last executing test programs: 9.229381417s ago: executing program 0 (id=337): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc4fffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000001000000000000002000000002000000"], 0x2a300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x30}, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r6) syz_open_dev$evdev(0x0, 0x2, 0x862b01) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x40000) 8.72884342s ago: executing program 0 (id=349): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) io_cancel(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trust000000000000064 '], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) io_cancel(0x0, 0x0, 0x0) (async) getpid() (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trust000000000000064 '], 0x32, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) 8.620963755s ago: executing program 0 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x2d, 0x107, 0xfffffffe, 0x2000001, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c855}, 0xc800) mkdir(&(0x7f0000000140)='./file2\x00', 0x9e) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@dev, @broadcast, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x5, 0x3, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x68, 0x0, 0x0, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @local, {[@lsrr={0x83, 0x13, 0x47, [@multicast2, @private=0xa010100, @remote, @rand_addr=0x64010101]}, @generic={0x83, 0x8, "1eb39541ffb5"}, @lsrr={0x83, 0x17, 0xf3, [@empty, @private=0xa010101, @rand_addr=0x64010102, @broadcast, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x0, [{@multicast2, 0xfffffffb}, {@remote, 0x8}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0xce, 0x2, 0x49, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x1, 0x6, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x160, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x96}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x62}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000014) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000040)='./bus/../file0\x00') bind$packet(r5, &(0x7f00000002c0)={0x11, 0x1c, r11, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 8.491479909s ago: executing program 0 (id=354): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) kexec_load(0x8000000000003, 0x0, &(0x7f00000005c0), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a373196", 0xaf}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005b80)=[{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000000040)="229cc89f045521fd21c85fab150cfef5254ac8a490bcde132279c342", 0x1c}, {&(0x7f0000000600)="656a2bd0806984aff35957902a9e0811bd2dd433af5be345d11ffc85f64eba78c98768f367987f63548703fe8dc25a001b9aa5e2e071eb68be447c79d32df80268e79d8f21583fba7855f4417bd102307bfc94886119efdf690a7d92dd22c379280ec89f68797274768d09dd15e1040dfa8efa1954feb765851e4df04abbf2bd3cbdd306f277d854a6908a2719ef06930c786b00a8a885d57e291a1325d4652ecfab5425ba15913cea2c087146efd80baa84cc63c1159082836a64b6c19207f29db2b3b12886", 0xc6}, {&(0x7f00000008c0)="29a856997882df1755f23418553e0191024f96ccb19d0592d20c7b6fbb2b658f86a72d57d56dde2c2cc4fdc57f126f1f3cb2307a51746b60868704a97b8ccf3fc492293842765a78b8a7154973d96e2a6e949e324337a3d6ca6baf604a5406c66a5f4e8aa5e44a94cf44b63e7cb217df1c84ee6ececa032d87e8bd5eabb7e42e5e92ae16c41cf34195d545dd2d859c8f", 0x90}, {&(0x7f00000047c0)="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", 0x1000}, {&(0x7f00000057c0)="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", 0xfb}], 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000038000000000000001701000002000000200000003b8f34db98969d0c59b12df8b2987e050b96da86ec0f09073a5b7a9f3a168f3700000000f05ec6fc76bd83e7e1942553b5ab16991a356ca006bd5f117155d3b021792570bf1c"], 0x50, 0x24048800}, {0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f00000059c0)="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", 0xfa}, {&(0x7f0000005ac0)="ae77566af78aa8b28d377086782c003d3c8ef17612270378cc4c0eed01", 0x1d}], 0x2, &(0x7f0000005b40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30, 0x4084}], 0x2, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3701) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r8, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) 6.911764301s ago: executing program 0 (id=389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x801c4803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x101ff, 0x1, 0xa000, 0x1000, &(0x7f0000456000/0x1000)=nil}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/cdns2-pci/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='0000:00:00.0\n\x00', 0xd) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r6, &(0x7f0000000180)='nullb1\x00', 0x1ff) r7 = memfd_secret(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x22, &(0x7f00000009c0)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @alu={0x4, 0x1, 0xb, 0x2, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_query, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @alu={0x7, 0x1, 0x9, 0x7, 0xb, 0xffffffffffffffc8, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call], &(0x7f0000000b00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xd, 0xfffffff5, 0xc65e}, 0x10, 0x0, r4, 0x9, &(0x7f0000000bc0)=[r5, r6, r7], &(0x7f0000000c00)=[{0x5, 0x1, 0x0, 0xd}, {0x5, 0x2, 0xb, 0x8}, {0x0, 0x1, 0xe, 0xc}, {0x5, 0x2, 0x7, 0x4}, {0x0, 0x3, 0x2, 0x7}, {0x0, 0x4, 0x4, 0x5}, {0x3, 0x4, 0x10, 0x3}, {0x3, 0x2, 0xa, 0xb}, {0x5, 0x3, 0x8, 0x1}], 0x10, 0x6}, 0x94) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)={0x4, 0x0, [{0x300, 0x0, 0x56}, {0x2ec, 0x0, 0x73}, {0x29b, 0x0, 0x2}, {0x82a, 0x0, 0x101}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x40049366, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.101453854s ago: executing program 0 (id=398): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x83, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x4, 0xe9, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000001, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x54000, 0x3c4210}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 911.369262ms ago: executing program 3 (id=453): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4040889}, 0x20008050) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000185000/0x4000)=nil, 0x4000, 0xa) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100070002000c0001"], 0x30}}, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) r8 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x1, &(0x7f0000001200)=[{0x6}]}) (async, rerun: 64) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 900.056906ms ago: executing program 3 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000001c0)={0x80, 0x6b, 0x4, 0x6f50}, 0x10) 841.870745ms ago: executing program 3 (id=455): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x304}, 0x4840) 841.713474ms ago: executing program 3 (id=456): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000c3ff00", @ANYRES32=0x0, @ANYBLOB="1111020050180000280012800b0001006d61637365630000180002800c0004000300000100c28000080005000700000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 700.797815ms ago: executing program 2 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0xbc, 0x9, 0x12, "1012a2c2e0d99745e390509d287560250d00"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000040)=0xa) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4050) 698.394249ms ago: executing program 3 (id=460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x68030000, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 695.529764ms ago: executing program 3 (id=461): r0 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000000)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000640)={0x122, 0x29, 0x1, {0x8001, [{{0x0, 0x1, 0x8}, 0x8, 0x81, 0x7, './file0'}, {{0x4, 0x80000000, 0x6}, 0x5, 0x4, 0x7, './file0'}, {{0x40, 0x0, 0x6}, 0x7, 0x3, 0x7, './file0'}, {{0x1, 0x1, 0x8}, 0x6, 0x3, 0x7, './file0'}, {{0x0, 0x2, 0x7}, 0x100, 0x7, 0x7, './file0'}, {{0x80, 0x1}, 0x100000000, 0xc, 0x7, './file0'}, {{0x1, 0x3, 0x2}, 0xffffffffffffffff, 0xf8, 0x7, './file0'}, {{0x1, 0x4, 0x1}, 0x0, 0x5, 0x7, './file0'}, {{0x80, 0x3, 0x5}, 0x4, 0x3, 0x7, './file0'}]}}, 0x122) fchdir(r0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x88601, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002040)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000071400078008001240fffffffe080013400800ffff050004000000000010000300686173683a69702c6d616300050005000a"], 0x5c}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r6, &(0x7f0000000380)="82ffffffff", 0x53, 0x3b00, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x390, 0xffffffff, 0x1e8, 0x118, 0x0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x6, 0x1, [0x10, 0x0, 0x1, 0x4, 0x2, 0x4, 0x58ba, 0xffff, 0x6f, 0x0, 0x7, 0x1, 0x5, 0x2, 0x6b, 0x8], 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0xff, 0xff, 0xffffff00], [0x42710ab262b9efc4, 0xff, 0xff, 0xff], 'vcan0\x00', 'pim6reg1\x00', {}, {}, 0x2b, 0x1, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x6}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x3898, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES8=r5, @ANYRES32=r7, @ANYBLOB="ef9f28feb694d4cb96940fda10d5eea09b119b7b40935ce8dac90ca674babc4e7be1f2df069add85fa0b187f6c52c217c0da626244a237243d41fd5faa7f4da7ee89d78854393b067898f34f9cb188d223b865bc2812e322bb88b174961cfe240b063a86b986d5767e9efe207093ac3df5b88e8f2e33b70c5658cf364f022003ecd04a9d9d772c9f492418cb40eeef4e5f7cbd51672c17527ea80fca2dcc1d34118384323197a5dd6a836dd15137796b5a7aa93e19ad7e4126fc57ad200d5ad3609409cf071d0b76", @ANYRESOCT=r4], 0xa) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) syz_emit_ethernet(0x51, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000000c) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x3) r8 = eventfd2(0x100, 0x800) writev(r8, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb2938c66", 0x8}], 0x2) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r9, 0xc03064ca, &(0x7f0000000200)={&(0x7f00000003c0)=[r10], 0x0, 0x800000ea25, 0x1, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000000c0)={r10}) 695.394548ms ago: executing program 2 (id=462): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="bcd622d66ac64802f04286b0e145", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x9a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 640.99999ms ago: executing program 2 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001040000000000000000000000f0", @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 531.782464ms ago: executing program 2 (id=464): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)="7cf94d", 0x3}, {&(0x7f0000000380)="3dd84fea8689934c3c2c8731952f96e200242204fa98998e73a8f1da437e", 0x1e}], 0x2, 0x0, 0x0, 0x200480c0}], 0x1, 0x4) r9 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r9, &(0x7f0000000380)=""/245, 0xf5, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x604900, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010003909002505bee400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000400003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="050006001000000008000100", @ANYRES32=r1, @ANYBLOB="0500070001000000"], 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 530.83839ms ago: executing program 2 (id=466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="270086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000010ff02000000000000270000000000000189"], 0x340a) 371.479908ms ago: executing program 2 (id=468): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1', 0x1) writev(r0, &(0x7f0000001d80)=[{&(0x7f0000000000)="0300000000", 0x5}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='1', 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x88840, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$netlink(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000400)) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0x2d8a1, 0x8000, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x480, @broadcast}}) socket$kcm(0xa, 0x3, 0x87) getsockopt$inet6_buf(r3, 0x29, 0x1c, &(0x7f0000000180)=""/35, &(0x7f00000001c0)=0x23) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x10000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x400000, 0x4, 0xaccc, 0xfc}}) r7 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e23, @private=0xa010102}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'bridge_slave_0\x00', {0x2, 0x0, @remote}}) 299.420204ms ago: executing program 1 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 151.54933ms ago: executing program 1 (id=471): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x401, 0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)={0xb, 0x1ff}) r1 