last executing test programs: 2.689732173s ago: executing program 0 (id=302): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0xc5}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x200}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffffff00}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000580)={0x0, 0x1700, "f29434e1f578b520eb139b4e8fcc19e2c911b54732d58cb7", {0x3, 0x5}, 0x7}) 2.689595564s ago: executing program 0 (id=303): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000140)=0xf, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0xc014) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x45, 0x109, 0xfffffff6, 0x25dfdbff, {0xb, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) 2.633888124s ago: executing program 0 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000bfcbdf251500000064002b8008000100000000006d000380060001000200000006000300a0aa00000600010003000000060001000300000006000300a2aa00000800020001000000080002000200000008000200020000000c0004000200aaaaaaaaaaaa06000300feff000008000300", @ANYRES32=r4], 0x80}, 0x1, 0x0, 0x0, 0x480d1}, 0x20048410) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fchdir(0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) getgroups(0x3, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0xee01]) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={r5, r7, r8}, 0xc) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) dup(r1) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0xbd, 0xe, 0x80, 0xf8, 0x6, 0xb, 0xb, 0xc, 0x3, 0x9, 0x9, 0x9, 0x9, 0x8, 0x6, 0x7}}) r10 = syz_open_procfs(r5, &(0x7f00000003c0)='statm\x00') pread64(r10, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) getsockopt$inet_tcp_int(r10, 0x6, 0x22, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2.529645117s ago: executing program 0 (id=312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) r2 = socket(0x21, 0x80000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7980, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x38c2491f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x1b19, 0x4, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@local}) r11 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r11, &(0x7f0000000100)='-1\x00', 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000370410008000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83450500010001ce1706c35a00677265001400028005000800080000000500090000000000000000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 2.368413585s ago: executing program 0 (id=317): r0 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x20c0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={"a0a84183", 0x9, 0x45, 0xff, 0x3, 0x7, "fcf31ff78ac20205e4bd9fd6e4cc5c", "cf756949", "d843e18b", "c85e8b0b", ["21d08da83da863e9491ee822", "0b103a63d91b198678645a20", "052088c2510af3830b50f44e", "946fd86c492217b959c68859"]}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7, 0x3000000, 0x57ed559183e5295d, r3, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e40)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x1, '\x00', 0x0, r3, 0x2, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001ec0)={&(0x7f0000000c40)="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", &(0x7f0000001c40)=""/149, &(0x7f0000001d00)="3268cf8956d486160f0911a4184af1b9a7df484d07c5dd58b18c54634fad9405aeb2b4a6", &(0x7f0000001d40)="1f73a562e03de20e68fbf0fa5c64d8cfa0d82b6f20d8cd79bffe3a8d3b15ac36a9ab4d1f3ed7e428e3cbe5026e4f3fe12082f2dc694a4d08f7b5bd4a6dde68cfd5a9a2e9286aa63efb5d076964f4b5475310257be8629c4e6e25a7d38c955e80246848f712a60be8da33693dc9f14ee16a9aea674f07a73f775e2e7619aa5083d62a44507c74b5a12b08d762169a9b591af3f0e870837ed1330d9f203fbe534c5c03bcb72149c8076f739818da0de3703f41370792a84ae320df4d6358949275f203574762f8e9503d4b758b53b606694fe9d190c29b028b400555df721a737aac49", 0x1, r4, 0x4}, 0x38) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 2.319758959s ago: executing program 0 (id=321): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) timer_create(0x9, 0x0, &(0x7f0000000480)) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@gettfilter={0x4c, 0x2e, 0x20, 0xf0bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0xd}, {0xa, 0x2}, {0x6, 0x3}}, [{0x8, 0xb, 0x8009}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) connect$bt_sco(r1, &(0x7f0000000380)={0x1f, @none}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x44014) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xc, 0xfffffff3}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801000000000000"], 0x108}}], 0x2, 0xc040) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x36a, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.668638061s ago: executing program 1 (id=340): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000140)={r0, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x400, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x8001]}, {0x1, 0x2, 0x9, 0x6}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x9700}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x7}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr=0xffffffff, @rand_addr=0x64010100, 0xff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="0e00010000"], 0xa) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd23, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x20, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) write$dsp(0xffffffffffffffff, &(0x7f0000000300)="65cf7abdec15236c9202d9b80f474e3d707864a4bd194f69c6dd914d2ffd6c4917b202a86ba081790b81cd4073140344dfa5192efb51002a6ee23e38b4d651bda1e20d79a4b78cb49c6a1166274fa7a27b5ec5a9774548cd367f163d330e64ec0504122904615b8a7131f7ea3a356ceaf1aea106238d6f23d3fde6654acaa39a0b09ca69a13947feb9a64dc36e6aa146f2edc76e7bd34bbde4e2bb0e549931be605f1362111b208fa1aa9ac9e8febbb350547b588ee3bc24c6de15b25fbd5ca2c941e06a573569baa291c2e543f6e56f43b98b54118d6b9af655891b8b02f91ce34fc8ca5cdab73a04f07636", 0xec) close(0x3) 1.560427074s ago: executing program 1 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x150680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f000000000000001f2001950002000000ac1e000100000000000000000d0001007564703a73"], 0x54}}, 0x0) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f00008f9000/0x1000)=nil) 1.560233418s ago: executing program 1 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000001f00003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.490204043s ago: executing program 1 (id=344): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @raw_data=[0x8, 0x2, 0x7c, 0x17, 0x6, 0x3, 0x6, 0xfffffffc, 0x7, 0xfffffe01, 0x7, 0x3, 0x6, 0x1ff, 0x10, 0x2e3d4802]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000001080), r5, 0x1}}, 0x18) r6 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) syz_usb_disconnect(r6) ioctl(r7, 0xc4c85513, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f0000000100)=[{0x44cc, 0x4, 0xc, 0x4}, {0xbf9c, 0x4, 0x8}, {0xffff, 0xfb, 0xb, 0x2}, {0x5, 0xf9, 0x7f, 0x6}, {0x3, 0x9, 0x8}]}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000140)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x3, 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x9fd00f6ab3720ec3, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r6, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0xd, 0x20, {0x20, 0x21, "f570ea59562d2903bed047330b0b2e596906726834aa5fe907db355024f5"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, &(0x7f00000003c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0xfa, 0x80, "217d7d1f", "9db568ec"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x7f, 0x40, 0x5, 0x9, 0x101}}}, &(0x7f0000000d00)={0x84, &(0x7f00000007c0)={0x0, 0x14, 0xac, "13631916dc602e3176e148b9a2e8af68c5695ad925b8aa57a920e018030b781002171ec79a75ba4c545c33c2d87942a6dd7887dc7aeabd2b46d6eb5bbd3051a9e048d81b2066621f4eae37aede3e2e6b856ae75ef93524ccd0702bedc4c54f70474a948e395fb509bcb265ded8763369e5666bf883900eaaec4b899a43c0aba4a4fe304e990855242888e76ed5a4ed42070fa5656328d3fe76cb9da8da9ba9d2c01d02408dd6232dfb55cfe9"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x83}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0x0]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x13}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "a319"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x10}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @random="e4f5d887bbec"}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "8855"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c80)={0x40, 0x1e, 0x1}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x80}}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010003704000100"/20, @ANYRES32=0x0, @ANYBLOB="0001040000000000200012800800010067747000140002800500050000000000080007000a010102"], 0x40}}, 0x50) 910.440359ms ago: executing program 2 (id=351): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)={&(0x7f0000000000)={0x64, r0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x50, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) 910.303477ms ago: executing program 2 (id=352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x3f00, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 859.951441ms ago: executing program 2 (id=353): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000340)={0x64, 0x14, 0x0, 0x0, r1}) 859.804294ms ago: executing program 2 (id=354): r0 = syz_io_uring_setup(0x4355, &(0x7f0000000080)={0x0, 0x1dce, 0x200, 0x2, 0x243}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000500)={&(0x7f0000001000)={[{&(0x7f0000000200)="3a0143973bf31358185f74b85b84f22e6ffd3684497a979181941fe648f48656d9d0b03f2227a46efe76aa6b00e78d3e7416ef176df48bf04fdeca7f", 0x3c, 0x3}, {&(0x7f0000000240)="5dc38219a7cde734a6866427eebffe399951f33b78c2e051730173a45e5c39f18886a8953d585c2dee820c9f38d117a0f9751cb16d19d4511ce82ba31ceb4a5064eaf32bba834bced07c1d86206658db40cafae57d47a78372973ae968ddc76b4d96abc3f7ab8f199383053f26656c20d37defb089d6c4638af48e7fa3ae1faa15029558649986ee4bf25472fb44b6c9cd4d916213e86dfb934dbb633384b308531b7841e09fb18a4e5e086cff58ee11ffe0d101275b75f79e4d7d1a5184636789c72a2fbed958fc283b15", 0xcb, 0x3}, {&(0x7f0000000380)="b0b825f9dbcd47829236ac7cae91b90c5ea711994257b8618f96683af8a61d62", 0x20, 0x2}, {&(0x7f00000003c0)="e8922b49b18e5549bea6c8b9a4fdceebe7fd961eac590d2ea5ef0efedfe677227eae1515ee0a2686ff52f869311a0cc3a82cfb9ac54bb13cd340427718b69fab2bff50df2e8dec94069c5781468621e3da3e02e38fc1d2e7d6fe77d1b221a3229e2bf901ca6af0f13fa225dc73e6faa6f6ae99c8dc4d4fffd60e10da6f8613958e8fb03f28525f849e3b1192ef6deba7dfb63b440d8cfc2c9c496511156a1ccc7c947b", 0xa3}, {&(0x7f0000000480)="9dcfef32e8d2f1d42dde17e0772581c6d3814a1154375643ec0c31a1433bdf9114bb743a96e5b795ccb49f3863e1ef344a117b1fa68161a74c50c941e183461e51c7996264fe8d5197e7", 0x4a, 0x3}]}, 0x5, 0x3}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="08000200e09e01001c00128009000100626f6e60fddc9ffd9d1d1a5508001300020000004b013d04adb756e64b5cb6f1a39e877d2bdc7377f8b79d945d0975610057af911b91d6890b395297fb82528a2653c358b06ba4a7ef8af67fb500000000b59211dd1b1c14ed419ec01c8a5c"], 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 780.01201ms ago: executing program 2 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x1f00000000000000) 779.658336ms ago: executing program 2 (id=356): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0xfffffffffffffffd, {}, 0x3}, 0x18) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001880), 0x80000, 0x0) ppoll(&(0x7f00000018c0)=[{r4, 0x41a0}], 0x1, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07000000000000000400050000001400038004000400080002002000000004000100180001801400020073797a5f747566000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r8 = socket(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200), 0x1, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="50b80000", @ANYBLOB="9e9dc3d7e55bf5477b1833c2fbd69486f62ba18053e0464995986b78c67ff39eb23d45e898188cf7aa48ec45d00750ae86a703b30ea7ef6ac1558bd48649", @ANYBLOB="00082dbd7000fddbdf25070000000a0004007770616e300000000800050000000000080001000200000008000100000000000c00060002000000020000000c0006000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0xa8e099030809fca9, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0x7}, {0x8}}, [@filter_kind_options=@f_basic={{}, {0x0, 