last executing test programs: 7.650785199s ago: executing program 3 (id=616): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000002500)="00112233445566778899aabb08004500001c0000000040110000", 0x1a, 0xa888, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) 7.649552706s ago: executing program 3 (id=618): r0 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x2040) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/116) (async) syz_open_dev$mtd(&(0x7f0000000000), 0x7, 0x8000) (async) syz_open_dev$mtd(&(0x7f0000000040), 0x8, 0x2200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x4081, 0x0) ioctl$OTPGETREGIONCOUNT(r2, 0x40044d0e, &(0x7f00000001c0)) 7.576090462s ago: executing program 3 (id=620): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000002, 0x0, 0x0, 0x16}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0xb685, 0x1, 0x2, 0xa3, 0x0, r0}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd139, 0x2000, 0x3, 0x3b4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d2c, 0x58018, 0x1, 0x11e, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf91b, 0x400, 0x2, 0x3e, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4cdf, 0x1000, 0x0, 0x38d}}], 0x4, &(0x7f00000025c0)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, r4, '\x00', {0x1, 0xe53, 0x0, 0x0}}, &(0x7f0000002640)) ioctl$XFS_IOC_GETBMAP(r7, 0xc0205826, &(0x7f0000000200)={0x3, 0x7fffffff, 0x2bb9, 0x7, 0x3}) io_uring_enter(r6, 0x10cb, 0x1381, 0x40, &(0x7f0000000240)={[0xffffffffffff1325]}, 0x8) 7.307544149s ago: executing program 3 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x12123, &(0x7f0000001200)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, 0x0, 0x146) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x4, 0x2002) ptrace$pokeuser(0x6, r2, 0x358, 0x800000010000) unlink(&(0x7f0000000000)='./file1\x00') close(r1) 7.13803599s ago: executing program 3 (id=630): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x80084, 0x9, 0x76a, 0x1c, "00ef02ffffe40000000000010100"}) (fail_nth: 1) 6.318171421s ago: executing program 3 (id=642): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd1e2d4617d17e01e704d350d4383258dbf6b0e19f8b7e9a95211ec6aedfd78a0920000000000000000000fb30e400"/65, 0x41}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b52", 0x70}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.254969747s ago: executing program 32 (id=642): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd1e2d4617d17e01e704d350d4383258dbf6b0e19f8b7e9a95211ec6aedfd78a0920000000000000000000fb30e400"/65, 0x41}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b52", 0x70}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.377239589s ago: executing program 1 (id=684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) 3.205017059s ago: executing program 1 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2d007b5456060000006f06f3220000", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c00040014000100020011277f000001000000000000000014000200020011277f0000010000000000000000"], 0x54}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0011223344550800450000420000400040113cf97f0000017f00000111271127002e0000380000000000000000000000010000012000001800"/78], 0x0) mkdir(&(0x7f0000000300)='./proc\x00', 0x40) 3.122505717s ago: executing program 1 (id=687): mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0xffffffffffff0700, 0xc3072, 0xffffffffffffffff, 0x0) 3.057441451s ago: executing program 1 (id=689): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb5344615bad49e24cd6ac100000000000000000000000000000009f3010000000000000000e3ffffffffffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@deltfilter={0x78, 0x2d, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xb}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x24, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9d, 0x6}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r5, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}], 0x1, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.801739761s ago: executing program 1 (id=693): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000000180)=[{0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x11, 0x0, 0x0, 0x2}, 0x48) 2.714952151s ago: executing program 1 (id=696): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket(0x2, 0x2, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/26, 0xfdef, 0x97) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0xc000000) bind$inet6(r8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x12f901, 0x0) io_setup(0x202, &(0x7f0000000200)) 1.389816752s ago: executing program 4 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000003000300", @ANYRES32=r2], 0x24}}, 0x4) 1.389441462s ago: executing program 4 (id=709): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2}, 0x48) 1.306630319s ago: executing program 4 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000008ebd0000000008000a000ba30146e3412a34", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='memory_hugetlb_acco\x100\x064\r\xc2\'\x02\x12\xfd\xc3\x8f\x82\r\x8cunting', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00be7a736421072dbc7000ffdbe1210200000008690001e2063e2bcbb8c30100440005003d003300d6b6f9f0126a9c5f14d90000"], 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000840)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0x6, 0x4000000000008a, 0xfffffffffffffbff, 0x5, 0x9, 0x42, 0x52e6ac5e, 0x2000ffffffff, 0x9651, 0x786, 0xfffffffffffffff8, 0x8, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x2001, 0x85, 0x17, 0x80000000, 0x400, 0x8, 0x7, 0xfffffffffffffffe, 0x200000000003, 0x400000000000000a}) sendmsg$nl_generic(r4, &(0x7f0000000b40)={&(0x7f0000000100), 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x260, 0x22, 0x100, 0x70bd2a, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x154, 0x0, 0x0, @u32=0xffff}, @typed={0xc, 0xc5, 0x0, 0x0, @u64=0x2}, @nested={0xdc, 0x119, 0x0, 0x1, [@nested={0x4, 0x77}, @generic="c056d1d4c8986ceea0377a9b80a78bab7f8aa77c41815eda28ea457b6b3a67312f035602fa8abdc5d0597defe81c11078948be150c8cb70c7203345115f5246f95d6d1271e28d476afb955d838a11f65170c31237496862b724e2824a100a403f75145f83dda3aec06fe7a44e9cb6e9dbfd212a4bcf8624b17f031647870dd66ab03997a9272007af85a8144397ee1c6524a76d0061e28257629404d89526d7713e4fb044c4a1cf92281c0308c1e043c2c7cbe02b1c946864843ff08e315a835661d6c5ec6a2686bd66a5704", @typed={0x8, 0xdb, 0x0, 0x0, @pid=r6}]}, @generic="4a946ce511b9957cbd62247476c5a53230e80c3e1f64d9955fe7486e348f43089ab49b620fe2a1acbb59111a4e6dafd1704c1137d411d752d264e243576b6bfb7ae672595438ad41bc504215478be54b212ea617c08202cdf1d8d31ed3ec752d6361192168e2005773a83041f9b59f12fb63f58a2a8bb1c00577e53873526369e018bd618f761c6227c82867b063c760c91110e7b761d7c1aa6d3905f8982bc2c3bdf14bd0a9da93a2731141324ce8529216a49fbc830e35d03bf9d3b78a290eafb2645821136e8d50b25a6f11df9ac7e30daa17c1d5383a97f56023409548b7f073571c1d63f4cb7eb27a8523b16084c20030", @nested={0x62, 0x5f, 0x0, 0x1, [@generic="15a98a0d0ceea8c7b96b1cd2f4671e5805d6308f9e3e39ba6c4e80e81738edafacb2193bf8020adb49c3c068df74ea327cc65a4b784ecfbed86966dfd5cfbfa19f23ea4c1ab85b29503f6b3bb7c38a9b53970a683cb9467de826", @nested={0x4, 0xcc}]}, @nested={0x4, 0x14e}]}, 0x260}, 0x1, 0x0, 0x0, 0x811}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@ringbuf_query, @generic={0x80, 0x8, 0x2, 0x1, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x1, 0x7, 0x8}, 0x10, 0xffffffffffffffff, r9, 0x0, &(0x7f00000005c0)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x187, 0x0, &(0x7f00000003c0)="259afe6971a76d2686dd4c6588a848fbf219ec8c288c7f0415ff16fc89d1e7b81dc1000000000000a3b0c5d9bd4f9fa259533cca00bea822e8dab654eb3ea96a9175182c8a53a232aaa8d5bb70474a456402a117b86c3b0515acfe628ee2a1735ded4110b21ecbc419930a136874b68de1bcc20d8f7b1786c2197410aa452d4bd4269af16030fee0f69b63c25dd5a990f6cc70288b6e8ccd555f0b5e0a3558be1bf8b57969b7dcc04d9841122ac163cbd05651383f996f5af71e5cd3493c9c154a1e0c83da4acf71a0303e9724078d9bfa30a2951e8545099c558414343221c372cd55a64269979c350a5c3f7f4e3cc7ef6de77e010cbfffd96ae9d2cf41edd05d5dd8ec248d1c8d8c3528ab4e7ed323e4c93f3cd99f887ef4131c011695a1c103d99fa26ff5cbfd8e2dd9f96ad7d30b48ac9d9072cf0a19fbfc0a993f9a6087739b986f3e5a6c6a82cadf028e6b323a1279c44097b58fcaa6c7b37bb8978713a824502c9216af62685df6bb72a8520ce94f5ea5dcfa7f965869eaff21dc9b8ee0a5bae57872a6", 0x0, 0xbe, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x50) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x58, r5, 0x211, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x2, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x1, 0x7, 0x0, {0x2000000000, 0xbb, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x9, 0x3}}]}, 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, 0x0, 0x4000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r11, 0x84, 0x79, &(0x7f0000000bc0)={0x0, 0x55b1, 0x6}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 1.306320674s ago: executing program 0 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000007000060000000000000000002a000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x10, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0x', 0x2) setns(0xc9, 0x0) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0, r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r7 = socket(0x8, 0x1, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x42020054, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf2507000000080001000000000008000300", @ANYRES32=r9, @ANYBLOB="0c0099002400000030000c00"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0xa3) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000440)=ANY=[]) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) write(r11, &(0x7f0000000140)='1', 0x1) 1.175937583s ago: executing program 0 (id=713): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x61) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYRES8=r2], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.143759722s ago: executing program 0 (id=715): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_hcd.0', 0xb) 1.069737136s ago: executing program 4 (id=717): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000fffff0000000000004"], 0x48) 1.00444642s ago: executing program 0 (id=718): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000002c0), 0x4) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000002480)={[0x8000000000000001, 0x9, 0x3, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x5, 0x14000000000, 0xffffffffffffffff, 0x5, 0x0, 0x80000004000000, 0x80000000000004], 0xeeee0000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x7, 0x4) socket$nl_audit(0x10, 0x3, 0x9) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f00000002c0), 0x4) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000002480)={[0x8000000000000001, 0x9, 0x3, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x5, 0x14000000000, 0xffffffffffffffff, 0x5, 0x0, 0x80000004000000, 0x80000000000004], 0xeeee0000}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x7, 0x4) (async) 1.004082933s ago: executing program 4 (id=720): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0xf8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@mpls_getnetconf={0x14, 0x52, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x2000000000000000}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 643.019001ms ago: executing program 0 (id=724): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x0) (async) read(r0, &(0x7f00000000c0)=""/163, 0xd0140f23) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) r2 = accept4$packet(r1, 0x0, &(0x7f0000000040), 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) (async) write(r1, &(0x7f0000000100)='disable\n', 0x8) write(r1, &(0x7f0000000140)='set io 0-0\n', 0xb) (async) write(r1, &(0x7f0000000180)='activate\n', 0x9) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x1ff, 0xc, 0x4, 0x70000, 0xa, {0x0, 0xea60}, {0x2, 0x2, 0x4, 0xff, 0x88, 0x1, "fd3a54ce"}, 0x8, 0x4, {0xffffffffffffffff}, 0x22}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000140)='pcspkr\x00', 0x6) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x8, 0x2, 0x4, 0x800000, 0x56d, {r3, r4/1000+60000}, {0x3, 0x1, 0x9, 0x5, 0x4, 0x0, "14870530"}, 0xfffffffa, 0x4, {&(0x7f0000000200)=[{0xfffffff8, 0x2, {}, 0x6}, {0x8, 0x2, {r5}, 0xfffffeff}]}, 0xffffffff, 0x0, r6}) 558.180877ms ago: executing program 0 (id=725): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x5, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2bbea4138c1bc02d}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x1, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x3, 0x3d3, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x1fa}}}, &(0x7f00000003c0)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r10, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="ff01010000000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x144002, 0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000400)={0x0, 0x863a, 0x400, 0x2, 0x6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x322a, 0x1000, 0x1, 0x2ae, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92d1, 0x8, 0x1, 0x332, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe280, 0x2000, 0x0, 0x333, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcae3, 0x8000, 0x3, 0x17a, 0x0, r10}}], 0x4, &(0x7f0000001d00)={0x2e, 0x10, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r13, '\x00', {0x2, 0xb7f, 0x0, &(0x7f0000000d00)=@buf_max_buf="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"}}, &(0x7f0000001d80)) syz_ublk_setup_queues(r8, r7, &(0x7f0000000700)={0x0, 0x3566, 0x0, 0x0, 0x20000}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x0, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x3, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeb4d, 0x0, 0x0, 0x3a1, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1000, 0x0, 0x1d6}}], 0x1, &(0x7f0000000180)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) 334.059997ms ago: executing program 2 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="05002dbd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="6400238006000c000a000000051f1f000100000006001b000200000008001a0003000000050005000a0000000600120007003a0f060003005c0000000600190009"], 0x80}}, 0x0) 333.834707ms ago: executing program 2 (id=730): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x24, r5, 0x1, 0x72bd29, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0xdd) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0xcb) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x4, 0x6, 0xb, 0x6, 0x19, "c6c67d63ebb71896"}) 215.736042ms ago: executing program 2 (id=731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x1f}}}}}}, 0x0) 215.605002ms ago: executing program 2 (id=732): socket$kcm(0x29, 0x2, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x10, 0x4) 120.070091ms ago: executing program 2 (id=733): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb5344615bad49e24cd6ac100000000000000000000000000000009f3010000000000000000e3ffffffffffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@deltfilter={0x64, 0x2d, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xb}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x24, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9d, 0x6}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r5, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.675612ms ago: executing program 4 (id=734): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2200000041000100fcff07000400000001000000040048801c00018014001080140010800f00e300766972745f7769666930000008000200", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x2000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x100, 0x40) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) userfaultfd(0x801) write(r4, &(0x7f00000003c0)="69b2a0ec0ad28e13a0d1979265bec1b41ccc7795b0f780335760230abae9ad474db8fd50fdd2d6d348ca7dae3b912687c35a95be408d4166c4d32159918072d3553144aaf4a51894e782407199be3358", 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00'}) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x17}, 0x10) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0xa8, "fd938a5b0ec6b72c80e0df840492a18ad5e2b45ce75b8e2afcd21a10d85619e67907b12c2abb488e6e93cde868dd022507a8e0be5f04297fd7389bf70c8e307a3df071dbc24e2d8b0b76277bb914945eeeaf464572c043c44a6708946849eb06bfd63ceecf0b606db761a22810a0513521ecb33dfb4b8fbd3a1bea4c995154f8496b6ff869bead0fd19f39492bd6f3d472767c6c779a96cd150b5970f0f0e44ac8641190827c587f"}, &(0x7f0000000580)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000005c0)={r6, 0x1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) select(0x0, 0x0, &(0x7f0000000340)={0x4, 0x472, 0xd, 0x27, 0x400000000080, 0x8000000000000001, 0x0, 0x3}, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r7, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, 0x10, "3eccd8010000000000000010000000040100"}) close(0x3) mprotect(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000008) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=735): syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='maps\x00') r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x49, 0x1, 0x2, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\x01\x00\x00\x00\x00\x00\x00\x00\'\x11\x13:\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcdR\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_hcd.0', 0xb) kernel console output (not intermixed with test programs): [ 43.167040][ T42] audit: type=1400 audit(1786044386.379:114): avc: denied { rlimitinh } for pid=5643 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.173583][ T42] audit: type=1400 audit(1786044386.379:115): avc: denied { siginh } for pid=5643 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.910168][ T42] audit: type=1400 audit(1786044387.139:116): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.256255][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 44.256268][ T42] audit: type=1400 audit(1786044387.489:119): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.967987][ T42] audit: type=1400 audit(1786044388.199:120): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.021787][ T42] audit: type=1400 audit(1786044388.249:121): avc: denied { write } for pid=5663 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.248177][ T42] audit: type=1400 audit(1786044388.479:122): avc: denied { write } for pid=5666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.298862][ T42] audit: type=1400 audit(1786044388.529:123): avc: denied { write } for pid=5669 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.386926][ T42] audit: type=1400 audit(1786044388.619:124): avc: denied { write } for pid=5672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.447537][ T42] audit: type=1400 audit(1786044388.679:125): avc: denied { write } for pid=5675 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.511412][ T42] audit: type=1400 audit(1786044388.739:126): avc: denied { write } for pid=5678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.561854][ T42] audit: type=1400 audit(1786044388.789:127): avc: denied { write } for pid=5682 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:55913' (ED25519) to the list of known hosts. [ 45.626569][ T42] audit: type=1400 audit(1786044388.859:128): avc: denied { name_bind } for pid=5686 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 48.146579][ T5688] cgroup: Unknown subsys name 'net' [ 48.280208][ T5688] cgroup: Unknown subsys name 'cpuset' [ 48.285457][ T5688] cgroup: Unknown subsys name 'rlimit' [ 48.580088][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.314186][ T5688] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.673996][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 53.674014][ T42] audit: type=1400 audit(1786044396.899:158): avc: denied { execmem } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.866484][ T42] audit: type=1400 audit(1786044397.099:159): avc: denied { create } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.881390][ T42] audit: type=1400 audit(1786044397.099:160): avc: denied { read write } for pid=5739 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.891131][ T42] audit: type=1400 audit(1786044397.099:161): avc: denied { open } for pid=5739 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.900206][ T42] audit: type=1400 audit(1786044397.119:162): avc: denied { ioctl } for pid=5740 comm="syz-executor" path="socket:[5874]" dev="sockfs" ino=5874 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.908193][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.916172][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.921053][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.927504][ T5756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.928613][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.928681][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.930637][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.930661][ T5756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.931811][ T5756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.934674][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.935232][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.935989][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.936840][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.937207][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.942025][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.948049][ T5756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.953638][ T42] audit: type=1400 audit(1786044397.179:163): avc: denied { read } for pid=5739 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.955288][ T5756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.957239][ T42] audit: type=1400 audit(1786044397.179:164): avc: denied { open } for pid=5739 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.961559][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.967194][ T42] audit: type=1400 audit(1786044397.189:165): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.970033][ T5756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.983615][ T42] audit: type=1400 audit(1786044397.189:166): avc: denied { module_request } for pid=5739 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.987656][ T5756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.999100][ T42] audit: type=1400 audit(1786044397.229:167): avc: denied { sys_module } for pid=5742 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.799293][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.803913][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.806967][ T5741] bridge_slave_0: entered allmulticast mode [ 54.810594][ T5741] bridge_slave_0: entered promiscuous mode [ 54.826980][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.830378][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.833525][ T5742] bridge_slave_0: entered allmulticast mode [ 54.837798][ T5742] bridge_slave_0: entered promiscuous mode [ 54.862196][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.865230][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.868141][ T5741] bridge_slave_1: entered allmulticast mode [ 54.872027][ T5741] bridge_slave_1: entered promiscuous mode [ 54.883699][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.886990][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.889999][ T5742] bridge_slave_1: entered allmulticast mode [ 54.894031][ T5742] bridge_slave_1: entered promiscuous mode [ 54.941055][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.970234][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.995399][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.001673][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.059215][ T5742] team0: Port device team_slave_0 added [ 55.062902][ T5742] team0: Port device team_slave_1 added [ 55.076631][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.080190][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.083267][ T5739] bridge_slave_0: entered allmulticast mode [ 55.090936][ T5739] bridge_slave_0: entered promiscuous mode [ 55.095951][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.099895][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.103093][ T5740] bridge_slave_0: entered allmulticast mode [ 55.107410][ T5740] bridge_slave_0: entered promiscuous mode [ 55.122175][ T5741] team0: Port device team_slave_0 added [ 55.124935][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.128432][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.131227][ T5739] bridge_slave_1: entered allmulticast mode [ 55.133848][ T5739] bridge_slave_1: entered promiscuous mode [ 