuous mode [ 142.760581][ T8854] syzkaller0: entered allmulticast mode [ 142.835809][ T41] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 142.893610][ T8856] netlink: 68 bytes leftover after parsing attributes in process `syz.4.914'. [ 143.024336][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 143.024358][ T42] audit: type=1400 audit(1785421162.961:6150): avc: denied { ioctl } for pid=8861 comm="syz.4.917" path="net:[4026533322]" dev="nsfs" ino=4026533322 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.102865][ T41] usb 8-1: USB disconnect, device number 21 [ 143.114422][ T41] usblp0: removed [ 143.466763][ T8880] xt_hashlimit: size too large, truncated to 1048576 [ 143.613183][ T8890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8890 comm=syz.1.925 [ 144.062401][ T8901] team0: Port device syz_tun added [ 144.485777][ T8920] fuse: Bad value for 'fd' [ 144.488546][ T42] audit: type=1400 audit(1785421164.421:6151): avc: denied { watch } for pid=8919 comm="syz.1.935" path="/247/file0" dev="tmpfs" ino=1363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.629454][ T8924] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 144.642567][ T8924] kvm: pic: level sensitive irq not supported [ 144.910037][ T8933] XFS (nbd3): no-recovery mounts must be read-only. [ 145.119784][ T8933] SELinux: context truncated [ 145.121865][ T8933] SELinux: invalid ocon [ 145.201375][ T8944] comedi comedi0: Minor 3 could not be opened [ 145.262156][ T8946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.270822][ T8946] usb usb9: usbfs: process 8946 (syz.4.943) did not claim interface 0 before use [ 145.271044][ T8933] SELinux: failed to load policy [ 145.317394][ T8948] overlayfs: missing 'workdir' [ 145.360906][ T8950] __nla_validate_parse: 4 callbacks suppressed [ 145.360925][ T8950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 145.517215][ T8954] xt_hashlimit: size too large, truncated to 1048576 [ 145.677748][ T8958] 0: reclassify loop, rule prio 0, protocol 03 [ 145.831255][ T24] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 145.856148][ T8960] CIFS: VFS: UNC: path must begin with // or \\ [ 145.858989][ T8960] Malformed UNC in devname [ 145.858989][ T8960] [ 145.863035][ T8960] CIFS: VFS: Malformed UNC in devname [ 145.920083][ T42] audit: type=1400 audit(1785421165.851:6152): avc: denied { read write } for pid=8968 comm="syz.4.952" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 145.927221][ T42] audit: type=1400 audit(1785421165.851:6153): avc: denied { open } for pid=8968 comm="syz.4.952" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 145.982811][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 145.987002][ T24] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 145.990452][ T24] usb 8-1: config 0 has no interface number 0 [ 145.995679][ T24] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.000351][ T24] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 146.006680][ T24] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 146.011428][ T24] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 146.015266][ T24] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.020881][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 146.023938][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.026408][ T24] usb 8-1: Product: syz [ 146.027701][ T24] usb 8-1: Manufacturer: syz [ 146.029152][ T24] usb 8-1: SerialNumber: syz [ 146.032594][ T8976] Cannot find add_set index 65532 as target [ 146.033821][ T24] usb 8-1: config 0 descriptor?? [ 146.040316][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input18 [ 146.051210][ T8976] bridge2: entered promiscuous mode [ 146.053477][ T8976] bridge2: entered allmulticast mode [ 146.411211][ T2325] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 146.471206][ T8985] FAULT_INJECTION: forcing a failure. [ 146.471206][ T8985] name failslab, interval 1, probability 0, space 0, times 0 [ 146.475962][ T8985] CPU: 0 UID: 0 PID: 8985 Comm: syz.4.