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x1}) syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x6020c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf250201000008000100030000"], 0x1c}}, 0x60000010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 151.0213ms ago: executing program 1 (id=472): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0xa, 0xffffffffffffffff}) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000140)={r0, &(0x7f0000000040)='\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x73e, 0x6]}, {0x2, 0x11c, 0x48, 0x100}}, 0xfffffff9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x2b, 0xa35, &(0x7f0000000180)="27e00fcee95d1d295900a384525652cb9187c94a6b9f3567024f495b4c9a8661bc917f382ffa220b23186d4f3d53fad291b70654919e6fab3acc1464edcdc2182cb69616baf0", &(0x7f0000000200)="66c4959c466d4f0b034542827b1d700c745404c8ae1d07e37721d12fa24c8277acd4aa565efbb775ec161aa9fb99bab67d79381147e7709ecefce94717af10e1516920e3c693bd6020bafcb835accbe2d1c8073d38effdbb272f3adca48ac79e29b221a3b962300eae10ff46", 0x46, 0x6c}) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0)="2828924a014db9830d1afbba58e5307a3930003a059ead46a3e4fe8f45fdef5fa8c926b9c0a3213ae5f073a9c07ae29aea260dc844728884c229166337ac4a7819d189c9ab256beb7dfa2cf8e6bf9ec1a594669acba0bb2d23bee508c6c2a027b928e6df36f24dfe80b49b4e55012c5bfa4feef44ba28f55e6255dba5acebc0bfe2933", 0x83) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000380)={0x81}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000003c0)={0x4, 0xb0cc, [{0x0, 0x0, 0x8}, {0xc, 0x0, 0x5}, {0x7, 0x0, 0x5}, {0x80000001, 0x0, 0xffffffffffffffff}, {0x999d, 0x0, 0x88}, {0x4, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x10, 0x0, 0x4f}, {0x92a, 0x0, 0x5}, {0xeb, 0x0, 0xf}, {0x50, 0x0, 0x6}, {0x4}, {0xf0, 0x0, 0x4}, {0x3, 0x0, 0xff}, {0x101, 0x0, 0x4123}, {0x8, 0x0, 0xff}]}) close(r2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x81800) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='virt_wifi0\x00', 0x10) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000600)) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000680)=0x8) sendmsg$kcm(r3, &(0x7f0000002a40)={&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x4, 0x3, 0x2, {0xa, 0x4e21, 0x5, @local, 0x4}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000740)="d46040c58051452dde0f1b45069b74b8a5493017fccf03599a9e7414ba", 0x1d}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="9f1c0f60b221d6d8933690eca5f3b4c76b3ee7979a0f369b4e87af736f7dab44f4e766181d5ff8", 0x27}], 0x3, &(0x7f0000001800)=[{0xb8, 0x10b, 0x0, "a1ca4efbd8bbdaa7ef5db02240e651071ad97b4a1f99ed14fcb984ef71d6c82d37c2513f8cfd81041837cee34a614846abfdb2edc57fc79900fc74a58fdb13bb89ef88662f74de2acaf0fece3f7b5f86636630a2d9f7a32df03357d560d6cc307c2e74a82527f4bf6a633ac2f86d5222664d57893f8c9e62205f90b488c15d36e901d98f472f09512b871b46fe072259c85f9abf5a876c33bd0429d8cceb0b1ab7"}, {0x110, 0x6, 0x10, "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"}, {0x38, 0x104, 0xe861, "ecfa38c663d0b1290fe8de6c6b5c81bd52463831f7bba0fbfc6614d5932e6434f39de8a6111ff663"}, {0x1010, 0x29, 0x4000000, "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"}], 0x1210}, 0x20040010) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000002a80)={0x0, r2}) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000002ac0)={0xf, 0x2, 0x6e1, 0x8, 0xa}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f0000002b40)={0x28, 0x14, 0x0, r4, &(0x7f0000002b00)="1cce974ac95bb868730bb7b25bbe91382db329636f817a4ab173a91fbc500066a75206d9e9c53e14938e62de499ffb0d612dae3473e8c90a", 0x0, 0x8, 0x2, 0x0, {0x0, 0x0, r2, 0x8}}, 0x1) r5 = accept$nfc_llcp(r3, 0x0, &(0x7f0000002b80)) getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f0000002bc0)=""/53, &(0x7f0000002c00)=0x35) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000002c40)={0xc, 0x0, 0xffffffff, 0x9, 0x6, 0x0, 0x3}) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000002c80)) openat$vcs(0xffffffffffffff9c, &(0x7f0000002cc0), 0x4440, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002d80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002dc0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002e00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000002f00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x58, r7, 0x102, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfe00}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket$netlink(0x10, 0x3, 0x4) preadv2(r4, &(0x7f0000003f80)=[{&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/58, 0x3a}], 0x2, 0xe, 0x4, 0x10) 50.667488ms ago: executing program 1 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'pimreg\x00', {0x2}, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80a0}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 848.305µs ago: executing program 1 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040)={0x4, 0x6}, 0x6) setrlimit(0x8, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}]}]}, 0x2c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 0s ago: executing program 1 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000fff500000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000050c00024000000000000000010900010073797a30000000000c0002400000000000000001080005"], 0x1a4}, 0x1, 0x0, 0x0, 0xc021}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:33143' (ED25519) to the list of known hosts. [ 48.072396][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 48.072410][ T42] audit: type=1400 audit(1785641138.965:141): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.084315][ T42] audit: type=1400 audit(1785641138.975:142): avc: denied { mount } for pid=5725 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.087430][ T5725] cgroup: Unknown subsys name 'net' [ 48.098362][ T42] audit: type=1400 audit(1785641138.985:143): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.273221][ T5725] cgroup: Unknown subsys name 'cpuset' [ 48.277121][ T5725] cgroup: Unknown subsys name 'rlimit' [ 48.454630][ T42] audit: type=1400 audit(1785641139.345:144): avc: denied { setattr } for pid=5725 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.464481][ T42] audit: type=1400 audit(1785641139.345:145): avc: denied { create } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.471830][ T42] audit: type=1400 audit(1785641139.345:146): avc: denied { write } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.478363][ T42] audit: type=1400 audit(1785641139.345:147): avc: denied { read } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.485261][ T42] audit: type=1400 audit(1785641139.355:148): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.493804][ T42] audit: type=1400 audit(1785641139.355:149): avc: denied { mount } for pid=5725 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.501189][ T42] audit: type=1400 audit(1785641139.365:150): avc: denied { read } for pid=5452 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.519775][ T5729] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.206122][ T5725] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.322521][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 53.322540][ T42] audit: type=1400 audit(1785641144.215:158): avc: denied { execmem } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.555413][ T42] audit: type=1400 audit(1785641144.445:159): avc: denied { create } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.569694][ T42] audit: type=1400 audit(1785641144.445:160): avc: denied { read write } for pid=5739 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.577998][ T42] audit: type=1400 audit(1785641144.445:161): avc: denied { open } for pid=5739 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.586329][ T42] audit: type=1400 audit(1785641144.455:162): avc: denied { ioctl } for pid=5739 comm="syz-executor" path="socket:[7074]" dev="sockfs" ino=7074 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.589129][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.600262][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.606285][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.608972][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.612086][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.612474][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.616134][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.620238][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.620313][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.620568][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.621628][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.625609][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.628566][ T42] audit: type=1400 audit(1785641144.515:163): avc: denied { read } for pid=5739 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.629445][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.630818][ T5754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.634630][ T42] audit: type=1400 audit(1785641144.515:164): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.637481][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.641104][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.641905][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.644361][ T42] audit: type=1400 audit(1785641144.515:165): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.646742][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.649579][ T42] audit: type=1400 audit(1785641144.525:166): avc: denied { module_request } for pid=5739 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.660226][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.661662][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.663857][ T42] audit: type=1400 audit(1785641144.555:167): avc: denied { sys_module } for pid=5739 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.311514][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.315215][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.318346][ T5744] bridge_slave_0: entered allmulticast mode [ 54.322446][ T5744] bridge_slave_0: entered promiscuous mode [ 54.358384][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.360765][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.363087][ T5744] bridge_slave_1: entered allmulticast mode [ 54.366810][ T5744] bridge_slave_1: entered promiscuous mode [ 54.410982][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.414002][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.417196][ T5739] bridge_slave_0: entered allmulticast mode [ 54.420501][ T5739] bridge_slave_0: entered promiscuous mode [ 54.458487][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.461599][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.464569][ T5739] bridge_slave_1: entered allmulticast mode [ 54.468396][ T5739] bridge_slave_1: entered promiscuous mode [ 54.486179][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.493284][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.555076][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.558452][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.561900][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.565000][ T5741] bridge_slave_0: entered allmulticast mode [ 54.569347][ T5741] bridge_slave_0: entered promiscuous mode [ 54.575686][ T5744] team0: Port device team_slave_0 added [ 54.581313][ T5744] team0: Port device team_slave_1 added [ 54.590282][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.599399][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.601765][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.604013][ T5741] bridge_slave_1: entered allmulticast mode [ 54.606673][ T5741] bridge_slave_1: entered promiscuous mode [ 54.618437][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.621607][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.624462][ T5749] bridge_slave_0: entered allmulticast mode [ 54.628262][ T5749] bridge_slave_0: entered promiscuous mode [ 54.676164][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.679440][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.682200][ T5749] bridge_slave_1: entered allmulticast mode [ 54.685638][ T5749] bridge_slave_1: entered promiscuous mode [ 54.690498][ T5739] team0: Port device team_slave_0 added [ 54.695082][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.699597][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.702409][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.711332][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.726762][ T5739] team0: Port device team_slave_1 added [ 