55.136819][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.139337][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.141747][ T5740] bridge_slave_1: entered allmulticast mode [ 55.144444][ T5740] bridge_slave_1: entered promiscuous mode [ 55.176795][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.182848][ T5741] team0: Port device team_slave_1 added [ 55.195498][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.198403][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.209591][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.218445][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.247858][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.250731][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.260921][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.282665][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.291564][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.294396][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.304310][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.310006][ T5740] team0: Port device team_slave_0 added [ 55.313586][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.331521][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.333828][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.342589][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.356154][ T5740] team0: Port device team_slave_1 added [ 55.369172][ T5739] team0: Port device team_slave_0 added [ 55.374601][ T5739] team0: Port device team_slave_1 added [ 55.422306][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.424782][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.434406][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.443109][ T5742] hsr_slave_0: entered promiscuous mode [ 55.445653][ T5742] hsr_slave_1: entered promiscuous mode [ 55.467765][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.469990][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.477685][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.488275][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.491002][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.501437][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.511848][ T5741] hsr_slave_0: entered promiscuous mode [ 55.515372][ T5741] hsr_slave_1: entered promiscuous mode [ 55.518142][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 55.520388][ T5741] Cannot create hsr debugfs directory [ 55.540578][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.543372][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.553586][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.622075][ T5740] hsr_slave_0: entered promiscuous mode [ 55.624501][ T5740] hsr_slave_1: entered promiscuous mode [ 55.627163][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 55.628900][ T5740] Cannot create hsr debugfs directory [ 55.671001][ T5739] hsr_slave_0: entered promiscuous mode [ 55.673739][ T5739] hsr_slave_1: entered promiscuous mode [ 55.676357][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 55.678584][ T5739] Cannot create hsr debugfs directory [ 55.946903][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.956963][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.959779][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.965131][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.968741][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.973190][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.976641][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.981078][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.005628][ T5756] Bluetooth: hci3: command tx timeout [ 56.005868][ T5743] Bluetooth: hci1: command tx timeout [ 56.006203][ T64] Bluetooth: hci0: command tx timeout [ 56.045394][ T5740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.052543][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.057500][ T5740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.064807][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.069027][ T5740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.076749][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.080857][ T5740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.088194][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.094914][ T5743] Bluetooth: hci2: command tx timeout [ 56.185131][ T5739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.192315][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.198122][ T5739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.205688][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.210788][ T5739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.217086][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.230533][ T5739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.236497][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.294357][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.332656][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.358509][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.364129][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.367331][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.373356][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.381068][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.383800][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.390842][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.397207][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.400980][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.408858][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.423890][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.426699][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.448469][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.507298][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.513681][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.532922][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.535519][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.553118][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.556104][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.580565][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.606427][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.609527][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.622468][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.624844][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.649021][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.693130][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.726864][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.730128][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.747908][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.751082][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.881698][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.931949][ T5742] veth0_vlan: entered promiscuous mode [ 56.942067][ T5742] veth1_vlan: entered promiscuous mode [ 56.957271][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.975459][ T5742] veth0_macvtap: entered promiscuous mode [ 56.981351][ T5742] veth1_macvtap: entered promiscuous mode [ 57.007398][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.023779][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.038036][ T5740] veth0_vlan: entered promiscuous mode [ 57.052109][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.077075][ T5740] veth1_vlan: entered promiscuous mode [ 57.114009][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.155109][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.159171][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.165099][ T5740] veth0_macvtap: entered promiscuous mode [ 57.172830][ T5740] veth1_macvtap: entered promiscuous mode [ 57.202654][ T5739] veth0_vlan: entered promiscuous mode [ 57.210648][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.214921][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.218464][ T5741] veth0_vlan: entered promiscuous mode [ 57.232180][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.239407][ T5739] veth1_vlan: entered promiscuous mode [ 57.248031][ T5741] veth1_vlan: entered promiscuous mode [ 57.251730][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.273076][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.278844][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.286473][ T5739] veth0_macvtap: entered promiscuous mode [ 57.326933][ T5739] veth1_macvtap: entered promiscuous mode [ 57.346854][ T5741] veth0_macvtap: entered promiscuous mode [ 57.364149][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.368690][ T5741] veth1_macvtap: entered promiscuous mode [ 57.369689][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.387288][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.412962][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.423421][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.426540][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.442426][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.465618][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.528205][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.537392][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.537998][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.565436][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.570421][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.595831][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.615037][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.620096][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.623393][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.634570][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.639707][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.648580][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.677796][ T5899] input: syz1 as /devices/virtual/input/input5 [ 57.701048][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.703618][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.745374][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.752596][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.760580][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.763992][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.791740][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 57.817774][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.823396][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.830929][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.834899][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.838643][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.906893][ T5911] macvtap1: entered promiscuous mode [ 57.910518][ T5911] macvtap1: entered allmulticast mode [ 57.910986][ T5913] comedi comedi0: Minor 3 could not be opened [ 58.028340][ T5921] gretap1: entered allmulticast mode [ 58.033456][ T5921] team0: Port device gretap1 added [ 58.086484][ T5743] Bluetooth: hci3: command tx timeout [ 58.095044][ T5743] Bluetooth: hci0: command tx timeout [ 58.095225][ T5756] Bluetooth: hci1: command tx timeout [ 58.166518][ T5756] Bluetooth: hci2: command tx timeout [ 58.433341][ T5943] hfsplus: unable to find HFS+ superblock [ 58.673183][ T5960] FAULT_INJECTION: forcing a failure. [ 58.673183][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.678957][ T5960] CPU: 3 UID: 0 PID: 5960 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT(full) [ 58.678982][ T5960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.679006][ T5960] Call Trace: [ 58.679020][ T5960] [ 58.679028][ T5960] dump_stack_lvl+0x100/0x190 [ 58.679056][ T5960] should_fail_ex.cold+0x5/0xa [ 58.679079][ T5960] _copy_from_iter+0x1f4/0x1690 [ 58.679107][ T5960] ? __asan_memset+0x23/0x50 [ 58.679123][ T5960] ? __pfx__copy_from_iter+0x10/0x10 [ 58.679144][ T5960] ? __pfx___alloc_skb+0x10/0x10 [ 58.679173][ T5960] netlink_sendmsg+0x808/0xda0 [ 58.679197][ T5960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.679216][ T5960] ? selinux_socket_sendmsg+0x198/0x2f0 [ 58.679246][ T5960] ____sys_sendmsg+0xa4d/0xbe0 [ 58.679261][ T5960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.679282][ T5960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.679309][ T5960] ___sys_sendmsg+0x190/0x1e0 [ 58.679349][ T5960] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.679366][ T5960] ? __lock_acquire+0x49f/0x1a40 [ 58.679389][ T5960] ? get_pid_task+0x106/0x250 [ 58.679431][ T5960] __sys_sendmsg+0x160/0x210 [ 58.679455][ T5960] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.679491][ T5960] do_syscall_64+0x115/0x870 [ 58.679515][ T5960] ? clear_bhb_loop+0x70/0xc0 [ 58.679538][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.679556][ T5960] RIP: 0033:0x7f28df59e0d9 [ 58.679573][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.679588][ T5960] RSP: 002b:00007f28e04ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.679623][ T5960] RAX: ffffffffffffffda RBX: 00007f28df825fa0 RCX: 00007f28df59e0d9 [ 58.679634][ T5960] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 58.679644][ T5960] RBP: 00007f28e04ee090 R08: 0000000000000000 R09: 0000000000000000 [ 58.679654][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.679663][ T5960] R13: 00007f28df826038 R14: 00007f28df825fa0 R15: 00007fffbffbee98 [ 58.679686][ T5960] [ 58.807991][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 58.808005][ T42] audit: type=1400 audit(1786044402.039:235): avc: denied { bind } for pid=5961 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.817526][ T42] audit: type=1400 audit(1786044402.039:236): avc: denied { node_bind } for pid=5961 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 58.824544][ T42] audit: type=1400 audit(1786044402.039:237): avc: denied { mount } for pid=5961 comm="syz.1.30" name="/" dev="configfs" ino=2096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.831651][ T42] audit: type=1400 audit(1786044402.039:238): avc: denied { search } for pid=5961 comm="syz.1.30" name="/" dev="configfs" ino=2096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.840015][ T42] audit: type=1400 audit(1786044402.039:239): avc: denied { search } for pid=5961 comm="syz.1.30" name="vkms" dev="configfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.849960][ T42] audit: type=1400 audit(1786044402.039:240): avc: denied { read } for pid=5961 comm="syz.1.30" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.859787][ T42] audit: type=1400 audit(1786044402.039:241): avc: denied { open } for pid=5961 comm="syz.1.30" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.869987][ T42] audit: type=1400 audit(1786044402.069:242): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.883357][ T42] audit: type=1400 audit(1786044402.109:243): avc: denied { allowed } for pid=5963 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.893462][ T42] audit: type=1400 audit(1786044402.119:244): avc: denied { create } for pid=5963 comm="syz.1.31" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.897917][ T5964] tmpfs: Unknown parameter 'mpolefer:' [ 59.069533][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.39'. [ 59.204803][ T5994] tls_set_device_offload_rx: netdev not found [ 59.263401][ T6000] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 59.268019][ T6000] SELinux: failed to load policy [ 59.270954][ T6000] ======================================================= [ 59.270954][ T6000] WARNING: The mand mount option has been deprecated and [ 59.270954][ T6000] and is ignored by this kernel. Remove the mand [ 59.270954][ T6000] option from the mount to silence this warning. [ 59.270954][ T6000] ======================================================= [ 59.285713][ T6000] overlayfs: maximum fs stacking depth exceeded [ 59.424830][ T6007] nvme nvme0: failed to connect socket: -111 [ 59.477688][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.481914][ T6012] netlink: 'syz.2.48': attribute type 39 has an invalid length. [ 59.644321][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 59.649663][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 59.656612][ T24] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 59.660525][ T24] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 59.664570][ T24] usb 5-1: config 14 has no interface number 0 [ 59.666831][ T24] usb 5-1: config 14 has no interface number 1 [ 59.668883][ T24] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 59.673007][ T24] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 59.678895][ T24] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 59.682658][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 59.688248][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 59.692121][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 59.696730][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 59.700764][ T24] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.705418][ T24] usb 5-1: config 14 interface 57 has no altsetting 0 [ 59.707677][ T24] usb 5-1: config 14 interface 228 has no altsetting 0 [ 59.713607][ T24] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 59.716925][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.719761][ T24] usb 5-1: Product: syz [ 59.721317][ T24] usb 5-1: Manufacturer: syz [ 59.722909][ T24] usb 5-1: SerialNumber: syz [ 60.071352][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 60.141843][ T6023] gfs2: error -5 reading superblock [ 60.159229][ T24] legousbtower 5-1:14.57: interrupt endpoints not found [ 60.164500][ T5756] Bluetooth: hci1: command tx timeout [ 60.164547][ T5743] Bluetooth: hci0: command tx timeout [ 60.164618][ T64] Bluetooth: hci3: command tx timeout [ 60.244650][ T5743] Bluetooth: hci2: command tx timeout [ 60.361044][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.365165][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.586228][ T24] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 60.596072][ T24] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 60.805233][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 60.808322][ T6034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.56'. [ 60.811792][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 60.816126][ T6034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.56'. [ 60.869014][ T1354] usb 5-1: USB disconnect, device number 2 [ 60.883880][ T1354] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 60.904383][ T5889] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.068146][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.072902][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.076529][ T5889] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 61.079976][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.085806][ T5889] usb 7-1: config 0 descriptor?? [ 61.554134][ T6062] netlink: 'syz.3.66': attribute type 39 has an invalid length. [ 61.806831][ T5889] usbhid 7-1:0.0: can't add hid device: -71 [ 61.809881][ T5889] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 61.823713][ T5889] usb 7-1: USB disconnect, device number 2 [ 61.849341][ T6072] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 61.907189][ T6074] vlan2: entered promiscuous mode [ 61.909233][ T6074] hsr0: entered promiscuous mode [ 61.911309][ T6074] vlan2: entered allmulticast mode [ 61.913416][ T6074] hsr0: entered allmulticast mode [ 61.915120][ T6074] hsr_slave_0: entered allmulticast mode [ 61.917022][ T6074] hsr_slave_1: entered allmulticast mode [ 61.933643][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 62.026999][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 62.244416][ T5743] Bluetooth: hci1: command tx timeout [ 62.246195][ T5743] Bluetooth: hci0: command tx timeout [ 62.249086][ T5756] Bluetooth: hci3: command tx timeout [ 62.324787][ T5743] Bluetooth: hci2: command tx timeout [ 62.512084][ T6100] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 62.693334][ T6109] loop6: detected capacity change from 0 to 2640 [ 62.702875][ T5758] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.707327][ T5758] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.711514][ T5758] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.717067][ T5758] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.722404][ T5758] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.809570][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 62.855364][ T6122] openvswitch: netlink: Actions may not be safe on all matching packets [ 62.926998][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 62.937249][ T6132] gretap0: entered promiscuous mode [ 62.942773][ T6132] macvlan2: entered allmulticast mode [ 62.945445][ T6132] gretap0: entered allmulticast mode [ 63.257945][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 63.503002][ T6160] input: syz1 as /devices/virtual/input/input6 [ 63.583216][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'. [ 63.648181][ T6173] macvtap1: entered promiscuous mode [ 63.649957][ T6173] macvtap1: entered allmulticast mode [ 63.747717][ T6176] fuse: Unknown parameter '0x0000000000000006' [ 63.752396][ T6176] CIFS: Attempting to mount //127.0.0.1/share [ 63.781410][ T6179] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 63.809722][ T6177] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 63.811244][ T6176] CIFS: VFS: cifs_mount failed w/return code = -112 [ 63.988907][ T6193] bridge0: entered allmulticast mode [ 64.013773][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 64.018569][ T6193] bridge_slave_1: left allmulticast mode [ 64.021183][ T6193] bridge_slave_1: left promiscuous mode [ 64.026499][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.037656][ T6193] bridge_slave_0: left allmulticast mode [ 64.039560][ T6193] bridge_slave_0: left promiscuous mode [ 64.041474][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.059092][ T6193] bridge0 (unregistering): left allmulticast mode [ 64.108937][ T6206] macvtap1: entered promiscuous mode [ 64.114194][ T6206] vlan0: entered promiscuous mode [ 64.121799][ T6206] team0: Device macvtap1 failed to register rx_handler [ 64.128008][ T6206] vlan0: left promiscuous mode [ 64.186514][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 64.324468][ T5743] Bluetooth: hci3: command tx timeout [ 64.468333][ T42] kauditd_printk_skb: 69 callbacks suppressed [ 64.468384][ T42] audit: type=1400 audit(1786044407.699:314): avc: denied { mount } for pid=6228 comm="syz.3.127" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.486207][ T6229] clocksource: Switched to clocksource acpi_pm [ 64.489898][ T42] audit: type=1400 audit(1786044407.722:315): avc: denied { read write } for pid=6218 comm="syz.1.123" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 64.500990][ T6229] clocksource: Switched to clocksource tsc [ 64.501775][ T42] audit: type=1400 audit(1786044407.722:316): avc: denied { open } for pid=6218 comm="syz.1.123" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 64.519952][ T42] audit: type=1400 audit(1786044407.746:317): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 64.568505][ T42] audit: type=1400 audit(1786044407.796:318): avc: denied { bind } for pid=6231 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.569693][ T6238] comedi comedi3: comedi_config --init_data is deprecated [ 64.583243][ T42] audit: type=1400 audit(1786044407.806:319): avc: denied { ioctl } for pid=6231 comm="syz.0.128" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.592995][ T42] audit: type=1400 audit(1786044407.816:320): avc: denied { setattr } for pid=6231 comm="syz.0.128" name="CAN_RAW" dev="sockfs" ino=12446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.617197][ T42] audit: type=1400 audit(1786044407.846:321): avc: denied { bind } for pid=6240 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.662929][ T42] audit: type=1400 audit(1786044407.886:322): avc: denied { read write } for pid=6245 comm="syz.2.134" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 64.672524][ T42] audit: type=1400 audit(1786044407.886:323): avc: denied { open } for pid=6245 comm="syz.2.134" path="/29/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 64.738545][ T6259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.743052][ T6259] capability: warning: `syz.1.137' uses deprecated v2 capabilities in a way that may be insecure [ 64.752002][ T6259] overlayfs: failed to resolve '/0000': -2 [ 64.757556][ T6259] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 64.770763][ T6261] netlink: 'syz.2.138': attribute type 11 has an invalid length. [ 64.979569][ T6275] overlayfs: missing 'lowerdir' [ 64.983263][ T6275] overlay: ./file0 is not a directory [ 65.736679][ T6309] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 65.741966][ T6309] netlink: 224 bytes leftover after parsing attributes in process `syz.1.155'. [ 65.987530][ T6324] netlink: 59 bytes leftover after parsing attributes in process `syz.2.161'. [ 66.023095][ T6329] loop6: detected capacity change from 0 to 2640 [ 66.036542][ T5753] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.040266][ T5753] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.045806][ T5753] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.049701][ T5753] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.056722][ T5753] Buffer I/O error on dev loop6, logical block 0, async page read [ 66.200976][ T6338] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.166'. [ 66.204885][ T6338] Zero length message leads to an empty skb [ 66.357347][ T6348] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 66.382383][ T6353] base or size exceeds the MTRR width [ 66.466928][ T6365] CIFS: Attempting to mount //127.0.0.1/share [ 66.503210][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 66.763771][ T6382] kAFS: bad VL server IP address [ 66.835020][ T6393] input: syz1 as /devices/virtual/input/input7 [ 66.840895][ T6392] gretap0: entered promiscuous mode [ 66.843513][ T6392] macvlan2: entered allmulticast mode [ 66.845868][ T6392] gretap0: entered allmulticast mode [ 66.911754][ T6395] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 67.111928][ T6408] random: crng reseeded on system resumption [ 67.122505][ T6408] Unrecognized hibernate image header format! [ 67.124552][ T6408] PM: hibernation: Image mismatch: architecture specific data [ 67.127868][ T6408] Unrecognized hibernate image header format! [ 67.129903][ T6408] PM: hibernation: Image mismatch: architecture specific data [ 67.253846][ T6418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.310849][ T6425] netlink: 'syz.2.202': attribute type 63 has an invalid length. [ 67.360914][ T6365] CIFS: VFS: cifs_mount failed w/return code = -512 [ 67.670175][ T6449] syz.2.210 uses obsolete (PF_INET,SOCK_PACKET) [ 67.676985][ T6447] syzkaller1: entered promiscuous mode [ 67.678650][ T6447] syzkaller1: entered allmulticast mode [ 67.836942][ T5889] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.008865][ T5889] usb 8-1: Using ep0 maxpacket: 32 [ 68.012167][ T5889] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 68.015500][ T5889] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 68.019482][ T5889] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.023086][ T5889] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 68.032410][ T5889] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 68.035455][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.038069][ T5889] usb 8-1: Product: syz [ 68.039414][ T5889] usb 8-1: Manufacturer: syz [ 68.041017][ T5889] usb 8-1: SerialNumber: syz [ 68.055406][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 68.064034][ T5889] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input8 [ 68.094103][ T6467] xt_connbytes: Forcing CT accounting to be enabled [ 68.115383][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe20100004900 [ 68.150203][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7900 [ 68.185030][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 68.225378][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 68.268316][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 68.296313][ T5889] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 68.306298][ T5889] (id 0x00) [ 68.310787][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 68.353276][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 68.393720][ T5889] rc_core: IR keymap rc-imon-pad not found [ 68.395750][ T5889] Registered IR keymap rc-empty [ 68.397577][ T5889] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 68.400894][ T5889] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 68.404260][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 68.435808][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 68.471377][ T6465] kvm: kvm [6464]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800000007900 [ 68.532699][ T6479] device-mapper: ioctl: Invalid data size in the ioctl structure: 2054750520 [ 68.533903][ T5889] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 68.567139][ T5889] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input9 [ 68.592132][ T5889] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:2> initialized [ 68.607770][ T6483] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 68.661862][ T6485] tmpfs: Bad value for 'mpol' [ 69.608333][ T5834] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 69.624608][ T6508] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.778311][ T6518] __nla_validate_parse: 3 callbacks suppressed [ 69.778350][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.784116][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.787292][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.790214][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.791522][ T6498] ceph: No mds server is up or the cluster is laggy [ 69.793376][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.799684][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.802621][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.805954][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.808818][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.811798][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 69.933893][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 69.933918][ T42] audit: type=1400 audit(1786044412.850:386): avc: denied { create } for pid=6528 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.944008][ T42] audit: type=1400 audit(1786044412.859:387): avc: denied { create } for pid=6528 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.951176][ T42] audit: type=1400 audit(1786044412.859:388): avc: denied { ioctl } for pid=6528 comm="syz.2.240" path="socket:[13755]" dev="sockfs" ino=13755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.961959][ T42] audit: type=1400 audit(1786044412.859:389): avc: denied { write } for pid=6528 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.120922][ T42] audit: type=1400 audit(1786044413.018:390): avc: denied { read write } for pid=6537 comm="syz.0.243" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.128511][ T42] audit: type=1400 audit(1786044413.018:391): avc: denied { open } for pid=6537 comm="syz.0.243" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.135779][ T42] audit: type=1400 audit(1786044413.018:392): avc: denied { ioctl } for pid=6537 comm="syz.0.243" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.143656][ T42] audit: type=1400 audit(1786044413.037:393): avc: denied { read } for pid=6537 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.165821][ T42] audit: type=1400 audit(1786044413.055:394): avc: denied { listen } for pid=6532 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.172086][ T42] audit: type=1400 audit(1786044413.065:395): avc: denied { connect } for pid=6532 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.628368][ T6552] Invalid source name [ 70.630466][ T6552] UBIFS error (pid: 6552): cannot open "ubifs", error -22 [ 70.653172][ T6552] process 'syz.0.247' launched './file2' with NULL argv: empty string added [ 70.733190][ T1046] usb 8-1: USB disconnect, device number 2 [ 70.858022][ T6571] evm: overlay not supported [ 70.909929][ T34] cfg80211: failed to load regulatory.db [ 71.043145][ T6586] FAULT_INJECTION: forcing a failure. [ 71.043145][ T6586] name failslab, interval 1, probability 0, space 0, times 1 [ 71.047193][ T6586] CPU: 3 UID: 0 PID: 6586 Comm: syz.0.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.047210][ T6586] Tainted: [L]=SOFTLOCKUP [ 71.047214][ T6586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.047227][ T6586] Call Trace: [ 71.047237][ T6586] [ 71.047243][ T6586] dump_stack_lvl+0x100/0x190 [ 71.047279][ T6586] should_fail_ex.cold+0x5/0xa [ 71.047294][ T6586] should_failslab+0xc2/0x120 [ 71.047309][ T6586] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 71.047322][ T6586] ? __alloc_skb+0x5b7/0x710 [ 71.047363][ T6586] ? __alloc_skb+0x140/0x710 [ 71.047377][ T6586] __alloc_skb+0x140/0x710 [ 71.047390][ T6586] ? __alloc_skb+0x5b7/0x710 [ 71.047402][ T6586] ? __pfx___alloc_skb+0x10/0x10 [ 71.047415][ T6586] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 71.047442][ T6586] ? sock_has_perm+0x25a/0x2f0 [ 71.047457][ T6586] ? __pfx_sock_has_perm+0x10/0x10 [ 71.047472][ T6586] netlink_alloc_large_skb+0x69/0x150 [ 71.047493][ T6586] netlink_sendmsg+0x680/0xda0 [ 71.047507][ T6586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.047520][ T6586] ? selinux_socket_sendmsg+0x198/0x2f0 [ 71.047539][ T6586] ____sys_sendmsg+0xa4d/0xbe0 [ 71.047549][ T6586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.047562][ T6586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.047578][ T6586] ___sys_sendmsg+0x190/0x1e0 [ 71.047591][ T6586] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.047601][ T6586] ? __lock_acquire+0x49f/0x1a40 [ 71.047615][ T6586] ? get_pid_task+0x106/0x250 [ 71.047638][ T6586] __sys_sendmsg+0x160/0x210 [ 71.047653][ T6586] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.047674][ T6586] do_syscall_64+0x115/0x870 [ 71.047715][ T6586] ? clear_bhb_loop+0x70/0xc0 [ 71.047727][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.047739][ T6586] RIP: 0033:0x7f7c7679e0d9 [ 71.047750][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.047760][ T6586] RSP: 002b:00007f7c77746028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.047777][ T6586] RAX: ffffffffffffffda RBX: 00007f7c76a25fa0 RCX: 00007f7c7679e0d9 [ 71.047784][ T6586] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 71.047791][ T6586] RBP: 00007f7c77746090 R08: 0000000000000000 R09: 0000000000000000 [ 71.047797][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.047803][ T6586] R13: 00007f7c76a26038 R14: 00007f7c76a25fa0 R15: 00007ffe8aadf178 [ 71.047816][ T6586] [ 71.177546][ T6588] macvlan3: entered promiscuous mode [ 71.439530][ T6614] openvswitch: netlink: Flow actions attr not present in new flow. [ 71.643471][ T6626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6626 comm=syz.0.273 [ 71.649533][ T6626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6626 comm=syz.0.273 [ 72.321468][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.334783][ T6664] nvme_tcp: malformed address passed: 127.0.0.1:8.00 [ 72.490259][ T6678] No source specified [ 72.769625][ C3] vcan0: j1939_tp_rxtimer: 0xffff888047ba4c00: rx timeout, send abort [ 72.774895][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888047ba4c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 74.350342][ T6755] mtrr: base(0x10000000) is not aligned on a size(0x10300000) boundary [ 74.762812][ T6777] macsec1: entered promiscuous mode [ 74.764996][ T6777] macsec1: entered allmulticast mode [ 74.855094][ T6787] sctp: [Deprecated]: syz.2.339 (pid 6787) Use of int in max_burst socket option deprecated. [ 74.855094][ T6787] Use struct sctp_assoc_value instead [ 74.868434][ T40] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 75.031984][ T40] usb 8-1: unable to get BOS descriptor or descriptor too short [ 75.036337][ T40] usb 8-1: not running at top speed; connect to a high speed hub [ 75.041119][ T40] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 75.044519][ T40] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 75.048024][ T40] usb 8-1: config 14 has no interface number 0 [ 75.052531][ T40] usb 8-1: config 14 has no interface number 1 [ 75.055043][ T40] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 75.059453][ T40] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 75.067122][ T40] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 75.073034][ T40] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.078505][ T40] usb 8-1: config 14 interface 57 has no altsetting 0 [ 75.081313][ T40] usb 8-1: config 14 interface 228 has no altsetting 0 [ 75.087655][ T40] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 75.091458][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.095227][ T40] usb 8-1: Product: syz [ 75.096981][ T40] usb 8-1: Manufacturer: syz [ 75.099082][ T40] usb 8-1: SerialNumber: syz [ 75.251897][ T6812] loop4: detected capacity change from 0 to 7 [ 75.264520][ T6813] netlink: 'syz.1.347': attribute type 1 has an invalid length. [ 75.267307][ T6813] __nla_validate_parse: 68 callbacks suppressed [ 75.267316][ T6813] netlink: 224 bytes leftover after parsing attributes in process `syz.1.347'. [ 75.305474][ T1308] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.310244][ T1308] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.315264][ T6812] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.325184][ T6812] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.329178][ T6812] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.334026][ T6812] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.337306][ T6812] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.341602][ T6812] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.344985][ T6812] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.348877][ T6812] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.352352][ T6812] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.356300][ T6812] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.359585][ T6812] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.363584][ T6812] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.366778][ T6812] ldm_validate_partition_table(): Disk read failed. [ 75.369893][ T6812] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.373489][ T6812] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.376797][ T6812] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.381346][ T6812] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.384710][ T6812] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 75.388613][ T6812] Buffer I/O error on dev loop4, logical block 0, async page read [ 75.392179][ T6812] Dev loop4: unable to read RDB block 0 [ 75.396340][ T6812] loop4: unable to read partition table [ 75.398902][ T6812] loop4: partition table beyond EOD, truncated [ 75.401552][ T6812] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 75.458102][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.349'. [ 75.538664][ T40] legousbtower 8-1:14.57: interrupt endpoints not found [ 75.888976][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 75.888998][ T42] audit: type=1400 audit(1786044418.418:441): avc: denied { bind } for pid=6826 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.891934][ T6827] netlink: 156 bytes leftover after parsing attributes in process `syz.1.354'. [ 75.897778][ T42] audit: type=1400 audit(1786044418.418:442): avc: denied { listen } for pid=6826 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.906930][ T42] audit: type=1400 audit(1786044418.418:443): avc: denied { search } for pid=5453 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.913655][ T42] audit: type=1400 audit(1786044418.418:444): avc: denied { search } for pid=5453 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.920504][ T42] audit: type=1400 audit(1786044418.418:445): avc: denied { search } for pid=5453 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.956366][ T42] audit: type=1400 audit(1786044418.474:446): avc: denied { read } for pid=6830 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.963882][ T42] audit: type=1400 audit(1786044418.474:447): avc: denied { read open } for pid=6830 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.972346][ T42] audit: type=1400 audit(1786044418.474:448): avc: denied { getattr } for pid=6830 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.972544][ T40] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 51.63 build 1747 [ 75.984704][ T42] audit: type=1400 audit(1786044418.492:449): avc: denied { write } for pid=6829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.987755][ T40] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 75.994791][ T42] audit: type=1400 audit(1786044418.492:450): avc: denied { add_name } for pid=6829 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.168819][ T6845] macvtap1: entered promiscuous mode [ 76.171136][ T6845] macvtap1: entered allmulticast mode [ 76.172419][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 76.199873][ T6846] gretap0: entered promiscuous mode [ 76.203314][ T6846] macvlan2: entered allmulticast mode [ 76.206168][ T6846] gretap0: entered allmulticast mode [ 76.290072][ T6851] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 76.364796][ T6853] nvme_tcp: malformed address passed: 127.0.0.1:8:00 [ 76.542726][ T6866] netlink: 124 bytes leftover after parsing attributes in process `syz.0.364'. [ 76.555060][ T6866] nvmet: adding nsid 1 to subsystem test_subsys [ 76.581591][ C3] usb 8-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 76.589527][ T5834] usb 8-1: USB disconnect, device number 3 [ 76.621138][ T5834] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 76.853641][ T6894] Bluetooth: MGMT ver 1.23 [ 76.914024][ T6900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 76.916239][ T6900] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.924223][ T6904] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 76.927003][ T6904] netlink: 224 bytes leftover after parsing attributes in process `syz.2.377'. [ 76.930318][ T6900] vhci_hcd vhci_hcd.0: Device attached [ 76.936005][ T6901] vhci_hcd: connection closed [ 76.938951][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 76.945294][ T5792] vhci_hcd vhci_hcd.0: release socket [ 76.948038][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 77.240085][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 77.299162][ T6940] loop6: detected capacity change from 0 to 2640 [ 77.562285][ T6954] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 78.466171][ T6965] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.481968][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 78.534347][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 78.654274][ T6984] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 78.701077][ T6984] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 78.707170][ T6984] bond2 (unregistering): Released all slaves [ 78.741074][ T6989] bridge1: entered promiscuous mode [ 78.747645][ T6989] bond1: (slave bridge1): making interface the new active one [ 78.750819][ T6989] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 78.823661][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 78.886298][ T5846] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 79.059109][ T5846] usb 8-1: unable to get BOS descriptor or descriptor too short [ 79.062615][ T5846] usb 8-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 79.065888][ T5846] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 79.070050][ T5846] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.076991][ T5846] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.080992][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.083663][ T5846] usb 8-1: Product: syz [ 79.085102][ T5846] usb 8-1: Manufacturer: syz [ 79.086644][ T5846] usb 8-1: SerialNumber: syz [ 79.314873][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.320596][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.331540][ T5846] cdc_ncm 8-1:1.0: bind() failure [ 79.338138][ T5846] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 79.340314][ T5846] cdc_ncm 8-1:1.1: bind() failure [ 79.347983][ T5846] usb 8-1: USB disconnect, device number 4 [ 79.459494][ T7025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.468350][ T7025] bond2: entered promiscuous mode [ 80.511873][ T7082] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 80.516914][ T7082] CIFS: VFS: Malformed UNC in devname [ 80.528721][ T7082] dummy_hcd dummy_hcd.0: remove, state 4 [ 80.531887][ T7082] usb usb5: USB disconnect, device number 1 [ 80.559406][ T7082] dummy_hcd dummy_hcd.0: stopped [ 80.568668][ T7082] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 80.572855][ T7086] netlink: 'syz.2.445': attribute type 21 has an invalid length. [ 80.604419][ T7091] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 80.612540][ T7091] dummy_hcd dummy_hcd.0: Dummy host controller [ 80.619360][ T7091] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 80.620646][ T7093] input: syz1 as /devices/virtual/input/input12 [ 80.652447][ T7091] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 80.661869][ T7091] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 80.666605][ T7091] usb usb5: Product: Dummy host controller [ 80.669087][ T7091] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 80.672726][ T7091] usb usb5: SerialNumber: dummy_hcd.0 [ 80.682545][ T7089] mmap: syz.0.444 (7089) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.688577][ T7091] hub 5-0:1.0: USB hub found [ 80.691518][ T7091] hub 5-0:1.0: 1 port detected [ 80.856507][ T7108] netlink: 'syz.1.451': attribute type 11 has an invalid length. [ 80.858993][ T7105] nvme_tcp: malformed address passed: 127.0.0.1:80.0 [ 80.914997][ T7111] warning: `syz.0.452' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.920486][ T7111] __nla_validate_parse: 2 callbacks suppressed [ 80.920498][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 81.411654][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 81.411675][ T42] audit: type=1400 audit(1786044423.583:498): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.481099][ T42] audit: type=1400 audit(1786044423.649:499): avc: denied { create } for pid=7133 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.494831][ T42] audit: type=1400 audit(1786044423.667:500): avc: denied { map } for pid=7133 comm="syz.3.461" path="socket:[21398]" dev="sockfs" ino=21398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.539844][ T42] audit: type=1400 audit(1786044423.705:501): avc: denied { bind } for pid=7138 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.172692][ T7187] binder: 7185:7187 ioctl 80089418 200000000380 returned -22 [ 82.182406][ T7187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.186639][ T7187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.206619][ T7187] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 82.211694][ T7187] overlayfs: d_ino too big (., ino=4611686018427387926, xinobits=3) [ 82.215718][ T7187] overlayfs: d_ino too big (gadget, ino=4611686018427391801, xinobits=3) [ 82.218883][ T7187] overlayfs: d_ino too big (snd_seq, ino=4611686018427391992, xinobits=3) [ 82.222407][ T7187] overlayfs: d_ino too big (netdevsim, ino=4611686018427415615, xinobits=3) [ 82.226719][ T7187] overlayfs: d_ino too big (serio, ino=4611686018427391818, xinobits=3) [ 82.229523][ T7187] overlayfs: d_ino too big (ulpi, ino=4611686018427391755, xinobits=3) [ 82.233760][ T7187] overlayfs: d_ino too big (coreboot, ino=4611686018427391904, xinobits=3) [ 82.236693][ T7187] overlayfs: d_ino too big (hdaudio, ino=4611686018427391998, xinobits=3) [ 82.239439][ T7187] overlayfs: d_ino too big (iio, ino=4611686018427391934, xinobits=3) [ 82.243623][ T7187] overlayfs: d_ino too big (firewire, ino=4611686018427415629, xinobits=3) [ 82.287159][ T7192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.369528][ T7192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.477826][ T7192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.559852][ T29] IPVS: starting estimator thread 0... [ 82.591359][ T7192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.619223][ T7212] netlink: 168 bytes leftover after parsing attributes in process `syz.1.491'. [ 82.660006][ T7213] IPVS: using max 28 ests per chain, 67200 per kthread [ 82.777074][ T5819] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.780134][ T5819] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.783300][ T5819] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.787789][ T5819] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.750363][ T7212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.813328][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 85.888767][ T1046] IPVS: starting estimator thread 0... [ 85.910984][ T42] audit: type=1400 audit(1786044427.794:502): avc: denied { write } for pid=7244 comm="syz.0.502" name="dynamic_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 86.003710][ T7256] IPVS: using max 47 ests per chain, 112800 per