0x2, [@TCA_BASIC_POLICE={0x0, 0x4, [@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xc7}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xb}]}, @TCA_BASIC_CLASSID={0x0, 0x1, {0x10, 0x3}}]}}]}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=r9, @ANYBLOB="dba6a29892f210cd57d83a46244c44a645454f19857fa1d8fc798521bb7e35313d9fb91f9393c8beea1b2084aaef7355c31084e776e7d24b10118a065387204c19b3de55b968a129b9004e98dc726c649644d8700005b8288e59b0cb1a75f69a2bd990600920fdbf3364e917b9e62ab5829927fdd5715c1b6d847f21920ca5f49b97bae10cce647a19258dbf1d82f0361a4c30e88a25a7d211c1e0c08a7d96a8174a4474d222d21d5c75cdf6d87277ac0fe56ec7ca0789527d71819414da83d20b85a5d9e45745e73a79122b22ffc0f39f6db98dc74e692c231c", @ANYRESOCT=r5], 0x60}, 0x1, 0x0, 0x0, 0x2400c410}, 0x200008d1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd27, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4f}]}}]}, 0x3c}}, 0x20040091) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 378.506693ms ago: executing program 3 (id=359): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x804}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1}, 0xfffffffffffffdef) 220.393668ms ago: executing program 3 (id=360): r0 = syz_clone(0x4200011, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20048080) 220.1692ms ago: executing program 3 (id=361): openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 59.287884ms ago: executing program 1 (id=362): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x5281, 0x10, 0xffffffee, 0x8d}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x101001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r3, &(0x7f00000005c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000001bc0)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x3, @empty, 'veth0_to_bridge\x00'}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)="574f87559bfdf89a7609b100cb40730c167a4adee06a1315624ea25b178ceeafcc90f78f882ccfbfa0219f416d2ca4447dec9f8a6fb086ec259e8ccb72e2dd788ee274c29e2da51a714b4f09107c3f7b20deabf080c4ae3e050c854d5809ebb522f3968dca8bc023e5587008480234afdc", 0x71}, {&(0x7f0000000280)="1af4d55b0354d716bb3fc1206352a75ada49c9ff5102a5658a6c1c34ed499d6d50e7c5f3622022e030acded919e1e9c6bdc893f7baa935a65138162cbc0d97bf42f079", 0x43}, {&(0x7f0000000300)="a512b8b203e8b7ada94bea61abdca2a896ed5a90ef669153e64ab7f3edc18758ae3e422741ecf423c70e03c6a407481a8c56ec54afaceef906ae55251aaf31d9f1b7667f5634e2f157e105681ae9e8fe49b23ea92475da3f3c65d09607a8af9a23cb2445add34b83b99dc6d80c8f03beff7583182d4df7", 0x77}, {&(0x7f0000000480)="20b9f288481af938604d3dbd1fff42485a941d1b564ab00447ae0449ee8f48409032306f", 0x24}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="09e09f6c41d01f5b9876e5e33d88cca679bf80c5c4f444ae3adebca3f9a6aad68973f128659825a5f1ce30815c2270a137415d42cbe9c272f7eb7de806", 0x3d}, {&(0x7f0000000600)="77bb2b693ab9adc7c15151168b7f05e4c6e960242e5bc3459d7382fef3b4406fe43eeb77709189aac601f6735bdc614056f458f29b", 0x35}], 0x7, &(0x7f00000006c0)=[{0x1010, 0x1, 0x40, "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"}, {0xb0, 0x114, 0xfff, "ac4fbc1de731421c1eacb53aced01173c59e2aff1db8daf9a5f421109bfc47f85ffc83624641464710e39504678a95579349c2f402f6237a853f333ba9fac62bad7b61202164df4a06985010e1c8046fc6596200ae24c794a451ce0664aa426f8a47268f9039b7a90b421298e193fca0d94fd2a20d565e8f4d93b439fbeabd3ec67a052e03dd9e199086fb91ede589c4c1820bb4c663233dbc522d2a"}, {0xd0, 0x118, 0x0, "e519b19e06cc7dcf7937e45ff7d015ca874e7c657e29774978eb2ee3def960fd9cf8bac58bf88a37c15d3d819688b10375367d442c40a34315bc85b6c9e0c44c2ea513690ae18fb928160dddbcee58028907bb0b50bdd631e17e08beb69e937eea4b5397c00cf3f0194014303042241bf1609f3bd6e5a1714e0ad100b309c4f32eff73be43fef8be39a1b93e2cd78b318b4f51f139a1868ff360ccb0d9238a68e42685c3782c654f3f0c489533a65ded56789275afb7cb811bf603"}, {0xb0, 0x111, 0x5d, "61d3f77fa0c852ac22d86c0dad2174d95b61a43f8d1419f85aa3b1caa6ae126fddca128d506bc656493a156a6bd24a0239c5c7f6c5ef38076cd8ab066f9671d544184b878ddb0184aad5edd231c40113de63fbbc73d0ef91d835a21b1ea51f906557b027dbb55f5f54e0085d3f3f1baad748dbaffd663a1992bb32e69e820f0f79a8f9191a5895b548377e5f5417a6b8f25b924d937bbea6866a15baabf5fa"}, {0x38, 0xb63de97de70cfc8b, 0xbc7, "bf5c9ba79e8331bcf31cff6d7f9f3d3e6b03e6c900206574109ea70db919d3cbd854a6b738"}, {0x20, 0x6, 0x7, "db6876619d71d07ab61ffb03"}, {0x100, 0x117, 0x1, "ec5b04b31ad79f09742548b07e88ddf5e0942e934345c5eda26189d4f756e75a32f402020f93f369e94fa3b189ff6fb2f5ed0182160f1cd529f0fee1570c3608778eef718c2a369440aeba7bb41307a88c2059c59d5cce017dfdd475fa1c17b3a292ae1d6c3a3c53e130e4c9a5950f7e3c4b8f15dd45ef678335d058a1094ea41d2b2c0ab83cfe6e708f59d12c01339b095dbbb12d9e3ccf788413c96c717c3f6c30470955509a62e91c66209575322a40f2446391892ed5e67a39d56c43d96974896921d977c396a2ea4b5425df5fe06e3e89a4b071f5d5ba839744890d15dceb2bda7e6c59e8bfe735e3"}, {0x88, 0x108, 0x2, "13f10e77be5d983fa8421c798e3054b27aee6af773dc3061aea07e001d8c46d836c9ffa8b0fb2d51f0d7e8c6e14837573674c46061a587ccb69088147120d98e401f43bbda89443818f2d07fa5c6250d7ff4435bed682a46a74c43500dc195ce7a80ae26b65e7247362efdac1f46e6b090593b"}, {0x58, 0x113, 0x0, "5b00c98e13a8618f5158a301f7b3beca60a80e38e8a13229e4e2c77ed361326e96f360017714d8db61a4d465c6fa92ce4cf3b89a77e8d5e81a859eb089c7c7fa0b49"}, {0x88, 0x111, 0x9, "d82ee7b3c234f569bfd0f005205866d29b8a91503ec9812e57cbf4e12967fffd273a8f6ca5c4bd432d27bb5905a75303b60ef605846f33b491661e3c4d89ee27cdf48186527dfff97e07c923b357f9bdeee7a6a207aa7a5162132a540e84cee5df5c711c1cfac67773086aac96c52d72554bf8"}], 0x1500}, 0x8004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) close_range(r0, 0xffffffffffffffff, 0x0) 58.816944ms ago: executing program 1 (id=363): sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0xd7983ab608da75d7) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000026d010300000000000000000200001048000a804400028014000180080001000a01010108000200ac1414aa2c00018014000300fc00000000000000000000000000000014000400fe800000000000000000000000000098dfba8e6badbfc2c0a9ebe536abcdb3d1c2855defcf2b5e6096615accffb8702dec9d020878856b155ac68fab013a8e3eed3a95ca1be3fb8a7b36a37f3f7372a3f4fdc70220a45aa851249434b839cbc912b444d28d0b7c859f3a175a0d8f55fce842a4477ce4e2827e1317829a9d680f2dde6aa71b1a803c01036bb7050000000000000063bd86dda6ab713e9e53580a3e1ccb2bc6c7897d74fadd1029577e1dab696b5a"], 0x5c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0xc, 0x7, 0x2, 0x6e, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffffee, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a80)=ANY=[@ANYBLOB="840100000201010200000000000000000a0000016000018006000340000200001400018008000100ac1414bb08000200e000000206000340000200000c00028005000100a50000002c0001801400030000000000000000000000ffffe000000114000400ff02000000000000000000000000000108001540000000030c0001800600034000030000060012400002000048000e800600034000020000060003400003000006000340000000001400018008000100e0000002080002007f0000010c00028005000100010000000c000280050001000600000014000680080001007f000001b0ff0100ac1414aa9000068008000200ac14140f14000400fe8000000000000000000000000000aa08000100ac1414aa54000380060001004e200000060002004e230000060002004e230000060002004e2400000600010000020000060002004e200000060001004e210000060002004e210000060002004e240000060001004e24000014000500fe8000000000000000000000000000aa00000500fc01000000000000000000000000000800000380000001004e200000000001004e24000000000380000001004e210000000002004e210000000002004e220000000001004e230000000002004e220000000001004e2100000000020000000000000001004e240000000001004e2000000800034000002008343a0e329cfe241a4d3ed79082b37d9c25f5860af36b766c449447ffed"], 0x184}, 0x1, 0x0, 0x0, 0x20008891}, 0x48080) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x3, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r8, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r8, r9, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r4, 0x0, r8, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000580)="36da4a9e0f0f03b0f5b88a008ee866b93503000066b8a600000066ba000000000f30bad00466b85d93000066efba4000b80000efbaf80c66b82c7b868466efbafc0c66ed0fc730f2e89889", 0x4b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 58.600857ms ago: executing program 3 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060008060000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 320.508µs ago: executing program 3 (id=365): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, 0x0) 0s ago: executing program 3 (id=366): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=r0, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000080) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', r1, 0x700, 0x8000, 0x3ff, 0x9, {{0x1b, 0x4, 0x0, 0x3f, 0x6c, 0xdf, 0x0, 0x5, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd1, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}]}, @rr={0x7, 0x7, 0x9e, [@multicast1]}, @timestamp={0x44, 0x14, 0x27, 0x0, 0x9, [0x1ff, 0xffff, 0x4, 0x2]}, @lsrr={0x83, 0x27, 0x45, [@local, @loopback, @multicast1, @broadcast, @multicast2, @multicast2, @loopback, @empty, @multicast2]}, @end, @rr={0x7, 0x7, 0xe, [@empty]}]}}}}}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1d000000010106000000000000000000000000070600124000030000dfbb6d3682c406ab20c80e427290a869bca18dfbd90380b99ab163b5d93eaaec6a144a9907072738af7e8f7cd3a431e5cdc660067ea8d3d74c5db96366d68b9d632f3d77cb590539219a3247ff32df9d80811f88e3d353876fdafd53cdad25bb8346084eb78c9654a183ca11d571fa8697010a1d8843df2498258ae3d319cf988760037dc6c352f2bcaba051cfe03f7493dc169da4012ac175"], 0x1c}, 0x1, 0x0, 0x0, 0x20000099}, 0x4840) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x14, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xc}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x40}}, 0x44080) kernel console output (not intermixed with test programs): [ 29.001881][ T43] audit: type=1400 audit(1789139545.839:113): avc: denied { write } for pid=5629 comm="sh" path="pipe:[6012]" dev="pipefs" ino=6012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 29.002158][ T43] audit: type=1400 audit(1789139545.839:114): avc: denied { rlimitinh } for pid=5629 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 29.002261][ T43] audit: type=1400 audit(1789139545.839:115): avc: denied { siginh } for pid=5629 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:63894' (ED25519) to the list of known hosts. [ 30.460686][ T43] audit: type=1400 audit(1789139547.299:116): avc: denied { write } for pid=5635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.488815][ T43] audit: type=1400 audit(1789139547.329:117): avc: denied { name_bind } for pid=5639 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.513355][ T43] audit: type=1400 audit(1789139547.349:118): avc: denied { write } for pid=5640 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.517150][ T43] audit: type=1400 audit(1789139547.359:119): avc: denied { execute } for pid=5641 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.517839][ T43] audit: type=1400 audit(1789139547.359:120): avc: denied { execute_no_trans } for pid=5641 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 32.782387][ T5641] cgroup: Unknown subsys name 'net' [ 32.918135][ T5641] cgroup: Unknown subsys name 'cpuset' [ 32.920410][ T5641] cgroup: Unknown subsys name 'rlimit' [ 33.090880][ T5712] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.747619][ T5641] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.246776][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 37.246795][ T43] audit: type=1400 audit(1789139554.089:158): avc: denied { execmem } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.402360][ T43] audit: type=1400 audit(1789139554.239:159): avc: denied { create } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.402740][ T43] audit: type=1400 audit(1789139554.239:160): avc: denied { read write } for pid=5720 