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.475990][ T8985] Tainted: [L]=SOFTLOCKUP [ 146.475996][ T8985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.476019][ T8985] Call Trace: [ 146.476035][ T8985] [ 146.476043][ T8985] dump_stack_lvl+0x100/0x190 [ 146.476086][ T8985] should_fail_ex.cold+0x5/0xa [ 146.476106][ T8985] should_failslab+0xc2/0x120 [ 146.476129][ T8985] __kvmalloc_node_noprof+0x116/0x970 [ 146.476151][ T8985] ? xt_alloc_entry_offsets+0x42/0x60 [ 146.476184][ T8985] xt_alloc_entry_offsets+0x42/0x60 [ 146.476203][ T8985] translate_table+0x229/0x1630 [ 146.476236][ T8985] ? find_held_lock+0x2b/0x80 [ 146.476263][ T8985] ? __pfx_translate_table+0x10/0x10 [ 146.476290][ T8985] do_ipt_set_ctl+0x689/0xcf0 [ 146.476310][ T8985] ? nf_sockopt_find.isra.0+0x222/0x290 [ 146.476336][ T8985] ? nf_sockopt_find.isra.0+0x222/0x290 [ 146.476358][ T8985] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 146.476378][ T8985] ? __mutex_unlock_slowpath+0x35d/0x930 [ 146.476407][ T8985] ? sockopt_release_sock+0x5c/0x70 [ 146.476438][ T8985] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.476466][ T8985] ? nf_sockopt_find.isra.0+0x222/0x290 [ 146.476487][ T8985] nf_setsockopt+0x8d/0xf0 [ 146.476509][ T8985] ip_setsockopt+0xcb/0xf0 [ 146.476539][ T8985] tcp_setsockopt+0xa7/0x100 [ 146.476564][ T8985] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 146.476590][ T8985] do_sock_setsockopt+0xf3/0x1d0 [ 146.476623][ T8985] __sys_setsockopt+0x195/0x220 [ 146.476649][ T8985] __x64_sys_setsockopt+0xbd/0x160 [ 146.476668][ T8985] ? do_syscall_64+0x90/0x870 [ 146.476701][ T8985] ? lockdep_hardirqs_on+0x78/0x100 [ 146.476722][ T8985] do_syscall_64+0x115/0x870 [ 146.476739][ T8985] ? clear_bhb_loop+0x40/0x90 [ 146.476759][ T8985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.476777][ T8985] RIP: 0033:0x7fac8139df99 [ 146.476793][ T8985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.476809][ T8985] RSP: 002b:00007fac8229a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.476837][ T8985] RAX: ffffffffffffffda RBX: 00007fac81625fa0 RCX: 00007fac8139df99 [ 146.476847][ T8985] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 146.476857][ T8985] RBP: 00007fac8229a090 R08: 00000000000003f0 R09: 0000000000000000 [ 146.476866][ T8985] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 146.476877][ T8985] R13: 00007fac81626038 R14: 00007fac81625fa0 R15: 00007fff63040a78 [ 146.476900][ T8985] [ 146.518559][ T41] usb 8-1: USB disconnect, device number 22 [ 146.603770][ T2325] usb 6-1: config 0 has no interfaces? [ 146.608411][ T2325] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 146.612304][ T2325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 146.615650][ T2325] usb 6-1: Product: syz [ 146.617464][ T2325] usb 6-1: Manufacturer: syz [ 146.619456][ T2325] usb 6-1: SerialNumber: syz [ 146.626145][ T2325] usb 6-1: config 0 descriptor?? [ 146.764594][ T8990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.961'. [ 146.768631][ T8990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.961'. [ 146.773059][ T42] audit: type=1400 audit(1785421166.711:6154): avc: denied { read write } for pid=8991 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 146.780372][ T42] audit: type=1400 audit(1785421166.711:6155): avc: denied { open } for pid=8991 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 146.789034][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.799058][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.805158][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.816465][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.823940][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.864439][ T2325] usb 6-1: USB disconnect, device number 7 [ 147.235979][ T42] audit: type=1400 audit(1785421167.171:6156): avc: denied { write } for pid=9005 comm="syz.3.964" name="functions" dev="configfs" ino=11427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.263428][ T42] audit: type=1400 audit(1785421167.191:6157): avc: denied { write } for pid=9005 comm="syz.3.964" name="extensions" dev="configfs" ino=37239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.329734][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 147.359025][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.451726][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.969'. [ 147.460367][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.463783][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.466502][ T8991] bridge_slave_0: entered allmulticast mode [ 147.469442][ T8991] bridge_slave_0: entered promiscuous mode [ 147.473096][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.475371][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.477686][ T8991] bridge_slave_1: entered allmulticast mode [ 147.480414][ T8991] bridge_slave_1: entered promiscuous mode [ 147.499168][ T8991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.503877][ T8991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.522710][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 147.526846][ T8991] team0: Port device team_slave_0 added [ 147.530560][ T8991] team0: Port device