54.731240][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.735485][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.737913][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.747307][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.789588][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.817239][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.821921][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.824785][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.834855][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.841022][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.843745][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.853896][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.860978][ T5741] team0: Port device team_slave_0 added [ 54.891346][ T5741] team0: Port device team_slave_1 added [ 54.927148][ T5749] team0: Port device team_slave_0 added [ 54.932346][ T5749] team0: Port device team_slave_1 added [ 54.938158][ T5744] hsr_slave_0: entered promiscuous mode [ 54.940678][ T5744] hsr_slave_1: entered promiscuous mode [ 54.984391][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.987105][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.997073][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.023674][ T5739] hsr_slave_0: entered promiscuous mode [ 55.027092][ T5739] hsr_slave_1: entered promiscuous mode [ 55.031211][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 55.033627][ T5739] Cannot create hsr debugfs directory [ 55.036674][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.039662][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.049747][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.055007][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.057963][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.068374][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.103698][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.106066][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.114961][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.240494][ T5741] hsr_slave_0: entered promiscuous mode [ 55.242825][ T5741] hsr_slave_1: entered promiscuous mode [ 55.244976][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 55.247610][ T5741] Cannot create hsr debugfs directory [ 55.253076][ T5749] hsr_slave_0: entered promiscuous mode [ 55.255612][ T5749] hsr_slave_1: entered promiscuous mode [ 55.257769][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 55.259636][ T5749] Cannot create hsr debugfs directory [ 55.472746][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.483324][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.505798][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.512187][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.550363][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.555063][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.569375][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.574144][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.610427][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.617472][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.621290][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.627281][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.634677][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.642261][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.646046][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.651907][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.661304][ T5747] Bluetooth: hci2: command tx timeout [ 55.664788][ T5751] Bluetooth: hci0: command tx timeout [ 55.731112][ T5751] Bluetooth: hci3: command tx timeout [ 55.732388][ T5747] Bluetooth: hci1: command tx timeout [ 55.735814][ T5741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.742472][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.746419][ T5741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.753237][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.765182][ T5741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.769900][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.775870][ T5741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.782051][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.854875][ T5749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.858869][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.862773][ T5749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.866550][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.875613][ T5749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.882672][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.888916][ T5749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.894770][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.921763][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.942156][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.962638][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.970086][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.988007][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.990699][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.997341][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.000007][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.011363][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.013587][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.028169][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.030573][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.041447][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.088651][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.097838][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.100894][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.124623][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.127437][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.133791][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.164332][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.177777][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.180492][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.197418][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.200458][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.365480][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.393928][ T5739] veth0_vlan: entered promiscuous mode [ 56.402551][ T5739] veth1_vlan: entered promiscuous mode [ 56.413075][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.435884][ T5739] veth0_macvtap: entered promiscuous mode [ 56.443751][ T5739] veth1_macvtap: entered promiscuous mode [ 56.462035][ T5744] veth0_vlan: entered promiscuous mode [ 56.468173][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.479173][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.498601][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.508329][ T5744] veth1_vlan: entered promiscuous mode [ 56.552331][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.561088][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.596740][ T5741] veth0_vlan: entered promiscuous mode [ 56.599305][ T5744] veth0_macvtap: entered promiscuous mode [ 56.608433][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.610858][ T5741] veth1_vlan: entered promiscuous mode [ 56.612399][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.615103][ T5744] veth1_macvtap: entered promiscuous mode [ 56.619981][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.648625][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.652074][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.652888][ T5749] veth0_vlan: entered promiscuous mode [ 56.661701][ T5749] veth1_vlan: entered promiscuous mode [ 56.667352][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.676885][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.690623][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.693873][ T5741] veth0_macvtap: entered promiscuous mode [ 56.699550][ T5739] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.710510][ T5741] veth1_macvtap: entered promiscuous mode [ 56.725953][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.747705][ T5749] veth0_macvtap: entered promiscuous mode [ 56.756948][ T5749] veth1_macvtap: entered promiscuous mode [ 56.764677][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.782358][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.797051][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.800781][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.812235][ T5892] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.815805][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.831505][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.840680][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.841911][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.843496][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.920287][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.978344][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.980095][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.981695][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.988136][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.034972][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.037544][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.046333][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.049473][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.081533][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.084487][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.130137][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.136285][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.143711][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.148179][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.170677][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.173932][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.176505][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.179066][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.220210][ T5914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'. [ 57.223432][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9'. [ 57.226167][ T5914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'. [ 57.237293][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.241527][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.244505][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.247320][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.294952][ T5904] ======================================================= [ 57.294952][ T5904] WARNING: The mand mount option has been deprecated and [ 57.294952][ T5904] and is ignored by this kernel. Remove the mand [ 57.294952][ T5904] option from the mount to silence this warning. [ 57.294952][ T5904] ======================================================= [ 57.315624][ T5932] Cannot find add_set index 0 as target [ 57.346033][ T5934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 57.395932][ T5940] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 57.402471][ T5834] IPVS: starting estimator thread 0... [ 57.464813][ T5948] evm: overlay not supported [ 57.467639][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 57.490350][ T5944] IPVS: using max 28 ests per chain, 67200 per kthread [ 57.589938][ T5849] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.656605][ T13] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 57.657247][ T5954] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 57.739998][ T5747] Bluetooth: hci0: command tx timeout [ 57.740055][ T5751] Bluetooth: hci2: command tx timeout [ 57.773340][ T5849] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.780267][ T5849] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.790034][ T5849] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 57.797015][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.810196][ T5751] Bluetooth: hci1: command tx timeout [ 57.810941][ T5747] Bluetooth: hci3: command tx timeout [ 57.820709][ T5849] spcp8x5 7-1:1.0: required endpoints missing [ 57.825347][ T5969] Cannot find set identified by id 1280 to match [ 57.898225][ T5977] openvswitch: netlink: IP tunnel dst address not specified [ 57.956623][ T5983] trusted_key: encrypted_key: master key parameter '' is invalid [ 58.022161][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.025365][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.070200][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.080823][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.085203][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.170160][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.174420][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.178004][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.183000][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.183962][ T5988] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 58.189088][ T5988] ipvlan0: entered allmulticast