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.402763][ T43] audit: type=1400 audit(1789139554.239:161): avc: denied { read write } for pid=5721 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.403070][ T43] audit: type=1400 audit(1789139554.239:162): avc: denied { open } for pid=5721 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.403092][ T43] audit: type=1400 audit(1789139554.239:163): avc: denied { open } for pid=5720 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.412265][ T43] audit: type=1400 audit(1789139554.249:164): avc: denied { ioctl } for pid=5721 comm="syz-executor" path="socket:[6053]" dev="sockfs" ino=6053 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.442870][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.443871][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.444800][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.445885][ T5734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.446272][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.446918][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.447051][ T5734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.447713][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.447766][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.448797][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.449232][ T5734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.449587][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.450332][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.450839][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.452929][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.454884][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.455789][ T5726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.459175][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.460101][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.461748][ T43] audit: type=1400 audit(1789139554.299:165): avc: denied { read } for pid=5722 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.463522][ T43] audit: type=1400 audit(1789139554.299:166): avc: denied { open } for pid=5722 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.463547][ T43] audit: type=1400 audit(1789139554.299:167): avc: denied { mounton } for pid=5722 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.464344][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.087838][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.087884][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.088037][ T5720] bridge_slave_0: entered allmulticast mode [ 38.088879][ T5720] bridge_slave_0: entered promiscuous mode [ 38.090912][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.090977][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.091354][ T5722] bridge_slave_0: entered allmulticast mode [ 38.092091][ T5722] bridge_slave_0: entered promiscuous mode [ 38.100406][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.100511][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.100674][ T5721] bridge_slave_0: entered allmulticast mode [ 38.101404][ T5721] bridge_slave_0: entered promiscuous mode [ 38.109504][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.109545][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.109698][ T5727] bridge_slave_0: entered allmulticast mode [ 38.110496][ T5727] bridge_slave_0: entered promiscuous mode [ 38.111597][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.111639][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.111793][ T5720] bridge_slave_1: entered allmulticast mode [ 38.112575][ T5720] bridge_slave_1: entered promiscuous mode [ 38.120264][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.120314][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.120503][ T5722] bridge_slave_1: entered allmulticast mode [ 38.121286][ T5722] bridge_slave_1: entered promiscuous mode [ 38.127974][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.128019][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.128069][ T5721] bridge_slave_1: entered allmulticast mode [ 38.128894][ T5721] bridge_slave_1: entered promiscuous mode [ 38.136881][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.136959][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.137228][ T5727] bridge_slave_1: entered allmulticast mode [ 38.138146][ T5727] bridge_slave_1: entered promiscuous mode [ 38.148859][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.169683][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.177006][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.178431][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.186773][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.201514][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.209222][ T5720] team0: Port device team_slave_0 added [ 38.210302][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.211294][ T5720] team0: Port device team_slave_1 added [ 38.218203][ T5722] team0: Port device team_slave_0 added [ 38.225069][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.232212][ T5722] team0: Port device team_slave_1 added [ 38.233777][ T5721] team0: Port device team_slave_0 added [ 38.235421][ T5721] team0: Port device team_slave_1 added [ 38.272413][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.272430][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.272449][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.274976][ T5727] team0: Port device team_slave_0 added [ 38.281722][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.281733][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.281746][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.282194][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.282200][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.282212][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.282695][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.282704][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.282716][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.288963][ T5727] team0: Port device team_slave_1 added [ 38.291218][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.291226][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.291239][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.296510][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.296521][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.296533][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.320585][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.320596][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.320611][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.338430][ T5720] hsr_slave_0: entered promiscuous mode [ 38.339049][ T5720] hsr_slave_1: entered promiscuous mode [ 38.340115][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.340128][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.340147][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.375276][ T5722] hsr_slave_0: entered promiscuous mode [ 38.375924][ T5722] hsr_slave_1: entered promiscuous mode [ 38.376535][ T5722] debugfs: 'hsr0' already exists in 'hsr' [ 38.376636][ T5722] Cannot create hsr debugfs directory [ 38.388923][ T5721] hsr_slave_0: entered promiscuous mode [ 38.389342][ T5721] hsr_slave_1: entered promiscuous mode [ 38.389793][ T5721] debugfs: 'hsr0' already exists in 'hsr' [ 38.389803][ T5721] Cannot create hsr debugfs directory [ 38.452321][ T5727] hsr_slave_0: entered promiscuous mode [ 38.452908][ T5727] hsr_slave_1: entered promiscuous mode [ 38.453204][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 38.453215][ T5727] Cannot create hsr debugfs directory [ 38.656781][ T5720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.662476][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.664584][ T5720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.667149][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.676334][ T5720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.679255][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.688002][ T5720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.692954][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.724143][ T5722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.728367][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.728961][ T5722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.730590][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.732721][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.732770][ T5720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.732972][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.733055][ T5720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.735036][ T5722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.738029][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.745723][ T5722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.747787][ T5722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.787300][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.787384][ T5722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.788313][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.788363][ T5722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.791453][ T5721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.793755][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.794447][ T5721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.798868][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.799572][ T5721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.805960][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.806668][ T5721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.810015][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.846634][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.847191][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.847862][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.848373][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.887485][ T5727] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.890000][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.890892][ T5727] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.892985][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.899964][ T5727] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.904097][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.904969][ T5727] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.907771][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.911831][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.946699][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.955951][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.961647][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.961695][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.963113][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.963155][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.985567][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.988570][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.994768][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.995500][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.020605][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.021533][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.021578][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.041075][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.041148][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.053106][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.053153][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.056380][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.094031][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.103883][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.103929][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.112631][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.112677][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.269243][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.290688][ T5720] veth0_vlan: entered promiscuous mode [ 39.294670][ T5720] veth1_vlan: entered promiscuous mode [ 39.305081][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.321000][ T5720] veth0_macvtap: entered promiscuous mode [ 39.332341][ T5720] veth1_macvtap: entered promiscuous mode [ 39.337302][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.350597][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.352574][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.357122][ T5722] veth0_vlan: entered promiscuous mode [ 39.369614][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.370775][ T5722] veth1_vlan: entered promiscuous mode [ 39.375634][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.406261][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.406295][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.406313][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.415694][ T5721] veth0_vlan: entered promiscuous mode [ 39.438383][ T5721] veth1_vlan: entered promiscuous mode [ 39.450931][ T5727] veth0_vlan: entered promiscuous mode [ 39.453179][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.453192][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.458747][ T5722] veth0_macvtap: entered promiscuous mode [ 39.463685][ T5727] veth1_vlan: entered promiscuous mode [ 39.465133][ T5722] veth1_macvtap: entered promiscuous mode [ 39.477213][ T5726] Bluetooth: hci1: command tx timeout [ 39.477373][ T5734] Bluetooth: hci2: command tx timeout [ 39.477377][ T5726] Bluetooth: hci3: command tx timeout [ 39.477595][ T5726] Bluetooth: hci0: command tx timeout [ 39.486610][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.486623][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.498136][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.500141][ T5721] veth0_macvtap: entered promiscuous mode [ 39.505593][ T5721] veth1_macvtap: entered promiscuous mode [ 39.508807][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.525687][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.531019][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.533280][ T5720] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.536103][ T5727] veth0_macvtap: entered promiscuous mode [ 39.541881][ T5727] veth1_macvtap: entered promiscuous mode [ 39.566380][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.575546][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575572][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575590][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575607][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575625][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575642][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575660][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575677][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.584772][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.593398][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.593411][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.635332][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.635345][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.648296][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.648309][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.652196][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.659936][ T5876] syzkaller0: entered promiscuous mode [ 39.659949][ T5876] syzkaller0: entered allmulticast mode [ 39.662008][ T5876] fuse: Bad value for 'fd' [ 39.691664][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.691683][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.705611][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.705860][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.713947][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.713958][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.728047][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.728871][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.728882][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.886905][ T5891] FAULT_INJECTION: forcing a failure. [ 39.886905][ T5891] name failslab, interval 1, probability 0, space 0, times 1 [ 39.886925][ T5891] CPU: 1 UID: 0 PID: 5891 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(full) [ 39.886939][ T5891] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 39.886946][ T5891] Call Trace: [ 39.886949][ T5891] [ 39.886954][ T5891] dump_stack_lvl+0x100/0x190 [ 39.886974][ T5891] should_fail_ex.cold+0x5/0xa [ 39.886990][ T5891] should_failslab+0xc2/0x120 [ 39.887005][ T5891] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 39.887019][ T5891] ? __d_alloc+0x35/0xa50 [ 39.887036][ T5891] __d_alloc+0x35/0xa50 [ 39.887051][ T5891] d_alloc_pseudo+0x1c/0xc0 [ 39.887062][ T5891] alloc_file_pseudo+0x118/0x290 [ 39.887078][ T5891] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 39.887094][ T5891] ? alloc_fd+0x471/0x7a0 [ 39.887110][ T5891] sock_alloc_file+0x50/0x210 [ 39.887131][ T5891] __sys_socket+0x1c0/0x260 [ 39.887148][ T5891] ? __pfx___sys_socket+0x10/0x10 [ 39.887169][ T5891] __x64_sys_socket+0x72/0xb0 [ 39.887185][ T5891] ? lockdep_hardirqs_on+0x7d/0x110 [ 39.887201][ T5891] do_syscall_64+0x123/0x790 [ 39.887216][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.887227][ T5891] RIP: 0033:0x7fed4619e159 [ 39.887237][ T5891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.887247][ T5891] RSP: 002b:00007fed4710bfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 39.887258][ T5891] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fed4619e159 [ 39.887265][ T5891] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 39.887271][ T5891] RBP: 00007fed4623503b R08: 0000000000000000 R09: 0000000000000000 [ 39.887277][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.887284][ T5891] R13: 00007fed46426038 R14: 00007fed46425fa0 R15: 00007ffda32a9378 [ 39.887297][ T5891] [ 39.902222][ T5893] netlink: 584 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.911274][ T5874] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.913561][ T5874] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 39.966857][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 39.984340][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 40.016109][ T5903] Debayer B: ================= START STATUS ================= [ 40.016121][ T5903] Debayer B: Debayer Mean Window Size: 3 [ 40.016133][ T5903] Debayer B: ================== END STATUS ================== [ 40.046704][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10'. [ 40.061603][ T5907] syz.2.13 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.110525][ T5911] CIFS: Attempting to mount //127.0.0.1/share [ 40.167091][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 40.587311][ T5924] 9p: Unknown Cache mode or invalid value m [ 40.926472][ T5911] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -512 [ 40.927268][ T5911] CIFS: VFS: cifs_mount failed w/return code = -512 [ 41.038142][ T72] IPVS: starting estimator thread 0... [ 41.040692][ T5940] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 41.096577][ T5949] netlink: 68 bytes leftover after parsing attributes in process `syz.2.27'. [ 41.125827][ T5941] IPVS: using max 42 ests per chain, 100800 per kthread [ 41.137340][ T5947] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 41.138622][ T5951] qnx6: unable to read the first superblock [ 41.138699][ T5951] qnx6: unable to read the first superblock [ 41.138703][ T5951] qnx6: unable to read the first superblock [ 41.221592][ T5955] 9p: Unknown Cache mode or invalid value m [ 41.242363][ T5958] warning: `syz.0.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 41.437868][ T5965] openvswitch: netlink: Duplicate key (type 0). [ 41.493810][ T5977] loop0: detected capacity change from 0 to 3904 [ 41.533708][ T5977] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 41.533725][ T5977] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 41.533732][ T5977] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 41.533766][ T5977] loop0: [ 41.540279][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 41.540322][ T5969] bridge_slave_1: left allmulticast mode [ 41.540333][ T5969] bridge_slave_1: left promiscuous mode [ 41.540500][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.556061][ T65] Bluetooth: hci0: command tx timeout [ 41.556081][ T65] Bluetooth: hci2: command tx timeout [ 41.558337][ T5969] bridge_slave_0: left allmulticast mode [ 41.558352][ T5969] bridge_slave_0: left promiscuous mode [ 41.558457][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.578360][ T5985] netlink: 224 bytes leftover after parsing attributes in process `syz.2.38'. [ 41.613102][ T5985] syzkaller0: entered promiscuous mode [ 41.613118][ T5985] syzkaller0: entered allmulticast mode [ 41.699528][ T5991] netlink: 64 bytes leftover after parsing attributes in process `syz.0.40'. [ 41.703138][ T5994] 9p: Unknown Cache mode or invalid value m [ 42.369750][ T5995] syzkaller1: entered promiscuous mode [ 42.369766][ T5995] syzkaller1: entered allmulticast mode [ 42.468884][ T1705] IPVS: starting estimator thread 0... [ 42.470521][ T43] kauditd_printk_skb: 113 callbacks suppressed [ 42.470531][ T43] audit: type=1400 audit(1789139559.309:281): avc: denied { create } for pid=6005 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.498578][ T43] audit: type=1400 audit(1789139559.339:282): avc: denied { read } for pid=6008 comm="syz.1.43" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 42.498612][ T43] audit: type=1400 audit(1789139559.339:283): avc: denied { open } for pid=6008 comm="syz.1.43" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 42.504556][ T43] audit: type=1400 audit(1789139559.339:284): avc: denied { ioctl } for pid=6008 comm="syz.1.43" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 42.504607][ T6009] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 42.515078][ T43] audit: type=1400 audit(1789139559.349:285): avc: denied { create } for pid=6010 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.520771][ T43] audit: type=1400 audit(1789139559.359:286): avc: denied { write } for pid=6010 comm="syz.0.44" path="socket:[10265]" dev="sockfs" ino=10265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.557604][ T6007] IPVS: using max 43 ests per chain, 103200 per kthread [ 42.557690][ T43] audit: type=1400 audit(1789139559.389:287): avc: denied { write } for pid=6014 comm="syz.0.46" name="tracing_on" dev="tracefs" ino=5016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 42.582226][ T6017] netlink: 'syz.3.47': attribute type 13 has an invalid length. [ 42.582754][ T43] audit: type=1400 audit(1789139559.419:288): avc: denied { mount } for pid=6016 comm="syz.3.47" name="/" dev="configfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 42.583615][ T43] audit: type=1400 audit(1789139559.419:289): avc: denied { search } for pid=6016 comm="syz.3.47" name="/" dev="configfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.583722][ T43] audit: type=1400 audit(1789139559.419:290): avc: denied { search } for pid=6016 comm="syz.3.47" name="usb_gadget" dev="configfs" ino=5448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.689952][ T6031] syz.1.54 uses obsolete (PF_INET,SOCK_PACKET) [ 42.855857][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.887578][ T6048] ISOFS: Unable to identify CD-ROM format. [ 43.005471][ T5726] Bluetooth: hci1: command tx timeout [ 43.017165][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 43.018551][ T5874] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 43.019604][ T5874] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 43.019620][ T5874] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 43.019653][ T5874] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 43.019666][ T5874] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 43.019678][ T5874] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 