team_slave_1 added [ 147.545913][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.548149][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.556497][ T8991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.561915][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.564221][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.572987][ T8991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.582739][ T42] audit: type=1400 audit(1785421167.521:6158): avc: denied { ioctl } for pid=9023 comm="syz.3.969" path="socket:[35491]" dev="sockfs" ino=35491 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 147.594745][ T42] audit: type=1400 audit(1785421167.531:6159): avc: denied { mount } for pid=9028 comm="syz.1.968" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 147.598254][ T8991] hsr_slave_0: entered promiscuous mode [ 147.606410][ T8991] hsr_slave_1: entered promiscuous mode [ 147.609003][ T8991] debugfs: 'hsr0' already exists in 'hsr' [ 147.610823][ T8991] Cannot create hsr debugfs directory [ 147.741411][ T8991] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.891393][ T64] Bluetooth: hci3: command tx timeout [ 150.442406][ T8991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.446372][ T8991] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 150.452920][ T8991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.513768][ T6836] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.525505][ T42] audit: type=1400 audit(1785421170.461:6160): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 150.541464][ T8991] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 150.556359][ T8991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.577720][ T8991] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 150.600071][ T8991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.663326][ T6836] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.679558][ T9053] syzkaller0: entered promiscuous mode [ 150.682149][ T9053] syzkaller0: entered allmulticast mode [ 150.748028][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.976'. [ 150.751083][ T9058] netlink: 3 bytes leftover after parsing attributes in process `syz.3.976'. [ 150.758436][ T9058] netlink: 'syz.3.976': attribute type 4 has an invalid length. [ 150.788180][ T6836] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.857846][ T8991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.861418][ T42] audit: type=1400 audit(1785421170.801:6161): avc: denied { write } for pid=9064 comm="syz.3.979" name="functions" dev="configfs" ino=11427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.870803][ T42] audit: type=1400 audit(1785421170.801:6162): avc: denied { write } for pid=9064 comm="syz.3.979" name="midi2.usb0" dev="configfs" ino=36827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.873774][ T9065] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 150.874610][ T8991] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.876506][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.876568][ T7362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.880375][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.883792][ T9065] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 150.883812][ T9065] CPU: 2 UID: 0 PID: 9065 Comm: syz.3.979 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.883830][ T9065] Tainted: [L]=SOFTLOCKUP [ 150.883835][ T9065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.886717][ T7362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.888966][ T9065] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 150.912039][ T9065] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 1d a2 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 150.918132][ T9065] RSP: 0018:ffffc90005eff8e0 EFLAGS: 00010246 [ 150.920596][ T9065] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007883000 [ 150.922749][ T42] audit: type=1400 audit(1785421170.801:6163): avc: denied { write } for pid=9064 comm="syz.3.979" name="c.1" dev="configfs" ino=29286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.923266][ T9065] RDX: 0000000000000000 RSI: ffffffff87d0be23 RDI: ffff88802c49d290 [ 150.923286][ T9065] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 150.923293][ T9065] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 150.932370][ T42] audit: type=1400 audit(1785421170.801:6164): avc: denied { write } for pid=9064 comm="syz.3.979" name="c.1" dev="configfs" ino=29286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.934496][ T9065] R13: ffff88802c49c068 R14: ffff88802c49cc58 R15: ffff88802abc1710 [ 150.934514][ T9065] FS: 00007f1659af06c0(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 150.937121][ T42] audit: type=1400 audit(1785421170.861:6165): avc: denied { read } for pid=5128 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 150.939608][ T9065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.939620][ T9065] CR2: 00007f1650000020 CR3: 000000004329b000 CR4: 0000000000352ef0 [ 150.947007][ T42] audit: type=1400 audit(1785421170.861:6166): avc: denied { search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.949522][ T9065] Call Trace: [ 150.949531][ T9065] [ 150.949537][ T9065] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 150.953523][ T42] audit: type=1400 audit(1785421170.861:6167): avc: denied { write search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.959214][ T9065] usb_gadget_set_selfpowered+0x73/0x2b0 [ 150.959238][ T9065] composite_dev_prepare+0x254/0x420 [ 150.959256][ T9065] configfs_composite_bind+0xd2/0x1960 [ 150.962833][ T42] audit: type=1400 audit(1785421170.861:6168): avc: denied { add_name } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.963809][ T9065] ? kernfs_create_link+0x1bd/0x240 [ 150.963841][ T9065] gadget_bind_driver+0x28c/0xbf0 [ 150.971013][ T42] audit: type=1400 audit(1785421170.861:6169): avc: denied { create } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.971979][ T9065] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 150.972000][ T9065] ? __pfx_gadget_bind_driver+0x10/0x10 [ 150.972019][ T9065] really_probe+0x241/0xa60 [ 150.972045][ T9065] __driver_probe_device+0x20e/0x450 [ 150.985625][ T64] Bluetooth: hci3: command tx timeout [ 150.986447][ T9065] driver_probe_device+0x4a/0x140 [ 150.986474][ T9065] __driver_attach+0x21f/0x5b0 [ 150.986491][ T9065] ? __pfx___driver_attach+0x10/0x10 [ 151.017256][ T9065] bus_for_each_dev+0x13e/0x1d0 [ 151.018885][ T9065] ? __pfx_bus_for_each_dev+0x10/0x10 [ 151.020611][ T9065] ? bus_add_driver+0x2b5/0x5b0 [ 151.022135][ T9065] bus_add_driver+0x305/0x5b0 [ 151.023611][ T9065] driver_register+0x1e2/0x360 [ 151.025119][ T9065] usb_gadget_register_driver_owner+0x132/0x210 [ 151.027093][ T9065] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 151.028863][ T9065] configfs_write_iter+0x302/0x4e0 [ 151.030451][ T9065] vfs_write+0x6ac/0x1050 [ 151.031812][ T9065] ? __pfx_configfs_write_iter+0x10/0x10 [ 151.033541][ T9065] ? __pfx_vfs_write+0x10/0x10 [ 151.035038][ T9065] ksys_write+0x12a/0x250 [ 151.036409][ T9065] ? __pfx_ksys_write+0x10/0x10 [ 151.037929][ T9065] do_syscall_64+0x115/0x870 [ 151.039372][ T9065] ? clear_bhb_loop+0x40/0x90 [ 151.040843][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.042671][ T9065] RIP: 0033:0x7f1658b9df99 [ 151.044033][ T9065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.049784][ T9065] RSP: 002b:00007f1659af0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.052291][ T9065] RAX: ffffffffffffffda RBX: 00007f1658e25fa0 RCX: 00007f1658b9df99 [ 151.054672][ T9065] RDX: 000000000000000b RSI: 0000200000000680 RDI: 000000000000000a [ 151.057137][ T9065] RBP: 00007f1658c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 151.059602][ T9065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.062058][ T9065] R13: 00007f1658e26038 R14: 00007f1658e25fa0 R15: 00007ffd5c15c688 [ 151.064511][ T9065] [ 151.065479][ T9065] Modules linked in: [ 151.067254][ T9065] ---[ end trace 0000000000000000 ]--- [ 151.081176][ T9065] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 151.083195][ T9065] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 1d a2 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 151.093334][ T6836] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.096476][ T9065] RSP: 0018:ffffc90005eff8e0 EFLAGS: 00010246 [ 151.103566][ T9065] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007883000 [ 151.111424][ T9065] RDX: 0000000000000000 RSI: ffffffff87d0be23 RDI: ffff88802c49d290 [ 151.114748][ T9065] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 151.118038][ T9065] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 151.123139][ T9065] R13: ffff88802c49c068 R14: ffff88802c49cc58 R15: ffff88802abc1710 [ 151.125902][ T9065] FS: 00007f1659af06c0(0000) GS:ffff8880d5fdc000(0000) knlGS:0000000000000000 [ 151.129403][ T9065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.132734][ T9065] CR2: 00007ffbe8d8de9c CR3: 000000004329b000 CR4: 0000000000352ef0 [ 151.141274][ T9065] Kernel panic - not syncing: Fatal exception [ 151.144069][ T9065] Kernel Offset: disabled [ 151.145631][ T9065] Rebooting in 86400 seconds..