mode [ 58.191349][ T5988] veth0_vlan: entered allmulticast mode [ 58.197982][ T5988] team0: Device ipvlan0 failed to register rx_handler [ 58.219975][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 58.227079][ T34] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 58.231999][ T34] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 58.235706][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 58.239412][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.243533][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.247568][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.253071][ T34] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.256596][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.265465][ T34] usb 6-1: config 0 descriptor?? [ 58.303765][ T5994] sysfs: Unknown parameter '' [ 58.362045][ T42] kauditd_printk_skb: 87 callbacks suppressed [ 58.362058][ T42] audit: type=1400 audit(1785641149.255:255): avc: denied { getopt } for pid=5993 comm="syz.3.34" lport=58654 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 58.374620][ T42] audit: type=1400 audit(1785641149.255:256): avc: denied { mount } for pid=5996 comm="syz.0.35" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 58.385285][ T42] audit: type=1400 audit(1785641149.255:257): avc: denied { search } for pid=5996 comm="syz.0.35" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 58.392341][ T42] audit: type=1400 audit(1785641149.255:258): avc: denied { write } for pid=5996 comm="syz.0.35" name="dynamic_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.399332][ T42] audit: type=1400 audit(1785641149.255:259): avc: denied { open } for pid=5996 comm="syz.0.35" path="/9/tracing/dynamic_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 58.409157][ T42] audit: type=1400 audit(1785641149.295:260): avc: denied { sys_module } for pid=5996 comm="syz.0.35" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.446414][ T42] audit: type=1400 audit(1785641149.335:261): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 58.478054][ T34] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 58.486041][ T34] usb 6-1: USB disconnect, device number 2 [ 58.496497][ T34] usblp0: removed [ 58.542434][ T6007] netlink: 'syz.0.38': attribute type 10 has an invalid length. [ 58.551718][ T6007] team0: Port device veth0 added [ 58.608140][ T6013] netlink: 'syz.3.41': attribute type 10 has an invalid length. [ 58.615147][ T6013] team0: Device ipvlan0 failed to register rx_handler [ 58.658332][ T42] audit: type=1400 audit(1785641149.545:262): avc: denied { create } for pid=6010 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.666099][ T42] audit: type=1400 audit(1785641149.545:263): avc: denied { write } for pid=6010 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.726564][ T42] audit: type=1400 audit(1785641149.615:264): avc: denied { read } for pid=6015 comm="syz.3.42" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.894535][ T6030] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 58.932059][ T5849] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.035109][ T6040] binder: BINDER_SET_CONTEXT_MGR already set [ 59.040168][ T6040] binder: 6038:6040 ioctl 4018620d 200000000100 returned -16 [ 59.043283][ T6040] binder: BINDER_SET_CONTEXT_MGR already set [ 59.045514][ T6040] binder: 6038:6040 ioctl 4018620d 200000000100 returned -16 [ 59.048264][ T6040] binder: BINDER_SET_CONTEXT_MGR already set [ 59.050843][ T6040] binder: 6038:6040 ioctl 4018620d 200000000100 returned -16 [ 59.053904][ T6040] binder: BINDER_SET_CONTEXT_MGR already set [ 59.056386][ T6040] binder: 6038:6040 ioctl 4018620d 200000000100 returned -16 [ 59.059567][ T6040] binder: BINDER_SET_CONTEXT_MGR already set [ 59.062301][ T6040] binder: 6038:6040 ioctl 4018620d 200000000100 returned -16 [ 59.064883][ T6040] binder: BINDER_SET_CONTEXT_MGR already set [ 59.067405][ T6040] binder: 6038:6040 ioctl 4018620d 200000000100 returned -16 [ 59.089988][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 59.094382][ T5849] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 59.097982][ T5849] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 59.104973][ T5849] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 59.108854][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.112913][ T5849] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 59.116509][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 59.120907][ T5849] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 59.123763][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.138322][ T5849] usb 6-1: config 0 descriptor?? [ 59.156565][ T6048] SET target dimension over the limit! [ 59.194603][ T6050] MTD: Couldn't look up './bus': -15 [ 59.260029][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.350563][ T5849] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 59.411383][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 59.415775][ T5834] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 59.420136][ T5834] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.424010][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.427929][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.436925][ T5834] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.441987][ T5834] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.445614][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.810202][ T5747] Bluetooth: hci0: command tx timeout [ 59.811074][ T5751] Bluetooth: hci2: command tx timeout [ 59.889975][ T5751] Bluetooth: hci1: command tx timeout [ 60.480551][ T1485] usb 7-1: USB disconnect, device number 2 [ 60.732525][ T6092] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 60.768931][ T6092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.788157][ T6092] bond1: (slave geneve2): making interface the new active one [ 60.792118][ T6092] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 60.819935][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.823225][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.826758][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.830583][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.848881][ T58] usb 6-1: USB disconnect, device number 3 [ 60.850427][ T5751] Bluetooth: hci3: command tx timeout [ 60.877405][ T58] usblp0: removed [ 60.877905][ T6100] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 60.887568][ T6102] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 60.915717][ T6106] SET target dimension over the limit! [ 60.917613][ T6107] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 60.930100][ T6107] ipvlan0: entered allmulticast mode [ 60.931979][ T6107] veth0_vlan: entered allmulticast mode [ 60.935560][ T6107] team0: Device ipvlan0 failed to register rx_handler [ 60.978221][ T6114] netlink: 'syz.1.72': attribute type 10 has an invalid length. [ 60.991924][ T6114] team0: Port device veth0 added [ 61.092339][ T6121] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 61.275961][ T6133] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 61.311397][ T6130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 61.598748][ T6157] FAULT_INJECTION: forcing a failure. [ 61.598748][ T6157] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 61.604059][ T6157] CPU: 1 UID: 0 PID: 6157 Comm: syz.1.87 Not tainted syzkaller #0 PREEMPT(full) [ 61.604082][ T6157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.604093][ T6157] Call Trace: [ 61.604108][ T6157] [ 61.604116][ T6157] dump_stack_lvl+0x100/0x190 [ 61.604221][ T6157] should_fail_ex.cold+0x5/0xa [ 61.604290][ T6157] _copy_from_user+0x2e/0xd0 [ 61.604343][ T6157] copy_msghdr_from_user+0x9f/0x4c0 [ 61.604400][ T6157] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 61.604429][ T6157] ___sys_sendmsg+0x106/0x1e0 [ 61.604447][ T6157] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.604467][ T6157] ? __lock_acquire+0x49f/0x1a40 [ 61.604518][ T6157] ? get_pid_task+0x106/0x250 [ 61.604567][ T6157] __sys_sendmsg+0x160/0x210 [ 61.604590][ T6157] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.604622][ T6157] do_syscall_64+0x115/0x870 [ 61.604675][ T6157] ? clear_bhb_loop+0x40/0x90 [ 61.604694][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.604713][ T6157] RIP: 0033:0x7f0bedd9e019 [ 61.604728][ T6157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.604744][ T6157] RSP: 002b:00007f0beebff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.604771][ T6157] RAX: ffffffffffffffda RBX: 00007f0bee025fa0 RCX: 00007f0bedd9e019 [ 61.604782][ T6157] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 61.604792][ T6157] RBP: 00007f0beebff090 R08: 0000000000000000 R09: 0000000000000000 [ 61.604802][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.604812][ T6157] R13: 00007f0bee026038 R14: 00007f0bee025fa0 R15: 00007ffd695fbbb8 [ 61.604838][ T6157] [ 61.860025][ T6162] loop2: detected capacity change from 0 to 7 [ 61.866771][ T6162] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 61.870733][ T6162] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 61.872826][ T6162] loop2: [ 61.874411][ T6162] loop2: partition table partially beyond EOD, truncated [ 61.892910][ T5751] Bluetooth: hci0: command tx timeout [ 61.893870][ T5747] Bluetooth: hci2: command tx timeout [ 61.970631][ T5747] Bluetooth: hci1: command tx timeout [ 62.016096][ T5834] usb 5-1: usb_control_msg returned -71 [ 62.018209][ T5834] usbtmc 5-1:16.0: can't read capabilities [ 62.029649][ T5834] usb 5-1: USB disconnect, device number 2 [ 62.159980][ T4259] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.311970][ T4259] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.315371][ T4259] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.319909][ T4259] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 62.322901][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.330843][ T4259] spcp8x5 6-1:1.0: required endpoints missing [ 62.435298][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.437929][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.441226][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.444262][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.446778][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.450711][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.453652][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.456087][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.459026][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.463174][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 62.475501][ T5848] hid-generic 000A:FFFFFF1D:0002.0002: hidraw1: HID v0.04 Device [syz0] on syz1 [ 62.493929][ T6179] __nla_validate_parse: 5 callbacks suppressed [ 62.493948][ T6179] netlink: 236 bytes leftover after parsing attributes in process `syz.0.94'. [ 62.535241][ T6171] Zero length message leads to an empty skb [ 62.691598][ T6190] netlink: 'syz.0.97': attribute type 23 has an invalid length. [ 62.837067][ T6196] nbd: must specify a device to reconfigure [ 62.843089][ T6196] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 62.847816][ T6196] netlink: 'syz.2.100': attribute type 29 has an invalid length. [ 62.987137][ T6206] Cannot find add_set index 0 as target [ 63.025379][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.105'. [ 63.141326][ T6215] input: syz0 as /devices/virtual/input/input6 [ 63.411958][ T42] kauditd_printk_skb: 83 callbacks suppressed [ 63.411971][ T42] audit: type=1400 audit(1785641154.305:348): avc: denied { append } for pid=6232 comm="syz.3.112" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.433245][ T6234] loop3: detected capacity change from 0 to 7 [ 63.437839][ T6234] loop3: p1 p4 [ 63.439053][ T6234] loop3: partition table partially beyond EOD, truncated [ 63.473454][ T6241] validate_nla: 1 callbacks suppressed [ 63.473468][ T6241] netlink: 'syz.2.114': attribute type 1 has an invalid length. [ 63.484361][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.484362][ T5743] udevd[5743]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.491671][ T42] audit: type=1400 audit(1785641154.385:349): avc: denied { write } for pid=6243 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.509413][ T6241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.534143][ T6241] bond1: (slave geneve2): making interface the new active one [ 63.538077][ T6241] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 63.538425][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.116'. [ 63.578819][ T6249] Cannot find set identified by id 0 to match [ 63.644804][ T42] audit: type=1400 audit(1785641154.535:350): avc: denied { map } for pid=6252 comm="syz.2.119" path="/dev/userfaultfd" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.657174][ T42] audit: type=1400 audit(1785641154.535:351): avc: denied { execute } for pid=6252 comm="syz.2.119" path="/dev/userfaultfd" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.739409][ T6266] SET target dimension over the limit! [ 63.782163][ T42] audit: type=1400 audit(1785641154.675:352): avc: denied { ioctl } for pid=6267 comm="syz.0.125" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12390 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.792494][ T42] audit: type=1400 audit(1785641154.685:353): avc: denied { open } for pid=6267 comm="syz.0.125" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 63.806674][ T42] audit: type=1400 audit(1785641154.685:354): avc: denied { ioctl } for pid=6267 comm="syz.0.125" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 63.843222][ T6272] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 63.848693][ T42] audit: type=1400 audit(1785641154.735:355): avc: denied { allowed } for pid=6257 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.877705][ T42] audit: type=1400 audit(1785641154.765:356): avc: denied { ioctl } for pid=6257 comm="syz.2.121" path="socket:[10024]" dev="sockfs" ino=10024 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.897170][ T42] audit: type=1400 audit(1785641154.785:357): avc: denied { append } for pid=6275 comm="syz.3.127" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.023646][ T1499] IPVS: starting estimator thread 0... [ 64.057617][ T6290] FAULT_INJECTION: forcing a failure. [ 64.057617][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.064035][ T6290] CPU: 0 UID: 0 PID: 6290 Comm: syz.2.131 Not tainted syzkaller #0 PREEMPT(full) [ 64.064060][ T6290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.064070][ T6290] Call Trace: [ 64.064090][ T6290] [ 64.064097][ T6290] dump_stack_lvl+0x100/0x190 [ 64.064125][ T6290] should_fail_ex.cold+0x5/0xa [ 64.064148][ T6290] _copy_from_user+0x2e/0xd0 [ 64.064192][ T6290] do_ip_vs_set_ctl+0x53c/0xc90 [ 64.064233][ T6290] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 64.064256][ T6290] ? rcu_is_watching+0x12/0xc0 [ 64.064300][ T6290] ? find_held_lock+0x2b/0x80 [ 64.064317][ T6290] ? nf_sockopt_find.isra.0+0x222/0x290 [ 64.064340][ T6290] ? nf_sockopt_find.isra.0+0x222/0x290 [ 64.064371][ T6290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 64.064408][ T6290] ? nf_setsockopt+0x8d/0xf0 [ 64.064427][ T6290] nf_setsockopt+0x8d/0xf0 [ 64.064450][ T6290] ip_setsockopt+0xcb/0xf0 [ 64.064481][ T6290] sctp_setsockopt+0x161/0xb370 [ 64.064515][ T6290] ? __pfx_sctp_setsockopt+0x10/0x10 [ 64.064532][ T6290] ? __fget_files+0x215/0x3d0 [ 64.064564][ T6290] ? selinux_socket_setsockopt+0x6a/0x80 [ 64.064597][ T6290] ? sock_common_setsockopt+0x2e/0xf0 [ 64.064624][ T6290] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.064653][ T6290] do_sock_setsockopt+0xf3/0x1d0 [ 64.064682][ T6290] __sys_setsockopt+0x195/0x220 [ 64.064708][ T6290] __x64_sys_setsockopt+0xbd/0x160 [ 64.064728][ T6290] ? do_syscall_64+0x90/0x870 [ 64.064747][ T6290] ? lockdep_hardirqs_on+0x78/0x100 [ 64.064768][ T6290] do_syscall_64+0x115/0x870 [ 64.064805][ T6290] ? clear_bhb_loop+0x40/0x90 [ 64.064827][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.064844][ T6290] RIP: 0033:0x7ffab3f9e019 [ 64.064859][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.064874][ T6290] RSP: 002b:00007ffab4f11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.064902][ T6290] RAX: ffffffffffffffda RBX: 00007ffab4225fa0 RCX: 00007ffab3f9e019 [ 64.064913][ T6290] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 64.064923][ T6290] RBP: 00007ffab4f11090 R08: 0000000000000044 R09: 0000000000000000 [ 64.064933][ T6290] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.064942][ T6290] R13: 00007ffab4226038 R14: 00007ffab4225fa0 R15: 00007ffc55528698 [ 64.064965][ T6290] [ 64.129889][ T6287] IPVS: using max 46 ests per chain, 110400 per kthread [ 64.364855][ T6302] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 64.680064][ T1485] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.841906][ T1485] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 64.845470][ T1485] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.864140][ T1485] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 002 [ 64.980489][ T5834] usb 6-1: USB disconnect, device number 4 [ 65.138288][ T6341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.146'. [ 65.142699][ T6341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.146'. [ 65.163668][ T6304] tps6598x 0-0038: probe with driver tps6598x failed with error -22 [ 65.170974][ T6304] i2c i2c-0: new_device: Instantiated device apple,cd321x at 0x38 [ 65.176529][ T1485] (null): error -EIO: failure setting delay to 10us [ 65.182384][ T1485] i2c-tiny-usb 8-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 65.191879][ T1485] usb 8-1: USB disconnect, device number 2 [ 65.202853][ T6324] e1000e 0000:00:02.0 eth1: removed PHC [ 65.319297][ T6324] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 65.471652][ T6346] ohci-pci 0000:00:02.0: OHCI PCI host controller [ 65.472189][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.476490][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.479511][ T6346] ohci-pci 0000:00:02.0: new USB bus registered, assigned bus number 63 [ 65.483629][ T6346] ohci-pci 0000:00:02.0: irq 33, io mem 0xfea80000 [ 65.529428][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.534905][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.543781][ T6346] ohci-pci 0000:00:02.0: USB HC reset timed out! [ 65.553326][ T6346] ohci-pci 0000:00:02.0: can't start [ 65.560252][ T6346] ohci-pci 0000:00:02.0: startup error -1 [ 65.562147][ T6346] ohci-pci 0000:00:02.0: USB bus 63 deregistered [ 65.594803][ T6346] ohci-pci 0000:00:02.0: init 0000:00:02.0 fail, -1 [ 65.598214][ T6346] ohci-pci 0000:00:02.0: probe with driver ohci-pci failed with error -1 [ 65.650807][ T5791] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.656284][ T5791] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.662846][ T5791] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.666909][ T5791] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.669234][ T6385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.153'. [ 65.676234][ T6388] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 65.679235][ T6388] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.691842][ T6388] vhci_hcd vhci_hcd.0: Device attached [ 65.707235][ T6393] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 65.761571][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 65.765723][ T6401] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 65.816709][ T6407] Cannot find add_set index 0 as target [ 65.847570][ T6410] process 'syz.1.160' launched '/dev/fd/3' with NULL argv: empty string added [ 65.950136][ T1485] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 65.960893][ T6390] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 65.968387][ T5791] vhci_hcd vhci_hcd.2: stop threads [ 65.971276][ T5791] vhci_hcd vhci_hcd.2: release socket [ 65.972841][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 65.976853][ T5791] vhci_hcd vhci_hcd.2: disconnect device [ 66.012513][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.016037][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.070618][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.078461][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.183741][ T5818] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.213525][ T5791] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.233101][ T5791] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.235596][ T6440] netlink: 236 bytes leftover after parsing attributes in process `syz.0.165'. [ 66.236408][ T5791] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.289097][ T6448] binder: BINDER_SET_CONTEXT_MGR already set [ 66.293497][ T6448] binder: 6447:6448 ioctl 4018620d 200000000100 returned -16 [ 66.299237][ T6448] binder: BINDER_SET_CONTEXT_MGR already set [ 66.306413][ T6448] binder: 6447:6448 ioctl 4018620d 200000000100 returned -16 [ 66.604486][ T6471] netlink: 236 bytes leftover after parsing attributes in process `syz.3.176'. [ 66.633063][ T6473] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 66.646301][ T6473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.683986][ T6476] netlink: 'syz.3.178': attribute type 19 has an invalid length. [ 66.686786][ T6476] netlink: 'syz.3.178': attribute type 19 has an invalid length. [ 66.715568][ T6478] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 66.718872][ T6478] team0: Device ipvlan0 failed to register rx_handler [ 67.015539][ T6491] netlink: 'syz.3.185': attribute type 10 has an invalid length. [ 67.015541][ T6490] netlink: 'syz.3.185': attribute type 10 has an invalid length. [ 67.019427][ T6490] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 67.027957][ T6493] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 67.028557][ T6491] netlink: 'syz.3.185': attribute type 10 has an invalid length. [ 67.032961][ T6490] netlink: 'syz.3.185': attribute type 10 has an invalid length. [ 67.042080][ T6493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.045285][ T6490] syz_tun: entered promiscuous mode [ 67.078711][ T6498] ipvlan0: entered allmulticast mode [ 67.081106][ T6498] veth0_vlan: entered allmulticast mode [ 67.083916][ T6498] team0: Device ipvlan0 failed to register rx_handler [ 67.224554][ T6509] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 67.408376][ T6539] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 67.733992][ T6563] __nla_validate_parse: 4 callbacks suppressed [ 67.734007][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 67.822541][ T6567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.843231][ T6567] bond1: (slave geneve2): making interface the new active one [ 67.848920][ T6567] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 67.860118][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.863116][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.870032][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.876231][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.963370][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 67.967585][ T6576] macvlan1: entered promiscuous mode [ 67.969364][ T6576] macvlan1: entered allmulticast mode [ 67.972117][ T6576] veth1_vlan: entered allmulticast mode [ 67.975577][ T6576] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 67.993725][ T5747] Bluetooth: hci1: hcon ffff88803d804000 sent 1 < count 8 [ 67.997323][ T5747] Bluetooth: hci1: hcon ffff88803d800000 sent 1 < count 6 [ 68.000636][ T5747] Bluetooth: hci1: hcon ffff88803d800000 sent 0 < count 257 [ 68.195101][ T6591] ipvlan0: entered allmulticast mode [ 68.197288][ T6591] veth0_vlan: entered allmulticast mode [ 68.201092][ T6591] team0: Device ipvlan0 failed to register rx_handler [ 68.260089][ T6597] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 68.356253][ T6602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.393288][ T6609] netlink: 236 bytes leftover after parsing attributes in process `syz.2.223'. [ 68.429001][ T6610] tipc: Started in network mode [ 68.431464][ T6610] tipc: Node identity ac14140f, cluster identity 4711 [ 68.435108][ T6610] tipc: Enabled bearer , priority 10 [ 68.461729][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 68.461747][ T42] audit: type=1400 audit(1785641159.355:438): avc: denied { sqpoll } for pid=6613 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.474669][ T42] audit: type=1400 audit(1785641159.355:439): avc: denied { write } for pid=6613 comm="syz.2.225" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 68.496758][ T42] audit: type=1400 audit(1785641159.385:440): avc: denied { unmount } for pid=5749 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.515982][ T6617] validate_nla: 7 callbacks suppressed [ 68.515995][ T6617] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 68.522569][ T6617] team0: Device ipvlan0 failed to register rx_handler [ 68.661854][ T42] audit: type=1400 audit(1785641159.555:441): avc: denied { create } for pid=6625 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 68.712853][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 68.713350][ T42] audit: type=1400 audit(1785641159.605:442): avc: denied { create } for pid=6632 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.757607][ T6635] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 68.780979][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 68.784725][ T6638] netlink: 236 bytes leftover after parsing attributes in process `syz.2.233'. [ 68.793440][ T6635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.816548][ T42] audit: type=1400 audit(1785641159.705:443): avc: denied { read write } for pid=6639 