43.019691][ T5874] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 43.019703][ T5874] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 43.019716][ T5874] usb 5-1: config 168 interface 0 has no altsetting 0 [ 43.020424][ T5874] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 43.020458][ T5874] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 43.020474][ T5874] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 43.020487][ T5874] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 43.020499][ T5874] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 43.020511][ T5874] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 43.020523][ T5874] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 43.020535][ T5874] usb 5-1: config 168 interface 0 has no altsetting 0 [ 43.021254][ T5874] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 43.021270][ T5874] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 43.021285][ T5874] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 43.021298][ T5874] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 43.021310][ T5874] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 43.021321][ T5874] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 43.021334][ T5874] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 43.021346][ T5874] usb 5-1: config 168 interface 0 has no altsetting 0 [ 43.023491][ T5874] usb 5-1: string descriptor 0 read error: -22 [ 43.024403][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.075385][ T5726] Bluetooth: hci3: command tx timeout [ 43.126689][ T5874] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 43.378704][ T58] usb 5-1: USB disconnect, device number 2 [ 43.391668][ T6068] FAULT_INJECTION: forcing a failure. [ 43.391668][ T6068] name failslab, interval 1, probability 0, space 0, times 0 [ 43.391688][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: syz.1.66 Not tainted syzkaller #0 PREEMPT(full) [ 43.391701][ T6068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.391707][ T6068] Call Trace: [ 43.391711][ T6068] [ 43.391716][ T6068] dump_stack_lvl+0x100/0x190 [ 43.391735][ T6068] should_fail_ex.cold+0x5/0xa [ 43.391751][ T6068] should_failslab+0xc2/0x120 [ 43.391766][ T6068] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 43.391779][ T6068] ? sock_alloc_inode+0x26/0x2c0 [ 43.391797][ T6068] ? __pfx_sock_alloc_inode+0x10/0x10 [ 43.391812][ T6068] sock_alloc_inode+0x26/0x2c0 [ 43.391826][ T6068] ? __pfx_sock_alloc_inode+0x10/0x10 [ 43.391839][ T6068] alloc_inode+0x68/0x250 [ 43.391850][ T6068] sock_alloc+0x44/0x280 [ 43.391862][ T6068] ? security_socket_create+0x7f/0x250 [ 43.391880][ T6068] __sock_create+0xc2/0x860 [ 43.391898][ T6068] __sys_socket+0x14d/0x260 [ 43.391914][ T6068] ? __pfx___sys_socket+0x10/0x10 [ 43.391933][ T6068] __x64_sys_socket+0x72/0xb0 [ 43.391948][ T6068] ? lockdep_hardirqs_on+0x7d/0x110 [ 43.391963][ T6068] do_syscall_64+0x123/0x790 [ 43.391979][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.391990][ T6068] RIP: 0033:0x7f3f60b9e159 [ 43.391999][ T6068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.392009][ T6068] RSP: 002b:00007f3f61a9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 43.392020][ T6068] RAX: ffffffffffffffda RBX: 00007f3f60e25fa0 RCX: 00007f3f60b9e159 [ 43.392027][ T6068] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 43.392033][ T6068] RBP: 00007f3f60c3503b R08: 0000000000000000 R09: 0000000000000000 [ 43.392039][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.392045][ T6068] R13: 00007f3f60e26038 R14: 00007f3f60e25fa0 R15: 00007fff2ecef088 [ 43.392058][ T6068] [ 43.392064][ T6068] socket: no more sockets [ 43.510986][ T6076] 9p: Unknown Cache mode or invalid value m [ 43.583152][ T6019] Need at least one configuration in g1. [ 43.583316][ T6019] udc dummy_udc.0: failed to start g1: -22 [ 43.583333][ T6019] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 43.586342][ T6019] UDC core: g1: couldn't find an available UDC or it's busy [ 43.604337][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.70'. [ 43.604358][ T6079] openvswitch: netlink: Message has 24 unknown bytes. [ 43.638877][ T5726] Bluetooth: hci2: command tx timeout [ 43.638900][ T5726] Bluetooth: hci0: command tx timeout [ 43.717375][ T6087] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 43.717388][ T6087] nbd: error processing sock list [ 43.719742][ T6087] block nbd0: shutting down sockets [ 43.809304][ T6095] PKCS8: Unsupported PKCS#8 version [ 43.839804][ T6098] 9p: Unknown Cache mode or invalid value m [ 44.016015][ T6113] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.040077][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.124105][ T6122] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 44.124455][ T6122] batman_adv: batadv0: Adding interface: gretap1 [ 44.124462][ T6122] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.124476][ T6122] batman_adv: batadv0: Interface activated: gretap1 [ 44.136526][ T6127] 9p: Unknown Cache mode or invalid value m [ 44.215738][ T6134] xt_policy: neither incoming nor outgoing policy selected [ 44.302480][ T6136] input: syz1 as /devices/virtual/input/input6 [ 44.311234][ T6136] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 44.357825][ T6146] FAULT_INJECTION: forcing a failure. [ 44.357825][ T6146] name failslab, interval 1, probability 0, space 0, times 0 [ 44.357845][ T6146] CPU: 2 UID: 0 PID: 6146 Comm: syz.0.96 Not tainted syzkaller #0 PREEMPT(full) [ 44.357858][ T6146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.357864][ T6146] Call Trace: [ 44.357868][ T6146] [ 44.357873][ T6146] dump_stack_lvl+0x100/0x190 [ 44.357905][ T6146] should_fail_ex.cold+0x5/0xa [ 44.357922][ T6146] should_failslab+0xc2/0x120 [ 44.357940][ T6146] __kmalloc_noprof+0xfc/0x840 [ 44.357953][ T6146] ? trace_kmem_cache_alloc+0xdd/0x100 [ 44.357968][ T6146] ? tnode_new+0x2f7/0x350 [ 44.357991][ T6146] tnode_new+0x2f7/0x350 [ 44.358009][ T6146] fib_insert_alias+0x6e7/0xe30 [ 44.358020][ T6146] ? lockdep_rtnl_is_held+0x26/0x40 [ 44.358039][ T6146] fib_trie_unmerge+0x289/0xbd0 [ 44.358055][ T6146] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 44.358071][ T6146] ? lock_acquire+0x1d1/0x380 [ 44.358085][ T6146] fib_unmerge+0xee/0x510 [ 44.358099][ T6146] ? fib_nl2rule_locked+0x3ef/0x740 [ 44.358116][ T6146] fib4_rule_configure+0xaba/0x1160 [ 44.358133][ T6146] ? fib_nl2rule_locked+0x3fe/0x740 [ 44.358149][ T6146] fib_newrule+0x3c3/0x1e50 [ 44.358165][ T6146] ? __traceiter_contention_end+0x71/0xa0 [ 44.358176][ T6146] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 44.358190][ T6146] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 44.358206][ T6146] ? __pfx_fib_newrule+0x10/0x10 [ 44.358220][ T6146] ? avc_has_perm_noaudit+0x50/0x3b0 [ 44.358245][ T6146] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 44.358259][ T6146] ? find_held_lock+0x2b/0x80 [ 44.358273][ T6146] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 44.358286][ T6146] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 44.358300][ T6146] ? __pfx_fib_nl_newrule+0x10/0x10 [ 44.358316][ T6146] rtnetlink_rcv_msg+0x95e/0xe90 [ 44.358330][ T6146] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 44.358347][ T6146] ? ref_tracker_free+0x37e/0x6c0 [ 44.358363][ T6146] netlink_rcv_skb+0x159/0x420 [ 44.358375][ T6146] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 44.358390][ T6146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 44.358406][ T6146] ? netlink_deliver_tap+0x1ae/0xcc0 [ 44.358426][ T6146] netlink_unicast+0x585/0x850 [ 44.358438][ T6146] ? __pfx_netlink_unicast+0x10/0x10 [ 44.358459][ T6146] netlink_sendmsg+0x8b0/0xda0 [ 44.358473][ T6146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.358485][ T6146] ? selinux_socket_sendmsg+0x198/0x2f0 [ 44.358505][ T6146] ____sys_sendmsg+0xa4d/0xbe0 [ 44.358521][ T6146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.358533][ T6146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.358557][ T6146] ___sys_sendmsg+0x190/0x1e0 [ 44.358575][ T6146] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.358592][ T6146] ? futex_wait+0x11e/0x370 [ 44.358614][ T6146] ? find_held_lock+0x2b/0x80 [ 44.358638][ T6146] __sys_sendmsg+0x160/0x210 [ 44.358650][ T6146] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.358670][ T6146] do_syscall_64+0x123/0x790 [ 44.358691][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.358704][ T6146] RIP: 0033:0x7fb57d99e159 [ 44.358714][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.358725][ T6146] RSP: 002b:00007fb57bbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.358737][ T6146] RAX: ffffffffffffffda RBX: 00007fb57dc25fa0 RCX: 00007fb57d99e159 [ 44.358744][ T6146] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 44.358751][ T6146] RBP: 00007fb57da3503b R08: 0000000000000000 R09: 0000000000000000 [ 44.358778][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.358785][ T6146] R13: 00007fb57dc26038 R14: 00007fb57dc25fa0 R15: 00007fffadd0eae8 [ 44.358802][ T6146] [ 44.468976][ T6157] raw_sendmsg: syz.2.100 forgot to set AF_INET. Fix it! [ 44.501981][ T6159] ======================================================= [ 44.501981][ T6159] WARNING: The mand mount option has been deprecated and [ 44.501981][ T6159] and is ignored by this kernel. Remove the mand [ 44.501981][ T6159] option from the mount to silence this warning. [ 44.501981][ T6159] ======================================================= [ 44.543744][ T6163] FAULT_INJECTION: forcing a failure. [ 44.543744][ T6163] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.543764][ T6163] CPU: 2 UID: 0 PID: 6163 Comm: syz.1.103 Not tainted syzkaller #0 PREEMPT(full) [ 44.543776][ T6163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.543783][ T6163] Call Trace: [ 44.543787][ T6163] [ 44.543791][ T6163] dump_stack_lvl+0x100/0x190 [ 44.543810][ T6163] should_fail_ex.cold+0x5/0xa [ 44.543826][ T6163] strncpy_from_user+0x3b/0x2d0 [ 44.543841][ T6163] do_getname+0x78/0x390 [ 44.543858][ T6163] __x64_sys_renameat2+0xca/0x140 [ 44.543874][ T6163] do_syscall_64+0x123/0x790 [ 44.543890][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.543901][ T6163] RIP: 0033:0x7f3f60b9e159 [ 44.543911][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.543921][ T6163] RSP: 002b:00007f3f61a9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 44.543931][ T6163] RAX: ffffffffffffffda RBX: 00007f3f60e25fa0 RCX: 00007f3f60b9e159 [ 44.543938][ T6163] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 44.543945][ T6163] RBP: 00007f3f61a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 44.543951][ T6163] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.543957][ T6163] R13: 00007f3f60e26038 R14: 00007f3f60e25fa0 R15: 00007fff2ecef088 [ 44.543970][ T6163] [ 44.569482][ T6165] 9p: Unknown Cache mode or invalid value m [ 44.669029][ T6177] netlink: 'syz.0.107': attribute type 20 has an invalid length. [ 44.669043][ T6177] netlink: 'syz.0.107': attribute type 21 has an invalid length. [ 44.723423][ T6185] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 44.786788][ T6192] Bluetooth: MGMT ver 1.23 [ 44.967668][ T6202] 9p: Bad value for 'version' [ 44.969489][ T6202] overlayfs: failed to resolve 'lower2': -2 [ 44.970563][ T6202] __nla_validate_parse: 2 callbacks suppressed [ 44.970571][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'. [ 44.971420][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 44.980368][ T6204] netlink: 'syz.2.115': attribute type 12 has an invalid length. [ 45.005554][ T6207] netlink: 488 bytes leftover after parsing attributes in process `syz.2.117'. [ 45.076780][ T65] Bluetooth: hci1: command tx timeout [ 45.084076][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 45.085297][ T6214] 9p: Unknown Cache mode or invalid value m [ 45.138038][ T6219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 45.156210][ T65] Bluetooth: hci3: command tx timeout [ 45.174163][ T6221] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 