comm="syz.0.234" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 68.832583][ T42] audit: type=1400 audit(1785641159.705:444): avc: denied { open } for pid=6639 comm="syz.0.234" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 68.842053][ T42] audit: type=1400 audit(1785641159.715:445): avc: denied { map } for pid=6639 comm="syz.0.234" path="socket:[12793]" dev="sockfs" ino=12793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 68.846553][ T6646] netlink: 'syz.1.236': attribute type 10 has an invalid length. [ 68.864136][ T6646] team0: Device ipvlan0 failed to register rx_handler [ 68.876050][ T6643] netdevsim netdevsim2: Direct firmware load for . [ 68.876050][ T6643] failed with error -2 [ 68.882905][ T6643] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 68.882905][ T6643] [ 68.886181][ T42] audit: type=1400 audit(1785641159.775:446): avc: denied { firmware_load } for pid=6641 comm="syz.2.235" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 68.897020][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 68.917814][ T6650] Cannot find set identified by id 0 to match [ 68.925117][ T6653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.982816][ T42] audit: type=1400 audit(1785641159.875:447): avc: denied { mounton } for pid=6658 comm="syz.1.242" path="/42/config" dev="configfs" ino=3100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.013957][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 69.018040][ T6664] netlink: 236 bytes leftover after parsing attributes in process `syz.1.243'. [ 69.144696][ T6680] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 69.174279][ T6682] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 69.203281][ T6689] netlink: 32 bytes leftover after parsing attributes in process `syz.2.252'. [ 69.285641][ T6696] openvswitch: netlink: Message has 512 unknown bytes. [ 69.349524][ T6704] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 69.354015][ T6704] team0: Port device veth0 added [ 69.373610][ T6702] usb usb9: usbfs: process 6702 (syz.1.257) did not claim interface 29 before use [ 69.434699][ T6712] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 69.573021][ T34] tipc: Node number set to 2886997007 [ 70.451540][ T6733] netlink: 'syz.0.268': attribute type 10 has an invalid length. [ 70.455387][ T6733] team0: Device ipvlan0 failed to register rx_handler [ 70.460148][ T6737] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 70.556845][ T6754] netlink: 'syz.2.276': attribute type 1 has an invalid length. [ 70.584544][ T6754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 70.624441][ T6769] netlink: 'syz.2.281': attribute type 10 has an invalid length. [ 70.628075][ T6769] team0: Device ipvlan0 failed to register rx_handler [ 70.636561][ T6771] capability: warning: `syz.3.282' uses 32-bit capabilities (legacy support in use) [ 70.673910][ T6780] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 70.705263][ T6772] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 70.771263][ T6795] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 70.785008][ T6795] 8021q: adding VLAN 0 to HW filter on device bond5 [ 70.823295][ T6799] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 70.828148][ T6799] team0: Device ipvlan0 failed to register rx_handler [ 71.010347][ T5834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.080060][ T1485] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 71.161683][ T5834] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 71.164870][ T5834] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 71.168672][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 71.175044][ T5834] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.178368][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.181551][ T5834] usb 5-1: Product: syz [ 71.183041][ T5834] usb 5-1: Manufacturer: syz [ 71.184914][ T5834] usb 5-1: SerialNumber: syz [ 71.189611][ T5834] usb 5-1: config 0 descriptor?? [ 71.194193][ T5834] hub 5-1:0.0: bad descriptor, ignoring hub [ 71.196649][ T5834] hub 5-1:0.0: probe with driver hub failed with error -5 [ 71.204365][ T5834] usb 5-1: selecting invalid altsetting 0 [ 71.416783][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.420030][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.447323][ T6803] netlink: 'syz.1.293': attribute type 10 has an invalid length. [ 71.510204][ T6805] bond2: entered promiscuous mode [ 71.510341][ T4259] usb 5-1: USB disconnect, device number 3 [ 71.512327][ T6805] bond2: entered allmulticast mode [ 71.637284][ T6812] Cannot find set identified by id 0 to match [ 71.742746][ T4259] hid_parser_main: 98 callbacks suppressed [ 71.742761][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.750549][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.753125][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.755849][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.758363][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.760953][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.763460][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.765918][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.768251][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.770557][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: unknown main item tag 0x0 [ 71.791373][ T4259] hid-generic 000A:FFFFFF1D:0002.0003: hidraw1: HID v0.04 Device [syz0] on syz1 [ 71.963965][ T6833] team0: Device ipvlan0 failed to register rx_handler [ 72.142326][ T6840] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 72.392635][ T6850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.412416][ T6850] bond1: (slave geneve2): making interface the new active one [ 72.417286][ T6850] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 72.751435][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.754054][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.791027][ T6865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.797180][ T6865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.899986][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.903211][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.906066][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.908873][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.370840][ T6884] team0: Device ipvlan0 failed to register rx_handler [ 73.436759][ T6888] __nla_validate_parse: 10 callbacks suppressed [ 73.436775][ T6888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.323'. [ 73.511211][ T42] kauditd_printk_skb: 129 callbacks suppressed [ 73.511284][ T42] audit: type=1400 audit(1785641164.405:577): avc: denied { create } for pid=6891 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.522146][ T42] audit: type=1400 audit(1785641164.405:578): avc: denied { ioctl } for pid=6891 comm="syz.0.325" path="socket:[15529]" dev="sockfs" ino=15529 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.601681][ T42] audit: type=1400 audit(1785641164.495:579): avc: denied { read write } for pid=5739 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.610268][ T42] audit: type=1400 audit(1785641164.495:580): avc: denied { open } for pid=5739 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.620256][ T42] audit: type=1400 audit(1785641164.495:581): avc: denied { ioctl } for pid=5739 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.629328][ T42] audit: type=1400 audit(1785641164.515:582): avc: denied { create } for pid=6893 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.169450][ T42] audit: type=1400 audit(1785641165.055:583): avc: denied { read } for pid=6895 comm="syz.1.327" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.178742][ T42] audit: type=1400 audit(1785641165.055:584): avc: denied { open } for pid=6895 comm="syz.1.327" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.188597][ T42] audit: type=1400 audit(1785641165.065:585): avc: denied { read } for pid=6895 comm="syz.1.327" name="event2" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.198532][ T42] audit: type=1400 audit(1785641165.065:586): avc: denied { open } for pid=6895 comm="syz.1.327" path="/dev/input/event2" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.346161][ T6898] validate_nla: 3 callbacks suppressed [ 74.346180][ T6898] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 74.368908][ T6898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.740817][ T6818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.794269][ T6910] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 74.839602][ T6916] netlink: 'syz.3.336': attribute type 49 has an invalid length. [ 74.846335][ T6916] bond0: (slave bond_slave_0): Releasing backup interface [ 74.938688][ T6916] bond_slave_0: entered promiscuous mode [ 74.942632][ T6916] bond_slave_0: entered allmulticast mode [ 74.974352][ T6925] futex_wake_op: syz.0.337 tries to shift op by -1; fix this program [ 75.100238][ T6939] fuse: Unknown parameter '0x0000000000000004' [ 75.216025][ T6953] netlink: 84 bytes leftover after parsing attributes in process `syz.1.347'. [ 75.272927][ T6956] warning: `syz.1.347' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.393363][ T6964] trusted_key: encrypted_key: hex blob is missing [ 75.426421][ T6968] netlink: 'syz.0.350': attribute type 1 has an invalid length. [ 75.720557][ T6993] overlayfs: failed to resolve './file0': -2 [ 75.722940][ T6992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6992 comm=syz.2.357 [ 75.821430][ T7002] SELinux: policydb magic number 0x797cff8c does not match expected magic number 0xf97cff8c [ 75.827055][ T7002] SELinux: failed to load policy [ 75.856687][ T7006] netlink: 232 bytes leftover after parsing attributes in process `syz.2.362'. [ 76.002513][ T7023] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 76.036258][ T7025] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 76.078141][ T7025] 8021q: adding VLAN 0 to HW filter on device bond6 [ 76.105804][ T7025] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 76.204569][ T7035] netlink: 232 bytes leftover after parsing attributes in process `syz.2.373'. [ 76.482859][ T1499] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 76.675511][ T1499] usb 8-1: config 0 has no interfaces? [ 76.677863][ T1499] usb 8-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 76.692229][ T1499] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.709488][ T1499] usb 8-1: config 0 descriptor?? [ 76.838635][ T7073] netlink: 232 bytes leftover after parsing attributes in process `syz.2.383'. [ 76.925383][ T7078] netlink: 236 bytes leftover after parsing attributes in process `syz.2.385'. [ 76.959939][ T1485] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 77.019460][ T7033] NFSD: Failed to start, no listeners configured. [ 77.058287][ T7082] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 77.111152][ T1485] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.115438][ T1485] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 77.121758][ T1485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.133702][ T1485] spcp8x5 6-1:1.0: required endpoints missing [ 77.380031][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.469988][ T5849] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 77.505702][ T1485] usb 8-1: USB disconnect, device number 3 [ 77.551520][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.556027][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.559167][ T58] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 77.562130][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.566852][ T58] usb 5-1: config 0 descriptor?? [ 77.637755][ T5849] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.642229][ T5849] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 77.645566][ T5849] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 77.649307][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.660218][ T5849] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 77.667775][ T5849] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 77.981309][ T58] hid_parser_main: 98 callbacks suppressed [ 77.981324][ T58] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 77.985491][ T58] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 78.001784][ T58] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0004/input/input9 [ 78.034120][ T7092] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 78.044801][ T7092] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 78.052059][ T7092] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 78.097507][ T58] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 78.101563][ T7099] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 78.145534][ T7099] 8021q: adding VLAN 0 to HW filter on device bond4 [ 78.253891][ T7092] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 78.256659][ T7087] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 78.270159][ T5849] usb 7-1: USB disconnect, device number 3 [ 78.283619][ T7104] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.289479][ T5849] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 78.293758][ T5849] spcp8x5 7-1:1.0: device disconnected [ 78.422158][ T4259] usb 5-1: USB disconnect, device number 4 [ 78.790500][ T42] kauditd_printk_skb: 278 callbacks suppressed [ 78.790518][ T42] audit: type=1400 audit(1785641169.685:865): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.801832][ T42] audit: type=1400 audit(1785641169.695:866): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 78.853571][ T42] audit: type=1400 audit(1785641169.745:867): avc: denied { perfmon } for pid=7113 comm="syz.2.396" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.860499][ T7114] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 78.861435][ T42] audit: type=1400 audit(1785641169.745:868): avc: denied { prog_run } for pid=7113 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.938340][ T42] audit: type=1400 audit(1785641169.825:869): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 78.944880][ T42] audit: type=1400 audit(1785641169.825:870): avc: denied { unmount } for pid=5744 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.082954][ T42] audit: type=1400 audit(1785641169.975:871): avc: denied { create } for pid=7120 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.087540][ T7121] netlink: 60 bytes leftover after parsing attributes in process `syz.3.400'. [ 79.091755][ T42] audit: type=1400 audit(1785641169.975:872): avc: denied { write } for pid=7120 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.111751][ T42] audit: type=1400 audit(1785641170.005:873): avc: denied { setopt } for pid=7120 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.138273][ T42] audit: type=1400 audit(1785641170.025:874): avc: denied { create } for pid=7122 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.190009][ T1485] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 79.198138][ T7129] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 79.201887][ T7129] team0: Device ipvlan0 failed to register rx_handler [ 79.339947][ T1485] usb 7-1: Using ep0 maxpacket: 16 [ 79.344102][ T1485] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.348298][ T1485] usb 7-1: config 0 has no interfaces? [ 79.353272][ T1485] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 79.357257][ T1485] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.360712][ T1485] usb 7-1: Product: syz [ 79.362480][ T1485] usb 7-1: Manufacturer: syz [ 79.364415][ T1485] usb 7-1: SerialNumber: syz [ 79.369109][ T1485] usb 7-1: config 0 descriptor?? [ 79.578292][ T1485] usb 7-1: USB disconnect, device number 4 [ 79.763599][ T7133] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 79.778847][ T7133] 8021q: adding VLAN 0 to HW filter on device bond5 [ 79.779393][ T1499] usb 6-1: USB disconnect, device number 5 [ 79.825753][ T7136] netlink: 'syz.1.405': attribute type 2 has an invalid length. [ 79.828959][ T7136] netlink: 151 bytes leftover after parsing attributes in process `syz.1.405'. [ 79.851644][ T7139] bond6: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 79.854783][ T7139] bond6: entered allmulticast mode [ 79.858910][ T7139] bond6: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 79.880097][ T7142] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 79.897916][ T7144] netlink: 56 bytes leftover after parsing attributes in process `syz.3.408'. [ 79.944553][ T7150] binder: Unknown parameter 'st?WXal' [ 79.948473][ T7150] random: crng reseeded on system resumption [ 80.116279][ T7159] netlink: 'syz.2.415': attribute type 1 has an invalid length. [ 80.128889][ T7159] 8021q: adding VLAN 0 to HW filter on device bond7 [ 80.299998][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.451857][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.455818][ T34] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 80.459656][ T34] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 80.463256][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.475686][ T34] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 80.483740][ T34] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 80.591673][ T7164] netlink: 232 bytes leftover after parsing attributes in process `syz.1.417'. [ 80.632162][ T7166] loop0: detected capacity change from 0 to 131072 [ 80.741645][ T7178] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=7178 comm=syz.1.421 [ 80.748986][ T7178] SELinux: policydb version -1716761398 does not match my version range 15-35 [ 80.753313][ T7178] SELinux: failed to load policy [ 81.055083][ T7189] binder: BINDER_SET_CONTEXT_MGR already set [ 81.058416][ T7189] binder: 7188:7189 ioctl 4018620d 200000000480 returned -16 [ 81.103577][ T7194] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 81.179018][ T7199] binder: BINDER_SET_CONTEXT_MGR already set [ 81.182224][ T7199] binder: 7197:7199 ioctl 4018620d 200000000100 returned -16 [ 81.185195][ T7198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7198 comm=syz.1.427 [ 81.275243][ T7206] netlink: 'syz.1.429': attribute type 10 has an invalid length. [ 81.279490][ T7206] team0: Device ipvlan0 failed to register rx_handler [ 81.532413][ T7220] syz.1.434 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.540495][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 81.547299][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 81.558623][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 81.565493][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 81.572653][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 81.580933][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 81.587414][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 81.594315][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 81.601118][ T7220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 81.654898][ T849] cfg80211: failed to load regulatory.db [ 81.707635][ T7225] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 82.004852][ T7240] netlink: 'syz.2.439': attribute type 10 has an invalid length. [ 82.009719][ T7240] team0: Device ipvlan0 failed to register rx_handler [ 82.063262][ T7247] binder: BINDER_SET_CONTEXT_MGR already set [ 82.065232][ T7247] binder: 7245:7247 ioctl 4018620d 200000004a80 returned -16 [ 82.220273][ T7257] netlink: 232 bytes leftover after parsing attributes in process `syz.2.445'. [ 82.256625][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 82.263239][ T7259] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 82.276848][ T7259] bond8: option mode: invalid value (8) [ 82.281453][ T7259] bond8 (unregistering): Released all slaves [ 82.371299][ T7259] netlink: 'syz.2.446': attribute type 10 has an invalid length. [ 82.374582][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.446'. [ 82.378660][ T7259] dummy0: entered promiscuous mode [ 82.616728][ T5849] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 82.619337][ T5849] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 82.622356][ T5849] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 82.624884][ T5849] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 82.627465][ T5849] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 82.630117][ T5849] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 82.632563][ T5849] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 82.634899][ T5849] hid-generic 000A:FFFFFF1D:0002.0005: unknown main item tag 0x0 [ 82.639121][ T5849] hid-generic 000A:FFFFFF1D:0002.0005: hidraw1: HID v0.04 Device [syz0] on syz1 [ 82.677218][ T7275] fido_id[7275]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.117641][ T34] usb 8-1: USB disconnect, device number 4 [ 83.128661][ T34] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 83.132087][ T34] spcp8x5 8-1:1.0: device disconnected [ 83.177020][ T7289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.454'. [ 83.215819][ T7291] netlink: 'syz.3.455': attribute type 10 has an invalid length. [ 83.219638][ T7291] team0: Device ipvlan0 failed to register rx_handler [ 83.311776][ T7297] pimreg3: entered allmulticast mode [ 83.384265][ T7305] Illegal XDP return value 894889223 on prog (id 38) dev N/A, expect packet loss! [ 83.414054][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 83.559214][ T7314] netlink: 232 bytes leftover after parsing attributes in process `syz.1.465'. [ 83.829605][ T42] kauditd_printk_skb: 175 callbacks suppressed [ 83.829652][ T42] audit: type=1400 audit(1785641174.715:1050): avc: denied { read } for pid=7318 comm="syz.2.468" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.839510][ T42] audit: type=1400 audit(1785641174.715:1051): avc: denied { open } for pid=7318 comm="syz.2.468" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.846840][ T42] audit: type=1400 audit(1785641174.735:1052): avc: denied { allowed } for pid=7318 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.853052][ T42] audit: type=1400 audit(1785641174.735:1053): avc: denied { create } for pid=7318 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 83.859280][ T42] audit: type=1400 audit(1785641174.735:1054): avc: denied { ioctl } for pid=7318 comm="syz.2.468" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.903520][ T7323] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 83.911636][ T7323] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 83.914917][ T7323] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 83.918182][ T7323] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 83.921653][ T7323] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 83.941505][ T7323] pci 0000:00:01.0: Adding to iommu group 1 [ 83.951161][ T7323] pci 0000:00:01.0: vgaarb: bridge control possible [ 83.953721][ T7323] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 83.968382][ T7323] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 83.971786][ T7323] pci 0000:00:01.0: ROM [mem 0x80800000-0x8080ffff pref]: assigned [ 83.975018][ T7323] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 83.978617][ T7323] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff]: assigned [ 83.988617][ T7323] virtio-pci 0000:00:01.0: enabling device (0100 -> 0102) [ 84.059875][ T7323] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 84.063432][ T7323] [drm] features: -virgl +edid -resource_blob -host_visible [ 84.063454][ T7323] [drm] features: -context_init -blob_alignment [ 84.076946][ T42] audit: type=1400 audit(1785641174.965:1055): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 84.084403][ T7323] ------------[ cut here ]------------ [ 84.087458][ T7323] kmem_cache of name 'virtio-gpu-vbufs' already exists [ 84.090183][ T7323] WARNING: mm/slab_common.c:111 at __kmem_cache_create_args+0xa6/0x420, CPU#1: syz.2.468/7323 [ 84.094114][ T7323] Modules linked in: [ 84.096368][ T7323] CPU: 1 UID: 0 PID: 7323 Comm: syz.2.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.100515][ T7323] Tainted: [L]=SOFTLOCKUP [ 84.102185][ T7323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.105820][ T7323] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 84.108328][ T7323] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 c5 50 5e 09 85 c0 75 e0 48 8d 3d 1a 39 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 45 52 5e 09 48 85 c0 0f [ 84.108480][ T7336] netlink: 232 bytes leftover after parsing attributes in process `syz.1.475'. [ 84.115625][ T7323] RSP: 0018:ffffc90003e76f58 EFLAGS: 00010246 [ 84.115669][ T7323] RAX: 0000000000000000 RBX: ffff888101ad68c0 RCX: fffff520007cedc6 [ 84.115684][ T7323] RDX: 0000000000000000 RSI: ffffffff8c6f8d40 RDI: ffffffff91275ec0 [ 84.115699][ T7323] RBP: ffffffff8c6f8d40 R08: 0000000000000000 R09: fffffbfff22450fa [ 84.115721][ T7323] R10: ffffc90003e76f58 R11: 0000000000000000 R12: 0000000000000000 [ 84.115733][ T7323] R13: ffffc90003e76fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 84.115746][ T7323] FS: 00007ffab4ef06c0(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 84.115781][ T7323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.115808][ T7323] CR2: 00007f0bedd89180 CR3: 000000005da06000 CR4: 0000000000352ef0 [ 84.145435][ T7323] Call Trace: [ 84.146735][ T7323] [ 84.147875][ T7323] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 84.150079][ T7323] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 84.152321][ T7323] ? vp_modern_set_queue_enable+0x43/0x90 [ 84.154502][ T7323] ? iowrite16+0x33/0xb0 [ 84.156158][ T7323] ? vp_modern_find_vqs+0xd2/0x100 [ 84.158154][ T7323] virtio_gpu_init.cold+0x51c/0x126e [ 84.160464][ T7323] ? __pfx_virtio_gpu_init+0x10/0x10 [ 84.162483][ T7323] ? __mutex_unlock_slowpath+0x35d/0x930 [ 84.165934][ T7323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.168409][ T7323] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 84.170671][ T7323] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 84.172882][ T7323] ? vga_default_device+0x9/0x20 [ 84.174787][ T7323] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 84.177421][ T7323] virtio_gpu_probe+0x21c/0x360 [ 84.179296][ T7323] virtio_dev_probe+0x6a2/0xbe0 [ 84.181244][ T7323] ? __pfx_virtio_dev_probe+0x10/0x10 [ 84.183277][ T7323] ? kernfs_create_link+0x1bd/0x240 [ 84.185238][ T7323] ? kernfs_put+0x3f/0x60 [ 84.186854][ T7323] ? sysfs_do_create_link_sd+0xbb/0x140 [ 84.188914][ T7323] ? sysfs_create_link+0x68/0xc0 [ 84.190924][ T7323] ? __pfx_virtio_dev_probe+0x10/0x10 [ 84.192952][ T7323] really_probe+0x241/0xa60 [ 84.194737][ T7323] __driver_probe_device+0x20e/0x450 [ 84.196744][ T7323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.199036][ T7323] driver_probe_device+0x4a/0x140 [ 84.201087][ T7323] __device_attach_driver+0x1df/0x320 [ 84.203138][ T7323] ? __pfx___device_attach_driver+0x10/0x10 [ 84.205372][ T7323] bus_for_each_drv+0x159/0x1e0 [ 84.207234][ T7323] ? __pfx_bus_for_each_drv+0x10/0x10 [ 84.209274][ T7323] ? lockdep_hardirqs_on+0x78/0x100 [ 84.211387][ T7323] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.213606][ T7323] __device_attach+0x1e4/0x4d0 [ 84.215483][ T7323] ? __pfx___device_attach+0x10/0x10 [ 84.215510][ T7323] ? do_raw_spin_unlock+0x145/0x1e0 [ 84.219987][ T7323] device_initial_probe+0xaf/0xd0 [ 84.221909][ T7323] bus_probe_device+0x64/0x160 [ 84.223758][ T7323] device_add+0x121d/0x1970 [ 84.225498][ T7323] ? __pfx_device_add+0x10/0x10 [ 84.227347][ T7323] ? __pfx___might_resched+0x10/0x10 [ 84.229406][ T7323] ? iowrite8+0x2b/0xb0 [ 84.231961][ T7323] ? iowrite8+0x2e/0xb0 [ 84.233582][ T7323] ? ioread8+0x8f/0xd0 [ 84.235159][ T7323] register_virtio_device+0x4f0/0x5d0 [ 84.237199][ T7323] ? __pfx_register_virtio_device+0x10/0x10 [ 84.239471][ T7323] ? __pfx_pcibios_set_master+0x10/0x10 [ 84.241709][ T7323] ? __raw_spin_lock_init+0x3a/0x110 [ 84.243781][ T7323] ? __pfx_virtio_pci_probe+0x10/0x10 [ 84.245799][ T7323] virtio_pci_probe+0x255/0x410 [ 84.247674][ T7323] local_pci_probe+0xdd/0x1b0 [ 84.249522][ T7323] pci_call_probe+0x176/0x800 [ 84.251389][ T7323] ? __pfx_pci_call_probe+0x10/0x10 [ 84.253306][ T7323] ? find_held_lock+0x2b/0x80 [ 84.255093][ T7323] ? pci_match_device+0x450/0x5f0 [ 84.256988][ T7323] ? pci_match_device+0x450/0x5f0 [ 84.258883][ T7323] ? pci_match_id+0x34d/0x3f0 [ 84.260844][ T7323] ? pci_match_device+0xb4/0x5f0 [ 84.262766][ T7323] pci_device_probe+0x1cd/0x370 [ 84.264620][ T7323] ? __pfx_pci_device_probe+0x10/0x10 [ 84.266672][ T7323] really_probe+0x241/0xa60 [ 84.268407][ T7323] __driver_probe_device+0x20e/0x450 [ 84.270574][ T7323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.272783][ T7323] driver_probe_device+0x4a/0x140 [ 84.274723][ T7323] __device_attach_driver+0x1df/0x320 [ 84.276772][ T7323] ? __pfx___device_attach_driver+0x10/0x10 [ 84.279029][ T7323] bus_for_each_drv+0x159/0x1e0 [ 84.280913][ T7323] ? __pfx_bus_for_each_drv+0x10/0x10 [ 84.282880][ T7323] ? lockdep_hardirqs_on+0x78/0x100 [ 84.284818][ T7323] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.286997][ T7323] __device_attach+0x1e4/0x4d0 [ 84.288773][ T7323] ? __pfx___device_attach+0x10/0x10 [ 84.290860][ T7323] ? do_raw_spin_unlock+0x145/0x1e0 [ 84.292812][ T7323] device_initial_probe+0xaf/0xd0 [ 84.294714][ T7323] pci_bus_add_device+0xc5/0x100 [ 84.296587][ T7323] pci_bus_add_devices+0x9a/0x1f0 [ 84.298492][ T7323] pci_rescan_bus+0x2a/0x40 [ 84.300325][ T7323] rescan_store+0xfb/0x130 [ 84.302004][ T7323] ? __pfx_rescan_store+0x10/0x10 [ 84.303908][ T7323] ? sysfs_file_kobj+0xe4/0x290 [ 84.305769][ T7323] ? __pfx_rescan_store+0x10/0x10 [ 84.307664][ T7323] bus_attr_store+0x74/0xb0 [ 84.309462][ T7323] ? __pfx_bus_attr_store+0x10/0x10 [ 84.311561][ T7323] sysfs_kf_write+0xf2/0x150 [ 84.313325][ T7323] kernfs_fop_write_iter+0x3e0/0x5f0 [ 84.315297][ T7323] ? __pfx_sysfs_kf_write+0x10/0x10 [ 84.317190][ T7323] vfs_write+0x6ac/0x1050 [ 84.318765][ T7323] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 84.321017][ T7323] ? __pfx_vfs_write+0x10/0x10 [ 84.322834][ T7323] ksys_write+0x12a/0x250 [ 84.324438][ T7323] ? __pfx_ksys_write+0x10/0x10 [ 84.326259][ T7323] do_syscall_64+0x115/0x870 [ 84.327990][ T7323] ? clear_bhb_loop+0x40/0x90 [ 84.329943][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.332174][ T7323] RIP: 0033:0x7ffab3f9e019 [ 84.333880][ T7323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.341146][ T7323] RSP: 002b:00007ffab4ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.344259][ T7323] RAX: ffffffffffffffda RBX: 00007ffab4226090 RCX: 00007ffab3f9e019 [ 84.347236][ T7323] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000005 [ 84.350393][ T7323] RBP: 00007ffab403500c R08: 0000000000000000 R09: 0000000000000000 [ 84.353400][ T7323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.356323][ T7323] R13: 00007ffab4226128 R14: 00007ffab4226090 R15: 00007ffc55528698 [ 84.359323][ T7323] [ 84.360603][ T7323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.363288][ T7323] CPU: 1 UID: 0 PID: 7323 Comm: syz.2.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.367245][ T7323] Tainted: [L]=SOFTLOCKUP [ 84.368896][ T7323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.372506][ T7323] Call Trace: [ 84.373782][ T7323] [ 84.374905][ T7323] dump_stack_lvl+0x100/0x190 [ 84.376728][ T7323] vpanic+0x552/0x970 [ 84.378259][ T7323] ? __pfx_vpanic+0x10/0x10 [ 84.380027][ T7323] panic+0xd1/0xe0 [ 84.381457][ T7323] ? __pfx_panic+0x10/0x10 [ 84.383207][ T7323] check_panic_on_warn.cold+0x19/0x34 [ 84.385199][ T7323] ? __kmem_cache_create_args+0xa6/0x420 [ 84.387334][ T7323] __warn.cold+0x191/0x318 [ 84.389053][ T7323] __report_bug+0x30f/0x440 [ 84.390771][ T7323] ? __kmem_cache_create_args+0xa6/0x420 [ 84.392883][ T7323] ? __pfx___report_bug+0x10/0x10 [ 84.394794][ T7323] ? __mutex_lock+0x26d/0x1bd0 [ 84.396606][ T7323] ? __kmem_cache_create_args+0x44/0x420 [ 84.398688][ T7323] report_bug_entry+0xe1/0x290 [ 84.400530][ T7323] ? __kmem_cache_create_args+0xa9/0x420 [ 84.402655][ T7323] handle_bug+0x1cd/0x2a0 [ 84.404305][ T7323] exc_invalid_op+0x17/0x50 [ 84.406029][ T7323] asm_exc_invalid_op+0x1a/0x20 [ 84.407912][ T7323] RIP: 0010:__kmem_cache_create_args+0xa9/0x420 [ 84.410327][ T7323] Code: 48 8b 43 60 48 8d 58 a0 48 3d b0 82 d8 8e 74 1f 48 8b 7b 58 48 89 ee e8 c5 50 5e 09 85 c0 75 e0 48 8d 3d 1a 39 ce 0e 48 89 ee <67> 48 0f b9 3a be 20 00 00 00 48 89 ef e8 45 52 5e 09 48 85 c0 0f [ 84.417411][ T7323] RSP: 0018:ffffc90003e76f58 EFLAGS: 00010246 [ 84.419775][ T7323] RAX: 0000000000000000 RBX: ffff888101ad68c0 RCX: fffff520007cedc6 [ 84.422735][ T7323] RDX: 0000000000000000 RSI: ffffffff8c6f8d40 RDI: ffffffff91275ec0 [ 84.425662][ T7323] RBP: ffffffff8c6f8d40 R08: 0000000000000000 R09: fffffbfff22450fa [ 84.428535][ T7323] R10: ffffc90003e76f58 R11: 0000000000000000 R12: 0000000000000000 [ 84.431532][ T7323] R13: ffffc90003e76fc8 R14: 00000000000000d8 R15: 0000000000000000 [ 84.434514][ T7323] ? __kmem_cache_create_args+0x9b/0x420 [ 84.436648][ T7323] virtio_gpu_alloc_vbufs+0xc2/0x150 [ 84.438693][ T7323] ? __pfx_virtio_gpu_alloc_vbufs+0x10/0x10 [ 84.440931][ T7323] ? vp_modern_set_queue_enable+0x43/0x90 [ 84.443076][ T7323] ? iowrite16+0x33/0xb0 [ 84.444698][ T7323] ? vp_modern_find_vqs+0xd2/0x100 [ 84.446599][ T7323] virtio_gpu_init.cold+0x51c/0x126e [ 84.448372][ T7323] ? __pfx_virtio_gpu_init+0x10/0x10 [ 84.450274][ T7323] ? __mutex_unlock_slowpath+0x35d/0x930 [ 84.452385][ T7323] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.454634][ T7323] ? __pfx_virtio_gpu_ctrl_ack+0x10/0x10 [ 84.456742][ T7323] ? __pfx_virtio_gpu_cursor_ack+0x10/0x10 [ 84.458955][ T7323] ? vga_default_device+0x9/0x20 [ 84.460838][ T7323] ? aperture_remove_conflicting_pci_devices+0x138/0x1e0 [ 84.463447][ T7323] virtio_gpu_probe+0x21c/0x360 [ 84.465275][ T7323] virtio_dev_probe+0x6a2/0xbe0 [ 84.467134][ T7323] ? __pfx_virtio_dev_probe+0x10/0x10 [ 84.469187][ T7323] ? kernfs_create_link+0x1bd/0x240 [ 84.471110][ T7323] ? kernfs_put+0x3f/0x60 [ 84.472674][ T7323] ? sysfs_do_create_link_sd+0xbb/0x140 [ 84.474784][ T7323] ? sysfs_create_link+0x68/0xc0 [ 84.476651][ T7323] ? __pfx_virtio_dev_probe+0x10/0x10 [ 84.478669][ T7323] really_probe+0x241/0xa60 [ 84.480441][ T7323] __driver_probe_device+0x20e/0x450 [ 84.482295][ T7323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.484474][ T7323] driver_probe_device+0x4a/0x140 [ 84.486340][ T7323] __device_attach_driver+0x1df/0x320 [ 84.488288][ T7323] ? __pfx___device_attach_driver+0x10/0x10 [ 84.490535][ T7323] bus_for_each_drv+0x159/0x1e0 [ 84.492372][ T7323] ? __pfx_bus_for_each_drv+0x10/0x10 [ 84.494404][ T7323] ? lockdep_hardirqs_on+0x78/0x100 [ 84.496361][ T7323] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.498562][ T7323] __device_attach+0x1e4/0x4d0 [ 84.500402][ T7323] ? __pfx___device_attach+0x10/0x10 [ 84.502400][ T7323] ? do_raw_spin_unlock+0x145/0x1e0 [ 84.504367][ T7323] device_initial_probe+0xaf/0xd0 [ 84.506286][ T7323] bus_probe_device+0x64/0x160 [ 84.508079][ T7323] device_add+0x121d/0x1970 [ 84.509814][ T7323] ? __pfx_device_add+0x10/0x10 [ 84.511673][ T7323] ? __pfx___might_resched+0x10/0x10 [ 84.513642][ T7323] ? iowrite8+0x2b/0xb0 [ 84.515167][ T7323] ? iowrite8+0x2e/0xb0 [ 84.516685][ T7323] ? ioread8+0x8f/0xd0 [ 84.518259][ T7323] register_virtio_device+0x4f0/0x5d0 [ 84.520251][ T7323] ? __pfx_register_virtio_device+0x10/0x10 [ 84.522429][ T7323] ? __pfx_pcibios_set_master+0x10/0x10 [ 84.524375][ T7323] ? __raw_spin_lock_init+0x3a/0x110 [ 84.526377][ T7323] ? __pfx_virtio_pci_probe+0x10/0x10 [ 84.528401][ T7323] virtio_pci_probe+0x255/0x410 [ 84.530250][ T7323] local_pci_probe+0xdd/0x1b0 [ 84.532004][ T7323] pci_call_probe+0x176/0x800 [ 84.533762][ T7323] ? __pfx_pci_call_probe+0x10/0x10 [ 84.535712][ T7323] ? find_held_lock+0x2b/0x80 [ 84.537469][ T7323] ? pci_match_device+0x450/0x5f0 [ 84.539383][ T7323] ? pci_match_device+0x450/0x5f0 [ 84.541225][ T7323] ? pci_match_id+0x34d/0x3f0 [ 84.543002][ T7323] ? pci_match_device+0xb4/0x5f0 [ 84.544838][ T7323] pci_device_probe+0x1cd/0x370 [ 84.546675][ T7323] ? __pfx_pci_device_probe+0x10/0x10 [ 84.548701][ T7323] really_probe+0x241/0xa60 [ 84.550457][ T7323] __driver_probe_device+0x20e/0x450 [ 84.552451][ T7323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.554687][ T7323] driver_probe_device+0x4a/0x140 [ 84.556538][ T7323] __device_attach_driver+0x1df/0x320 [ 84.558466][ T7323] ? __pfx___device_attach_driver+0x10/0x10 [ 84.560553][ T7323] bus_for_each_drv+0x159/0x1e0 [ 84.562364][ T7323] ? __pfx_bus_for_each_drv+0x10/0x10 [ 84.564357][ T7323] ? lockdep_hardirqs_on+0x78/0x100 [ 84.566322][ T7323] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.568528][ T7323] __device_attach+0x1e4/0x4d0 [ 84.570359][ T7323] ? __pfx___device_attach+0x10/0x10 [ 84.572327][ T7323] ? do_raw_spin_unlock+0x145/0x1e0 [ 84.574188][ T7323] device_initial_probe+0xaf/0xd0 [ 84.576105][ T7323] pci_bus_add_device+0xc5/0x100 [ 84.578000][ T7323] pci_bus_add_devices+0x9a/0x1f0 [ 84.579948][ T7323] pci_rescan_bus+0x2a/0x40 [ 84.581678][ T7323] rescan_store+0xfb/0x130 [ 84.583281][ T7323] ? __pfx_rescan_store+0x10/0x10 [ 84.585047][ T7323] ? sysfs_file_kobj+0xe4/0x290 [ 84.587055][ T7323] ? __pfx_rescan_store+0x10/0x10 [ 84.589003][ T7323] bus_attr_store+0x74/0xb0 [ 84.590762][ T7323] ? __pfx_bus_attr_store+0x10/0x10 [ 84.592724][ T7323] sysfs_kf_write+0xf2/0x150 [ 84.594501][ T7323] kernfs_fop_write_iter+0x3e0/0x5f0 [ 84.596497][ T7323] ? __pfx_sysfs_kf_write+0x10/0x10 [ 84.598483][ T7323] vfs_write+0x6ac/0x1050 [ 84.600153][ T7323] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 84.602290][ T7323] ? __pfx_vfs_write+0x10/0x10 [ 84.604083][ T7323] ksys_write+0x12a/0x250 [ 84.605634][ T7323] ? __pfx_ksys_write+0x10/0x10 [ 84.607408][ T7323] do_syscall_64+0x115/0x870 [ 84.609130][ T7323] ? clear_bhb_loop+0x40/0x90 [ 84.610916][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.613113][ T7323] RIP: 0033:0x7ffab3f9e019 [ 84.614811][ T7323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.621891][ T7323] RSP: 002b:00007ffab4ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.624989][ T7323] RAX: ffffffffffffffda RBX: 00007ffab4226090 RCX: 00007ffab3f9e019 [ 84.627927][ T7323] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000005 [ 84.630859][ T7323] RBP: 00007ffab403500c R08: 0000000000000000 R09: 0000000000000000 [ 84.633681][ T7323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.636540][ T7323] R13: 00007ffab4226128 R14: 00007ffab4226090 R15: 00007ffc55528698 [ 84.639394][ T7323] [ 84.641134][ T7323] Kernel Offset: disabled [ 84.642778][ T7323] Rebooting in 86400 seconds..