45.174264][ T74] Bluetooth: hci4: Frame reassembly failed (-84) [ 45.175264][ T6221] capability: warning: `syz.3.123' uses deprecated v2 capabilities in a way that may be insecure [ 45.176631][ T6221] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 45.176644][ T6221] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 45.176713][ T6221] overlayfs: failed to set uuid (30/file2, err=-13); falling back to uuid=null. [ 45.270404][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.124'. [ 45.319415][ T6229] netlink: 'syz.2.126': attribute type 3 has an invalid length. [ 45.319428][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.126'. [ 45.319943][ T6229] Zero length message leads to an empty skb [ 45.409250][ T6242] ipvlan2: entered allmulticast mode [ 45.409271][ T6242] virt_wifi0: entered allmulticast mode [ 45.410392][ T6242] batman_adv: batadv0: Adding interface: ipvlan2 [ 45.410403][ T6242] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.410427][ T6242] batman_adv: batadv0: Interface activated: ipvlan2 [ 45.459567][ T6247] netlink: 'syz.0.133': attribute type 3 has an invalid length. [ 45.568969][ T6254] 9p: Unknown Cache mode or invalid value m [ 45.709729][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 45.709757][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 45.715513][ T5726] Bluetooth: hci0: command tx timeout [ 45.715534][ T5726] Bluetooth: hci2: command tx timeout [ 45.719499][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 45.719521][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 45.755372][ T5833] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.755399][ T5833] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.755416][ T5833] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.755433][ T5833] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.787716][ T6266] fuse: Bad value for 'fd' [ 45.850219][ T6274] overlayfs: failed to clone upperpath [ 45.853716][ T6273] syzkaller1: entered promiscuous mode [ 45.853730][ T6273] syzkaller1: entered allmulticast mode [ 45.991479][ T6291] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 46.004214][ T6293] 9p: Unknown Cache mode or invalid value m [ 46.924756][ T6312] MTD: Couldn't look up './dev/mtdblock0': -2 [ 47.236876][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 47.237753][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 47.340140][ T6329] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 47.354067][ T6329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.362840][ T6329] bond1: (slave veth0_to_bond): making interface the new active one [ 47.363850][ T6329] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 47.369063][ T6329] bond1: entered promiscuous mode [ 47.369075][ T6329] veth0_to_bond: entered promiscuous mode [ 47.369201][ T6329] bond1: entered allmulticast mode [ 47.369209][ T6329] veth0_to_bond: entered allmulticast mode [ 47.440398][ T65] Bluetooth: Unexpected continuation frame (len 4) [ 47.471184][ T6341] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 47.471193][ T6341] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 47.471311][ T6341] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 47.471635][ T6341] netlink: 'syz.3.168': attribute type 21 has an invalid length. [ 47.472217][ T6341] overlayfs: missing 'lowerdir' [ 47.503259][ T43] kauditd_printk_skb: 88 callbacks suppressed [ 47.503271][ T43] audit: type=1400 audit(1789139564.339:379): avc: denied { bind } for pid=6336 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.503507][ T43] audit: type=1400 audit(1789139564.339:380): avc: denied { setopt } for pid=6336 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.503653][ T43] audit: type=1400 audit(1789139564.339:381): avc: denied { listen } for pid=6336 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.503903][ T43] audit: type=1400 audit(1789139564.339:382): avc: denied { connect } for pid=6336 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.507127][ T43] audit: type=1400 audit(1789139564.349:383): avc: denied { accept } for pid=6336 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.513661][ T43] audit: type=1326 audit(1789139564.349:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6336 comm="syz.0.166" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57d99e159 code=0x0 [ 47.517182][ T43] audit: type=1400 audit(1789139564.359:385): avc: denied { create } for pid=6342 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.518153][ T43] audit: type=1400 audit(1789139564.359:386): avc: denied { read } for pid=6342 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.611161][ T43] audit: type=1400 audit(1789139564.449:387): avc: denied { write } for pid=6336 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.621172][ T43] audit: type=1400 audit(1789139564.459:388): avc: denied { map_create } for pid=6342 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.933765][ T6352] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 48.061774][ T6356] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 48.149979][ T6374] capability: warning: `syz.2.179' uses 32-bit capabilities (legacy support in use) [ 48.393565][ T6397] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 48.445578][ T5155] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.456625][ T6402] binder: BINDER_SET_CONTEXT_MGR already set [ 48.456633][ T6402] binder: 6401:6402 ioctl 4018620d 200000004a80 returned -16 [ 48.477775][ T6402] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 48.596930][ T1161] wlan1: Trigger new scan to find an IBSS to join [ 48.599443][ T5155] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice=e4.00 [ 48.600305][ T5155] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.600321][ T5155] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.600331][ T5155] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.601186][ T5155] usb 6-1: New USB device strings: Mfr=15, Product=0, SerialNumber=0 [ 48.601198][ T5155] usb 6-1: Manufacturer: syz [ 48.626748][ T5980] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.785313][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 48.785929][ T5980] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 48.786724][ T5980] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 48.786799][ T5980] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 48.786811][ T5980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 48.786823][ T5980] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 48.786834][ T5980] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.786856][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.014332][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.014351][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.014364][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.014375][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.014387][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.014398][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.014410][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.014421][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.014432][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.014444][ T5155] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 49.045903][ T5155] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 49.210173][ T6438] openvswitch: netlink: Flow actions attr not present in new flow. [ 49.229432][ T6378] syz_tun: entered promiscuous mode [ 49.379420][ T5980] usb 6-1: USB disconnect, device number 2 [ 49.469130][ T6450] syzkaller0: entered promiscuous mode [ 49.469146][ T6450] syzkaller0: entered allmulticast mode [ 49.499453][ T6454] 9p: Unknown Cache mode or invalid value m [ 49.572259][ T6457] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 49.844694][ T6467] sg_write: data in/out 262108/8 bytes for SCSI command 0xd0-- guessing data in; [ 49.844694][ T6467] program syz.1.211 not setting count and/or reply_len properly [ 50.357672][ T5155] usb 5-1: USB disconnect, device number 3 [ 50.432319][ T6477] __nla_validate_parse: 11 callbacks suppressed [ 50.432332][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 50.432342][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 50.432869][ T6476] syzkaller0: entered promiscuous mode [ 50.432881][ T6476] syzkaller0: entered allmulticast mode [ 50.463247][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 50.463261][ T6479] tipc: Invalid UDP bearer configuration [ 50.463278][ T6479] tipc: Enabling of bearer rejected, failed to enable media qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 50.797445][ T6507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.228'. [ 50.836907][ T6511] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 50.845172][ T6511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.859784][ T6511] bond1: (slave geneve2): making interface the new active one [ 50.861323][ T6511] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 50.866947][ T6511] fuse: fd is not a fuse device [ 50.918447][ T6516] kvm [6515]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400006 [ 51.037559][ T6527] FAULT_INJECTION: forcing a failure. [ 51.037559][ T6527] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 51.037579][ T6527] CPU: 1 UID: 0 PID: 6527 Comm: syz.1.234 Tainted: G L syzkaller #0 PREEMPT(full) [ 51.037594][ T6527] Tainted: [L]=SOFTLOCKUP [ 51.037598][ T6527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.037605][ T6527] Call Trace: [ 51.037609][ T6527] [ 51.037613][ T6527] dump_stack_lvl+0x100/0x190 [ 51.037654][ T6527] should_fail_ex.cold+0x5/0xa [ 51.037667][ T6527] ? prepare_alloc_pages+0x16d/0x5b0 [ 51.037682][ T6527] should_fail_alloc_page+0xeb/0x140 [ 51.037697][ T6527] prepare_alloc_pages+0x1f0/0x5b0 [ 51.037713][ T6527] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 51.037731][ T6527] ? __kernel_text_address+0xd/0x30 [ 51.037748][ T6527] ? unwind_get_return_address+0x59/0xa0 [ 51.037764][ T6527] ? arch_stack_walk+0xa6/0xf0 [ 51.037783][ T6527] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 51.037801][ T6527] ? __pfx_stack_trace_save+0x10/0x10 [ 51.037819][ T6527] ? stack_depot_save_flags+0x27/0x9f0 [ 51.037832][ T6527] ? kasan_quarantine_put+0x104/0x240 [ 51.037843][ T6527] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.037860][ T6527] ? kasan_save_stack+0x3f/0x50 [ 51.037871][ T6527] ? kasan_save_stack+0x30/0x50 [ 51.037882][ T6527] ? kasan_save_track+0x14/0x30 [ 51.037894][ T6527] ? __kasan_kmalloc+0xaa/0xb0 [ 51.037904][ T6527] ? __kmalloc_noprof+0x32f/0x840 [ 51.037915][ T6527] ? copy_splice_read+0x1a3/0xbb0 [ 51.037928][ T6527] ? do_splice_read+0x2bd/0x370 [ 51.037941][ T6527] ? splice_direct_to_actor+0x2a1/0xa30 [ 51.037954][ T6527] ? do_splice_direct+0x174/0x240 [ 51.037967][ T6527] ? do_sendfile+0xadc/0xe20 [ 51.037993][ T6527] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 51.038015][ T6527] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 51.038033][ T6527] ? rcu_is_watching+0x13/0xc0 [ 51.038050][ T6527] ? __kmalloc_noprof+0x350/0x840 [ 51.038060][ T6527] ? ovl_splice_write+0x360/0x610 [ 51.038073][ T6527] ? copy_splice_read+0x1a3/0xbb0 [ 51.038089][ T6527] copy_splice_read+0x1e1/0xbb0 [ 51.038103][ T6527] ? ovl_splice_write+0x360/0x610 [ 51.038116][ T6527] ? __pfx_copy_splice_read+0x10/0x10 [ 51.038135][ T6527] ? __pfx_ovl_splice_write+0x10/0x10 [ 51.038149][ T6527] ? __pfx_ovl_file_end_write+0x10/0x10 [ 51.038163][ T6527] ? find_held_lock+0x2b/0x80 [ 51.038180][ T6527] ? __pfx_ovl_splice_read+0x10/0x10 [ 51.038192][ T6527] do_splice_read+0x2bd/0x370 [ 51.038208][ T6527] splice_direct_to_actor+0x2a1/0xa30 [ 51.038223][ T6527] ? __pfx_direct_splice_actor+0x10/0x10 [ 51.038240][ T6527] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 51.038256][ T6527] ? lock_acquire+0x1d1/0x380 [ 51.038269][ T6527] do_splice_direct+0x174/0x240 [ 51.038283][ T6527] ? __pfx_do_splice_direct+0x10/0x10 [ 51.038297][ T6527] ? avc_policy_seqno+0x9/0x20 [ 51.038312][ T6527] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 51.038328][ T6527] ? rw_verify_area+0xce/0x6d0 [ 51.038345][ T6527] do_sendfile+0xadc/0xe20 [ 51.038365][ T6527] ? __pfx_do_sendfile+0x10/0x10 [ 51.038386][ T6527] __x64_sys_sendfile64+0x154/0x220 [ 51.038400][ T6527] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 51.038418][ T6527] do_syscall_64+0x123/0x790 [ 51.038433][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.038445][ T6527] RIP: 0033:0x7f3f60b9e159 [ 51.038454][ T6527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.038464][ T6527] RSP: 002b:00007f3f61a9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 51.038475][ T6527] RAX: ffffffffffffffda RBX: 00007f3f60e25fa0 RCX: 00007f3f60b9e159 [ 51.038482][ T6527] RDX: 0000200000000080 RSI: 0000000000000004 RDI: 0000000000000004 [ 51.038488][ T6527] RBP: 00007f3f61a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 51.038494][ T6527] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 51.038500][ T6527] R13: 00007f3f60e26038 R14: 00007f3f60e25fa0 R15: 00007fff2ecef088 [ 51.038514][ T6527] [ 51.165958][ T6534] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 51.165971][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 51.167521][ T6534] Cannot find set identified by id 0 to match [ 51.425382][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 51.555425][ T35] usb 6-1: device descriptor read/64, error -71 [ 51.556077][ T74] wlan1: Trigger new scan to find an IBSS to join [ 51.585420][ T6562] netlink: 72 bytes leftover after parsing attributes in process `syz.3.246'. [ 51.795394][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 51.898642][ T6565] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 51.903688][ T6565] bond2: (slave lo): Enslaving as an active interface with an up link [ 51.906783][ T6565] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 51.925301][ T35] usb 6-1: device descriptor read/64, error -71 [ 52.036926][ T35] usb usb6-port1: attempt power cycle [ 52.385367][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 52.405961][ T35] usb 6-1: device descriptor read/8, error -71 [ 52.444953][ T6606] overlayfs: failed to resolve '/ A~[Uhl7ut;C(Vc!a9b5@hˈ95a': -2 [ 52.471639][ T6604] trusted_key: encrypted_key: master key parameter 'ecsted:' is invalid [ 52.548695][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.265'. [ 52.549394][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.265'. [ 52.642686][ T43] kauditd_printk_skb: 64 callbacks suppressed [ 52.642733][ T43] audit: type=1400 audit(52.579:453): avc: denied { ioctl } for pid=6614 comm="syz.0.266" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.665460][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 52.695869][ T35] usb 6-1: device descriptor read/8, error -71 [ 52.764469][ T6628] 9p: Unknown Cache mode or invalid value m [ 52.805431][ T35] usb usb6-port1: unable to enumerate USB device [ 53.079433][ T6638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.275'. [ 53.188178][ T6646] netlink: 'syz.3.278': attribute type 3 has an invalid length. [ 53.248506][ T43] audit: type=1400 audit(53.189:454): avc: denied { write } for pid=6649 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.437684][ T6656] futex_wake_op: syz.3.283 tries to shift op by 32; fix this program [ 53.440596][ T43] audit: type=1400 audit(53.379:455): avc: denied { load_policy } for pid=6655 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.440944][ T6656] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 53.441068][ T6656] SELinux: failed to load policy [ 53.842139][ T43] audit: type=1400 audit(53.779:456): avc: denied { read append } for pid=6659 comm="syz.0.284" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.842172][ T43] audit: type=1400 audit(53.779:457): avc: denied { open } for pid=6659 comm="syz.0.284" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.892155][ T43] audit: type=1400 audit(53.829:458): avc: denied { read } for pid=6659 comm="syz.0.284" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 53.892312][ T43] audit: type=1400 audit(53.829:459): avc: denied { open } for pid=6659 comm="syz.0.284" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 54.247813][ T43] audit: type=1400 audit(54.189:460): avc: denied { read } for pid=6673 comm="syz.1.288" name="usbmon7" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.247857][ T43] audit: type=1400 audit(54.189:461): avc: denied { open } for pid=6673 comm="syz.1.288" path="/dev/usbmon7" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.306727][ T43] audit: type=1400 audit(54.249:462): avc: denied { ioctl } for pid=6673 comm="syz.1.288" path="/dev/usbmon7" dev="devtmpfs" ino=757 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.595471][ T1705] wlan1: Trigger new scan to find an IBSS to join [ 54.671261][ T6660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.672823][ T6660] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.683804][ T6660] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.691495][ T6660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.691597][ T6660] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.694003][ T6660] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.695832][ T6660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 54.695917][ T6660] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.701846][ T6660] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.705769][ T6660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.705800][ T6660] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.711356][ T6660] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.770007][ T6679] overlayfs: invalid origin (0000) [ 54.839957][ T6688] GUP no longer grows the stack in syz.0.291 (6688): 200000002000-200000009000 (200000001000) [ 54.839981][ T6688] CPU: 2 UID: 60928 PID: 6688 Comm: syz.0.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.839996][ T6688] Tainted: [L]=SOFTLOCKUP [ 54.840000][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.840006][ T6688] Call Trace: [ 54.840010][ T6688] [ 54.840015][ T6688] dump_stack_lvl+0x100/0x190 [ 54.840034][ T6688] gup_vma_lookup.cold+0x83/0x96 [ 54.840050][ T6688] __get_user_pages+0x252/0x2c30 [ 54.840065][ T6688] ? check_noncircular+0x97/0x160 [ 54.840078][ T6688] ? __pfx___get_user_pages+0x10/0x10 [ 54.840091][ T6688] ? __pfx_down_read_killable+0x10/0x10 [ 54.840110][ T6688] ? __lock_acquire+0x5c0/0x1f40 [ 54.840123][ T6688] __gup_longterm_locked+0x279/0x16f0 [ 54.840141][ T6688] ? __pfx___gup_longterm_locked+0x10/0x10 [ 54.840156][ T6688] ? find_held_lock+0x2b/0x80 [ 54.840171][ T6688] ? sanity_check_pinned_pages+0x4f2/0x8b0 [ 54.840185][ T6688] gup_fast_fallback+0x16dc/0x2790 [ 54.840207][ T6688] ? __pfx_gup_fast_fallback+0x10/0x10 [ 54.840223][ T6688] ? rcu_is_watching+0x13/0xc0 [ 54.840241][ T6688] pin_user_pages_fast+0xa7/0xf0 [ 54.840254][ T6688] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 54.840268][ T6688] ? io_pin_pages+0xc3/0x1d0 [ 54.840285][ T6688] io_pin_pages+0xe6/0x1d0 [ 54.840300][ T6688] __zcrx_create_area+0x44a/0x2280 [ 54.840321][ T6688] ? __pfx___zcrx_create_area+0x10/0x10 [ 54.840336][ T6688] ? io_register_zcrx+0x8d4/0x1e20 [ 54.840352][ T6688] ? io_register_zcrx+0x8d4/0x1e20 [ 54.840371][ T6688] io_register_zcrx+0x1420/0x1e20 [ 54.840423][ T6688] ? __pfx_io_register_zcrx+0x10/0x10 [ 54.840443][ T6688] ? lock_acquire+0x1d1/0x380 [ 54.840457][ T6688] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 54.840475][ T6688] ? rcu_is_watching+0x13/0xc0 [ 54.840489][ T6688] ? trace_contention_end+0x126/0x160 [ 54.840522][ T6688] ? __fget_files+0x215/0x3d0 [ 54.840546][ T6688] __do_sys_io_uring_register+0x1193/0x1bc0 [ 54.840563][ T6688] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 54.840579][ T6688] ? __x64_sys_futex+0x34f/0x4d0 [ 54.840595][ T6688] ? __x64_sys_futex+0x358/0x4d0 [ 54.840612][ T6688] ? xfd_validate_state+0x129/0x190 [ 54.840630][ T6688] do_syscall_64+0x123/0x790 [ 54.840645][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.840657][ T6688] RIP: 0033:0x7fb57d99e159 [ 54.840666][ T6688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.840676][ T6688] RSP: 002b:00007fb57bbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 54.840688][ T6688] RAX: ffffffffffffffda RBX: 00007fb57dc25fa0 RCX: 00007fb57d99e159 [ 54.840694][ T6688] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000005 [ 54.840701][ T6688] RBP: 00007fb57da3503b R08: 0000000000000000 R09: 0000000000000000 [ 54.840707][ T6688] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 54.840713][ T6688] R13: 00007fb57dc26038 R14: 00007fb57dc25fa0 R15: 00007fffadd0eae8 [ 54.840728][ T6688] [ 55.095307][ T6715] fuse: fd is not a fuse device [ 55.121991][ T6723] netlink: 88 bytes leftover after parsing attributes in process `syz.0.307'. [ 55.151079][ T6726] jffs2: notice: (6726) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 55.158886][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.342962][ T6745] FAULT_INJECTION: forcing a failure. [ 55.342962][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 55.342983][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz.1.316 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.342998][ T6745] Tainted: [L]=SOFTLOCKUP [ 55.343002][ T6745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.343009][ T6745] Call Trace: [ 55.343013][ T6745] [ 55.343018][ T6745] dump_stack_lvl+0x100/0x190 [ 55.343039][ T6745] should_fail_ex.cold+0x5/0xa [ 55.343055][ T6745] should_failslab+0xc2/0x120 [ 55.343070][ T6745] __kmalloc_cache_noprof+0x91/0x6d0 [ 55.343088][ T6745] ? alloc_netdev_mqs+0xea8/0x15c0 [ 55.343103][ T6745] alloc_netdev_mqs+0xea8/0x15c0 [ 55.343118][ T6745] rtnl_create_link+0xc13/0xf80 [ 55.343133][ T6745] rtnl_newlink+0x15bc/0x2620 [ 55.343151][ T6745] ? __pfx_rtnl_newlink+0x10/0x10 [ 55.343163][ T6745] ? avc_has_perm_noaudit+0x56/0x3b0 [ 55.343178][ T6745] ? find_held_lock+0x2b/0x80 [ 55.343194][ T6745] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 55.343209][ T6745] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 55.343238][ T6745] ? lock_acquire+0x1d1/0x380 [ 55.343249][ T6745] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 55.343281][ T6745] ? find_held_lock+0x2b/0x80 [ 55.343298][ T6745] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 55.343312][ T6745] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 55.343327][ T6745] ? __pfx_rtnl_newlink+0x10/0x10 [ 55.343341][ T6745] rtnetlink_rcv_msg+0x95e/0xe90 [ 55.343357][ T6745] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.343376][ T6745] ? ref_tracker_free+0x37e/0x6c0 [ 55.343393][ T6745] netlink_rcv_skb+0x159/0x420 [ 55.343406][ T6745] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.343420][ T6745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 55.343437][ T6745] ? netlink_deliver_tap+0x1ae/0xcc0 [ 55.343457][ T6745] netlink_unicast+0x585/0x850 [ 55.343470][ T6745] ? __pfx_netlink_unicast+0x10/0x10 [ 55.343485][ T6745] netlink_sendmsg+0x8b0/0xda0 [ 55.343498][ T6745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.343510][ T6745] ? selinux_socket_sendmsg+0x198/0x2f0 [ 55.343530][ T6745] ____sys_sendmsg+0xa4d/0xbe0 [ 55.343544][ T6745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.343557][ T6745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 55.343578][ T6745] ___sys_sendmsg+0x190/0x1e0 [ 55.343594][ T6745] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.343610][ T6745] ? futex_wait+0x11e/0x370 [ 55.343632][ T6745] ? find_held_lock+0x2b/0x80 [ 55.343655][ T6745] __sys_sendmsg+0x160/0x210 [ 55.343668][ T6745] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.343688][ T6745] do_syscall_64+0x123/0x790 [ 55.343703][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.343715][ T6745] RIP: 0033:0x7f3f60b9e159 [ 55.343724][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.343734][ T6745] RSP: 002b:00007f3f61a9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.343746][ T6745] RAX: ffffffffffffffda RBX: 00007f3f60e25fa0 RCX: 00007f3f60b9e159 [ 55.343754][ T6745] RDX: 0000000000048810 RSI: 00002000000000c0 RDI: 0000000000000004 [ 55.343761][ T6745] RBP: 00007f3f60c3503b R08: 0000000000000000 R09: 0000000000000000 [ 55.343768][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.343774][ T6745] R13: 00007f3f60e26038 R14: 00007f3f60e25fa0 R15: 00007fff2ecef088 [ 55.343792][ T6745] [ 55.418274][ T6756] fuse: fd is not a fuse device [ 55.526794][ T72] wlan1: Creating new IBSS network, BSSID 9e:9d:81:4f:2a:48 [ 55.569404][ T6773] bridge0: port 3(syz_tun) entered blocking state [ 55.569484][ T6773] bridge0: port 3(syz_tun) entered disabled state [ 55.569563][ T6773] syz_tun: entered allmulticast mode [ 55.570301][ T6773] syz_tun: entered promiscuous mode [ 55.570616][ T6773] bridge0: port 3(syz_tun) entered blocking state [ 55.570657][ T6773] bridge0: port 3(syz_tun) entered forwarding state [ 55.613317][ T6776] netlink: ct family unspecified [ 55.613332][ T6776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.646430][ T6778] __nla_validate_parse: 4 callbacks suppressed [ 55.646447][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 55.826649][ T6792] FAULT_INJECTION: forcing a failure. [ 55.826649][ T6792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.826670][ T6792] CPU: 0 UID: 0 PID: 6792 Comm: syz.3.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 55.826685][ T6792] Tainted: [L]=SOFTLOCKUP [ 55.826689][ T6792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.826695][ T6792] Call Trace: [ 55.826699][ T6792] [ 55.826703][ T6792] dump_stack_lvl+0x100/0x190 [ 55.826723][ T6792] should_fail_ex.cold+0x5/0xa [ 55.826739][ T6792] _copy_from_user+0x2e/0xd0 [ 55.826751][ T6792] copy_msghdr_from_user+0x9f/0x4c0 [ 55.826769][ T6792] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 55.826788][ T6792] ? lock_acquire+0x1d1/0x380 [ 55.826800][ T6792] ? get_pid_task+0x2a/0x250 [ 55.826817][ T6792] ___sys_sendmsg+0x106/0x1e0 [ 55.826833][ T6792] ? __pfx____sys_sendmsg+0x10/0x10 [ 55.826849][ T6792] ? get_pid_task+0x106/0x250 [ 55.826868][ T6792] ? find_held_lock+0x2b/0x80 [ 55.826892][ T6792] __sys_sendmsg+0x160/0x210 [ 55.826904][ T6792] ? __pfx___sys_sendmsg+0x10/0x10 [ 55.826923][ T6792] do_syscall_64+0x123/0x790 [ 55.826944][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.826956][ T6792] RIP: 0033:0x7fceb139e159 [ 55.826965][ T6792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.826975][ T6792] RSP: 002b:00007fceb22a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.826986][ T6792] RAX: ffffffffffffffda RBX: 00007fceb1625fa0 RCX: 00007fceb139e159 [ 55.826993][ T6792] RDX: 0000000004004004 RSI: 0000200000000080 RDI: 0000000000000003 [ 55.826999][ T6792] RBP: 00007fceb22a0090 R08: 0000000000000000 R09: 0000000000000000 [ 55.827006][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.827012][ T6792] R13: 00007fceb1626038 R14: 00007fceb1625fa0 R15: 00007fffbf5abba8 [ 55.827025][ T6792] [ 55.903881][ T6798] ata1.00: invalid multi_count 128 ignored [ 55.955335][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.135762][ T6806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.135866][ T6806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.135939][ T6806] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.136004][ T6806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.142098][ T6806] bridge_slave_1: default FDB implementation only supports local addresses [ 56.179126][ T6812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.342'. [ 56.179139][ T6812] tipc: Invalid UDP bearer configuration [ 56.179155][ T6812] tipc: Enabling of bearer rejected, failed to enable media [ 56.475489][ T5874] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 56.627191][ T5874] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 56.627985][ T5874] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 56.628002][ T5874] usb 6-1: config 1 has no interface number 0 [ 56.631128][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.631140][ T5874] usb 6-1: Product: syz [ 56.631147][ T5874] usb 6-1: Manufacturer: syz [ 56.631154][ T5874] usb 6-1: SerialNumber: syz [ 56.654438][ T5874] usb 6-1: 3:1 : does not exist [ 56.654452][ T5874] usb 6-1: 3:2 : does not exist [ 56.855124][ T42] usb 6-1: USB disconnect, device number 7 [ 56.898010][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'. [ 57.054890][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 57.243150][ T6883] netlink: 22 bytes leftover after parsing attributes in process `syz.3.358'. [ 57.671325][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.362'. [ 57.671340][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.362'. [ 57.700479][ T6910] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 57.729521][ T6912] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.762067][ T6915] ip6gre1: entered promiscuous mode [ 57.762081][ T6915] ip6gre1: entered allmulticast mode [ 57.765067][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 57.766424][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 57.785746][ T5832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 57.814675][ T43] kauditd_printk_skb: 60 callbacks suppressed [ 57.814687][ T43] audit: type=1400 audit(57.749:506): avc: denied { create } for pid=6914 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.814903][ T43] audit: type=1400 audit(57.749:507): avc: denied { write } for pid=6914 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.817871][ T6915] BUG: using smp_processor_id() in preemptible [00000000] code: syz.3.366/6915 [ 57.817885][ T6915] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 57.817928][ T6915] CPU: 0 UID: 0 PID: 6915 Comm: syz.3.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.817948][ T6915] Tainted: [L]=SOFTLOCKUP [ 57.817954][ T6915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.817963][ T6915] Call Trace: [ 57.817969][ T6915] [ 57.817974][ T6915] dump_stack_lvl+0x100/0x190 [ 57.817996][ T6915] check_preemption_disabled+0xd2/0xe0 [ 57.818017][ T6915] ? tcp_data_queue+0x23d0/0x4fb0 [ 57.818034][ T6915] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 57.818051][ T6915] ? tcp_data_queue+0x23d0/0x4fb0 [ 57.818067][ T6915] trace_kfree_skb+0x18b/0x230 [ 57.818083][ T6915] sk_skb_reason_drop+0xb7/0x1b0 [ 57.818099][ T6915] tcp_data_queue+0x23d0/0x4fb0 [ 57.818117][ T6915] ? find_held_lock+0x2b/0x80 [ 57.818133][ T6915] ? tcp_urg+0x10f/0xb80 [ 57.818146][ T6915] ? __pfx_tcp_data_queue+0x10/0x10 [ 57.818161][ T6915] ? tcp_ecn_create_request+0x8d0/0x8d0 [ 57.818175][ T6915] ? sock_def_wakeup+0x118/0x2c0 [ 57.818188][ T6915] tcp_rcv_state_process+0x1063/0x7190 [ 57.818208][ T6915] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 57.818229][ T6915] ? lock_acquire+0x1d1/0x380 [ 57.818242][ T6915] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 57.818258][ T6915] ? tcp_v4_do_rcv+0x691/0x1260 [ 57.818273][ T6915] tcp_v4_do_rcv+0x691/0x1260 [ 57.818289][ T6915] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 57.818304][ T6915] __release_sock+0x35a/0x440 [ 57.818319][ T6915] release_sock+0x1e5/0x280 [ 57.818331][ T6915] __inet_stream_connect+0x619/0xf90 [ 57.818349][ T6915] ? __pfx___inet_stream_connect+0x10/0x10 [ 57.818364][ T6915] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.818377][ T6915] ? __pfx_woken_wake_function+0x10/0x10 [ 57.818393][ T6915] ? __local_bh_enable_ip+0xa5/0x120 [ 57.818406][ T6915] inet_stream_connect+0x57/0xa0 [ 57.818421][ T6915] __sys_connect_file+0x146/0x1a0 [ 57.818433][ T6915] __sys_connect+0x141/0x170 [ 57.818444][ T6915] ? __pfx___sys_connect+0x10/0x10 [ 57.818462][ T6915] __x64_sys_connect+0x72/0xb0 [ 57.818477][ T6915] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.818496][ T6915] do_syscall_64+0x123/0x790 [ 57.818517][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.818536][ T6915] RIP: 0033:0x7fceb139e159 [ 57.818552][ T6915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.818568][ T6915] RSP: 002b:00007fceb22a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 57.818585][ T6915] RAX: ffffffffffffffda RBX: 00007fceb1625fa0 RCX: 00007fceb139e159 [ 57.818596][ T6915] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000a [ 57.818605][ T6915] RBP: 00007fceb143503b R08: 0000000000000000 R09: 0000000000000000 [ 57.818617][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.818627][ T6915] R13: 00007fceb1626038 R14: 00007fceb1625fa0 R15: 00007fffbf5abba8 [ 57.818646][ T6915] [ 57.922159][ T6923] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.367/6923 [ 57.922175][ T6923] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 57.922200][ T6923] CPU: 2 UID: 0 PID: 6923 Comm: syz.2.367 Tainted: G L syzkaller #0 PREEMPT(full) [ 57.922219][ T6923] Tainted: [L]=SOFTLOCKUP [ 57.922223][ T6923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.922230][ T6923] Call Trace: [ 57.922233][ T6923] [ 57.922238][ T6923] dump_stack_lvl+0x100/0x190 [ 57.922255][ T6923] check_preemption_disabled+0xd2/0xe0 [ 57.922272][ T6923] ? bpf_prog_test_run_skb+0x12c5/0x3530 [ 57.922284][ T6923] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 57.922299][ T6923] ? bpf_ctx_finish.isra.0+0x151/0x1c0 [ 57.922315][ T6923] ? bpf_prog_test_run_skb+0x12c5/0x3530 [ 57.922326][ T6923] trace_kfree_skb+0x18b/0x230 [ 57.922342][ T6923] sk_skb_reason_drop+0xb7/0x1b0 [ 57.922356][ T6923] bpf_prog_test_run_skb+0x12c5/0x3530 [ 57.922368][ T6923] ? lock_acquire+0x1d1/0x380 [ 57.922382][ T6923] ? __fget_files+0x161/0x3d0 [ 57.922407][ T6923] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 57.922419][ T6923] ? fput+0x7c/0x100 [ 57.922434][ T6923] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 57.922450][ T6923] __sys_bpf+0x2265/0x4a30 [ 57.922464][ T6923] ? __pfx___sys_bpf+0x10/0x10 [ 57.922473][ T6923] ? find_held_lock+0x2b/0x80 [ 57.922488][ T6923] ? futex_wake+0x4ea/0x5e0 [ 57.922523][ T6923] ? __x64_sys_futex+0x34f/0x4d0 [ 57.922537][ T6923] ? __x64_sys_futex+0x358/0x4d0 [ 57.922553][ T6923] ? __pfx___x64_sys_futex+0x10/0x10 [ 57.922569][ T6923] ? __x64_sys_bpf+0xce/0x140 [ 57.922579][ T6923] __x64_sys_bpf+0xce/0x140 [ 57.922590][ T6923] ? do_syscall_64+0xae/0x790 [ 57.922605][ T6923] do_syscall_64+0x123/0x790 [ 57.922620][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.922632][ T6923] RIP: 0033:0x7fed4619e159 [ 57.922642][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.922652][ T6923] RSP: 002b:00007fed470eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.922663][ T6923] RAX: ffffffffffffffda RBX: 00007fed46426090 RCX: 00007fed4619e159 [ 57.922670][ T6923] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 000000000000000a [ 57.922676][ T6923] RBP: 00007fed4623503b R08: 0000000000000000 R09: 0000000000000000 [ 57.922682][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.922689][ T6923] R13: 00007fed46426128 R14: 00007fed46426090 R15: 00007ffda32a9378 [ 57.922701][ T6923] [ 57.956686][ T5832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 58.195638][ T5726] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.195664][ T5083] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.196076][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.196137][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.345396][ T5832] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 60.275482][ T5726] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.275507][ T5726] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.275539][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.275641][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.475391][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 62.355467][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.355618][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.355641][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.039594][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.039648][ T1440] ieee802154 phy1 wpan1: encryption failed: -22