kthread [ 86.040420][ T7264] netlink: 608 bytes leftover after parsing attributes in process `syz.0.508'. [ 86.106690][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 86.110640][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 86.114574][ T7266] netlink: 'syz.1.509': attribute type 20 has an invalid length. [ 86.142400][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 86.145380][ T42] audit: type=1400 audit(1786044428.019:503): avc: denied { write } for pid=7265 comm="syz.1.509" name="/" dev="9p" ino=78395317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.154407][ T7273] FAULT_INJECTION: forcing a failure. [ 86.154407][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 86.159326][ T7273] CPU: 2 UID: 0 PID: 7273 Comm: syz.0.511 Tainted: G L N syzkaller #0 PREEMPT(full) [ 86.159350][ T7273] Tainted: [L]=SOFTLOCKUP, [N]=TEST [ 86.159354][ T7273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.159371][ T7273] Call Trace: [ 86.159383][ T7273] [ 86.159388][ T7273] dump_stack_lvl+0x100/0x190 [ 86.159428][ T7273] should_fail_ex.cold+0x5/0xa [ 86.159441][ T7273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 86.159469][ T7273] should_failslab+0xc2/0x120 [ 86.159484][ T7273] kmem_cache_alloc_noprof+0x91/0x6a0 [ 86.159497][ T7273] ? skb_clone+0x190/0x400 [ 86.159548][ T7273] skb_clone+0x190/0x400 [ 86.159563][ T7273] netlink_deliver_tap+0xaed/0xcc0 [ 86.159585][ T7273] netlink_unicast+0x62b/0x850 [ 86.159598][ T7273] ? __pfx_netlink_unicast+0x10/0x10 [ 86.159609][ T7273] ? __pfx_sock_has_perm+0x10/0x10 [ 86.159634][ T7273] netlink_sendmsg+0x8b0/0xda0 [ 86.159647][ T7273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.159660][ T7273] ? selinux_socket_sendmsg+0x198/0x2f0 [ 86.159678][ T7273] ____sys_sendmsg+0xa4d/0xbe0 [ 86.159688][ T7273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.159700][ T7273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.159716][ T7273] ___sys_sendmsg+0x190/0x1e0 [ 86.159728][ T7273] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.159738][ T7273] ? __lock_acquire+0x49f/0x1a40 [ 86.159751][ T7273] ? get_pid_task+0x106/0x250 [ 86.159774][ T7273] __sys_sendmsg+0x160/0x210 [ 86.159789][ T7273] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.159810][ T7273] do_syscall_64+0x115/0x870 [ 86.159853][ T7273] ? clear_bhb_loop+0x70/0xc0 [ 86.159866][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.159877][ T7273] RIP: 0033:0x7f7c7679e0d9 [ 86.159887][ T7273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.159897][ T7273] RSP: 002b:00007f7c77746028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.159915][ T7273] RAX: ffffffffffffffda RBX: 00007f7c76a25fa0 RCX: 00007f7c7679e0d9 [ 86.159922][ T7273] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 86.159927][ T7273] RBP: 00007f7c77746090 R08: 0000000000000000 R09: 0000000000000000 [ 86.159934][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.159939][ T7273] R13: 00007f7c76a26038 R14: 00007f7c76a25fa0 R15: 00007ffe8aadf178 [ 86.159952][ T7273] [ 86.851093][ T42] audit: type=1400 audit(1786044428.674:504): avc: denied { write } for pid=7307 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.897932][ T7318] syzkaller0: entered promiscuous mode [ 86.899785][ T42] audit: type=1400 audit(1786044428.721:505): avc: denied { ioctl } for pid=7317 comm="syz.3.529" path="socket:[27801]" dev="sockfs" ino=27801 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.908492][ T7318] syzkaller0: entered allmulticast mode [ 87.102482][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.532'. [ 87.177706][ T7334] netlink: 'syz.3.535': attribute type 29 has an invalid length. [ 87.181391][ T7334] netlink: 'syz.3.535': attribute type 3 has an invalid length. [ 87.184620][ T7334] netlink: 76 bytes leftover after parsing attributes in process `syz.3.535'. [ 87.238600][ T7336] nvme_tcp: malformed address passed: 127.0.0.1:80:0 [ 87.398500][ T7348] macvtap1: entered promiscuous mode [ 87.400276][ T7348] macvtap1: entered allmulticast mode [ 87.466365][ T7352] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 87.528027][ T42] audit: type=1400 audit(1786044429.310:506): avc: denied { create } for pid=7354 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.539344][ T42] audit: type=1400 audit(1786044429.320:507): avc: denied { setopt } for pid=7354 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.547854][ T42] audit: type=1400 audit(1786044429.329:508): avc: denied { bind } for pid=7354 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.646386][ T7362] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 87.803801][ T7373] pim6reg: entered allmulticast mode [ 87.869201][ T7380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.556'. [ 87.874361][ T7380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.879504][ T7380] IPv6: NLM_F_CREATE should be set when creating new route [ 87.933364][ T42] audit: type=1400 audit(1786044429.685:509): avc: denied { map } for pid=7379 comm="syz.1.556" path="/dev/ublkc0" dev="devtmpfs" ino=2916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.942014][ T42] audit: type=1400 audit(1786044429.694:510): avc: denied { append } for pid=7372 comm="syz.0.553" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.949422][ T7373] input: syz0 as /devices/virtual/input/input13 [ 87.967954][ T7373] cgroup: fork rejected by pids controller in /syz0 [ 87.981542][ T7372] pim6reg: left allmulticast mode [ 88.661035][ T42] audit: type=1400 audit(1786044430.368:511): avc: denied { create } for pid=7384 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.670719][ T42] audit: type=1400 audit(1786044430.368:512): avc: denied { connect } for pid=7384 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.677003][ T42] audit: type=1400 audit(1786044430.377:513): avc: denied { bind } for pid=7387 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.793926][ T7395] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.948237][ T5792] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.017509][ T5756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.023472][ T5756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.027318][ T5756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.034496][ T5756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.040752][ T5756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.069771][ T5792] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.095180][ T7405] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 89.248608][ T5792] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.364003][ T5792] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.423178][ T7421] misc userio: No port type given on /dev/userio [ 89.800681][ T5792] gretap0 (unregistering): left allmulticast mode [ 89.839244][ T5792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.846405][ T5792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.850747][ T5792] bond0 (unregistering): Released all slaves [ 89.867394][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 89.938095][ T7402] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.942687][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.950635][ T7402] bridge_slave_0: entered allmulticast mode [ 89.954704][ T7402] bridge_slave_0: entered promiscuous mode [ 89.965611][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.971004][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.973993][ T7402] bridge_slave_1: entered allmulticast mode [ 89.978197][ T7402] bridge_slave_1: entered promiscuous mode [ 90.100842][ T7402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.109416][ T5792] rxrpc: Leaked peer a9 {1} 127.0.0.1:7003 [ 90.129857][ T7402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.243546][ T7402] team0: Port device team_slave_0 added [ 90.252178][ T7402] team0: Port device team_slave_1 added [ 90.285636][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 90.294753][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.297211][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.306506][ T7402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.327908][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.331266][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.339126][ T7402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.375702][ T7402] hsr_slave_0: entered promiscuous mode [ 90.378915][ T7402] hsr_slave_1: entered promiscuous mode [ 90.381857][ T7402] debugfs: 'hsr0' already exists in 'hsr' [ 90.384190][ T7402] Cannot create hsr debugfs directory [ 90.599578][ T5792] hsr_slave_0: left promiscuous mode [ 90.602720][ T5792] hsr_slave_1: left promiscuous mode [ 90.607020][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.610322][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.614962][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.617762][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.634690][ T5792] veth1_macvtap: left promiscuous mode [ 90.637195][ T5792] veth0_macvtap: left promiscuous mode [ 90.639232][ T5792] veth1_vlan: left promiscuous mode [ 90.642250][ T5792] veth0_vlan: left promiscuous mode [ 90.802915][ T5792] team0 (unregistering): Port device team_slave_1 removed [ 90.810238][ T5792] team0 (unregistering): Port device team_slave_0 removed [ 90.917310][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 90.927372][ T7492] syzkaller0: entered promiscuous mode [ 90.929569][ T7492] syzkaller0: entered allmulticast mode [ 91.048166][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.051118][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.158754][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.169261][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.294195][ T5756] Bluetooth: hci1: command tx timeout [ 91.331708][ T7489] gretap0: left allmulticast mode [ 91.361765][ T5819] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.421046][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.424591][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.464457][ T7514] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.522831][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.590'. [ 91.539900][ T7519] can0: slcan on ttyS3. [ 91.712192][ T7519] can0 (unregistered): slcan off ttyS3. [ 91.872024][ T5792] IPVS: stop unused estimator thread 0... [ 91.914115][ T7550] bond2 (unregistering): Released all slaves [ 92.101656][ T7567] Bluetooth: (null): Invalid header checksum [ 92.127288][ T233] Bluetooth: (null): Invalid header checksum [ 92.169949][ T7573] loop4: detected capacity change from 0 to 7 [ 92.225827][ T7402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.226063][ T1312] blk_print_req_error: 5 callbacks suppressed [ 92.226080][ T1312] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.232918][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 92.232949][ T42] audit: type=1400 audit(1786044433.708:537): avc: denied { write } for pid=7574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.234871][ T1312] buffer_io_error: 10 callbacks suppressed [ 92.234891][ T1312] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.252623][ T7573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.258979][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.263986][ T7573] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.267831][ T7402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.271934][ T7573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.277335][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.278864][ T7573] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.281780][ T7402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.283898][ T7573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.291268][ T7573] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.297518][ T7573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.299472][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.302901][ T7573] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.305228][ T7402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.307497][ T7573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.309788][ T42] audit: type=1400 audit(1786044433.783:538): avc: denied { write } for pid=7580 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.322845][ T7573] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.327899][ T7573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.335313][ T7573] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.338796][ T7573] ldm_validate_partition_table(): Disk read failed. [ 92.340487][ T7402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.342888][ T7573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.348204][ T7573] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.351884][ T7573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.355821][ T7573] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.359632][ T7573] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.364424][ T7573] Buffer I/O error on dev loop4, logical block 0, async page read [ 92.367580][ T7573] Dev loop4: unable to read RDB block 0 [ 92.370064][ T7573] loop4: unable to read partition table [ 92.373190][ T7573] loop4: partition table beyond EOD, truncated [ 92.382917][ T7573] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 92.430838][ T7402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.443900][ T7402] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.463527][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.466610][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.474737][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.477749][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.702392][ T42] audit: type=1400 audit(1786044434.148:539): avc: denied { create } for pid=7609 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 92.718413][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 92.722991][ T42] audit: type=1400 audit(1786044434.158:540): avc: denied { write } for pid=7609 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 92.729238][ T7614] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 92.738928][ T7614] netlink: 'syz.3.612': attribute type 1 has an invalid length. [ 92.776530][ T7611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7611 comm=syz.2.611 [ 92.782567][ T7611] gfs2: error -5 reading superblock [ 92.955531][ T7611] veth3: entered allmulticast mode [ 93.034572][ T7611] bond3: (slave veth3): Enslaving as an active interface with an up link [ 93.070219][ T7623] bond3 (unregistering): (slave veth3): Releasing backup interface [ 93.075196][ T7623] bond3 (unregistering): Released all slaves [ 93.113082][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.159136][ T7402] veth0_vlan: entered promiscuous mode [ 93.167847][ T7637] loop6: detected capacity change from 0 to 2640 [ 93.174589][ T7402] veth1_vlan: entered promiscuous mode [ 93.221577][ T42] audit: type=1400 audit(1786044434.635:541): avc: denied { create } for pid=7638 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.233063][ T7402] veth0_macvtap: entered promiscuous mode [ 93.243443][ T7402] veth1_macvtap: entered promiscuous mode [ 93.285324][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.300235][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.359126][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.372764][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.383917][ T42] audit: type=1401 audit(1786044434.785:542): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 93.448615][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.451973][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.453531][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.458248][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.515810][ T5756] Bluetooth: hci1: command tx timeout [ 93.524115][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.528047][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.573882][ T42] audit: type=1400 audit(1786044434.962:543): avc: denied { write } for pid=7661 comm="syz.3.626" name="/" dev="9p" ino=78395317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.592374][ T42] audit: type=1400 audit(1786044434.972:544): avc: denied { mounton } for pid=7402 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 93.621886][ T42] audit: type=1400 audit(1786044435.009:545): avc: denied { write } for pid=7661 comm="syz.3.626" name="/" dev="9p" ino=78395317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.713128][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.906245][ T42] audit: type=1400 audit(1786044435.281:546): avc: denied { map } for pid=7683 comm="syz.1.634" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 93.999559][ T7691] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 94.007840][ T7691] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 94.069398][ T7696] exFAT-fs (nullb0): invalid boot record signature [ 94.075984][ T7696] exFAT-fs (nullb0): failed to read boot sector [ 94.078431][ T7696] exFAT-fs (nullb0): failed to recognize exfat type [ 94.574496][ T7710] nvmet: adding nsid 1 to subsystem testnqn [ 94.650787][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.659442][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.665564][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.671983][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.683837][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.917836][ T7514] bridge_slave_1: left allmulticast mode [ 94.920064][ T7514] bridge_slave_1: left promiscuous mode [ 94.932523][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.956857][ T7514] bridge_slave_0: left allmulticast mode [ 94.959721][ T7514] bridge_slave_0: left promiscuous mode [ 94.962188][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.107802][ T7514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.113117][ T7514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.117471][ T7514] bond0 (unregistering): Released all slaves [ 95.162628][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 95.500745][ T7766] FAULT_INJECTION: forcing a failure. [ 95.500745][ T7766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.507941][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.2.657 Tainted: G L N syzkaller #0 PREEMPT(full) [ 95.507973][ T7766] Tainted: [L]=SOFTLOCKUP, [N]=TEST [ 95.507979][ T7766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.508001][ T7766] Call Trace: [ 95.508016][ T7766] [ 95.508024][ T7766] dump_stack_lvl+0x100/0x190 [ 95.508074][ T7766] should_fail_ex.cold+0x5/0xa [ 95.508115][ T7766] _copy_from_user+0x2e/0xd0 [ 95.508151][ T7766] comedi_unlocked_ioctl+0x9b5/0x3310 [ 95.508213][ T7766] ? tomoyo_path_number_perm+0x188/0x580 [ 95.508254][ T7766] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 95.508291][ T7766] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 95.508327][ T7766] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 95.508372][ T7766] ? __fget_files+0x215/0x3d0 [ 95.508390][ T7766] ? hook_file_ioctl_common+0x140/0x440 [ 95.508420][ T7766] ? selinux_file_ioctl+0x13b/0x290 [ 95.508436][ T7766] ? selinux_file_ioctl+0xb6/0x290 [ 95.508455][ T7766] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 95.508484][ T7766] __x64_sys_ioctl+0x18e/0x210 [ 95.508498][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 95.508512][ T7766] do_syscall_64+0x115/0x870 [ 95.508568][ T7766] ? clear_bhb_loop+0x70/0xc0 [ 95.508590][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.508609][ T7766] RIP: 0033:0x7f8c05f9e0d9 [ 95.508627][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.508760][ T7766] RSP: 002b:00007f8c06e34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.508788][ T7766] RAX: ffffffffffffffda RBX: 00007f8c06225fa0 RCX: 00007f8c05f9e0d9 [ 95.508799][ T7766] RDX: 0000200000000180 RSI: 0000000080506409 RDI: 0000000000000003 [ 95.508809][ T7766] RBP: 00007f8c06e34090 R08: 0000000000000000 R09: 0000000000000000 [ 95.508818][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.508827][ T7766] R13: 00007f8c06226038 R14: 00007f8c06225fa0 R15: 00007fff1a291bb8 [ 95.508851][ T7766] [ 95.573853][ T7770] jffs2: notice: (7770) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.631884][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 95.722370][ T7775] input: syz1 as /devices/virtual/input/input14 [ 95.739134][ T5756] Bluetooth: hci1: command tx timeout [ 95.866646][ T7761] fsl-ehci serial8250: No platform data for serial8250. [ 95.958639][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 96.156898][ T7801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.666'. [ 96.228889][ T7514] hsr_slave_0: left promiscuous mode [ 96.234594][ T7514] hsr_slave_1: left promiscuous mode [ 96.237782][ T7514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.242082][ T7514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.309978][ T7813] loop4: detected capacity change from 0 to 7 [ 96.360274][ T7813] ldm_validate_partition_table(): Disk read failed. [ 96.363365][ T7813] Dev loop4: unable to read RDB block 0 [ 96.366037][ T7813] loop4: unable to read partition table [ 96.370030][ T7813] loop4: partition table beyond EOD, truncated [ 96.373657][ T7813] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 96.535157][ T7514] team0 (unregistering): Port device team_slave_1 removed [ 96.547631][ T7514] team0 (unregistering): Port device team_slave_0 removed [ 96.719137][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.722657][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.784054][ T7801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.794693][ T7801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.854917][ T5756] Bluetooth: hci2: command tx timeout [ 96.955050][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 97.120568][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.123675][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.126990][ T7719] bridge_slave_0: entered allmulticast mode [ 97.131136][ T7719] bridge_slave_0: entered promiscuous mode [ 97.139482][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.144776][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.148387][ T7719] bridge_slave_1: entered allmulticast mode [ 97.156631][ T7719] bridge_slave_1: entered promiscuous mode [ 97.185166][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.197110][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.259252][ T7719] team0: Port device team_slave_0 added [ 97.284644][ T7719] team0: Port device team_slave_1 added [ 97.325021][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.327899][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.339349][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.349743][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.354630][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.365289][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.423653][ T7719] hsr_slave_0: entered promiscuous mode [ 97.429169][ T7719] hsr_slave_1: entered promiscuous mode [ 97.432155][ T7719] debugfs: 'hsr0' already exists in 'hsr' [ 97.434532][ T7719] Cannot create hsr debugfs directory [ 97.576884][ T5792] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.582107][ T5792] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.591931][ T5792] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.597150][ T5792] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.606396][ T7876] tipc: Started in network mode [ 97.608358][ T7876] tipc: Node identity 1000001, cluster identity 4369 [ 97.610890][ T7876] tipc: Node number set to 16777217 [ 97.614629][ T7876] tipc: Cannot configure node identity twice [ 97.720372][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 97.720406][ T42] audit: type=1400 audit(1786044438.837:559): avc: denied { checkpoint_restore } for pid=7880 comm="syz.0.688" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.745657][ T7881] binder: 7880:7881 ioctl c0306201 200000000080 returned -14 [ 97.750325][ T7881] binder: 7880:7881 ioctl 400c4d0f 200000000080 returned -22 [ 97.766268][ T7719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.774325][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.778007][ T7719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.784069][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.788473][ T7719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.797572][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.801873][ T7719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.812701][ T7719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.841386][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.844568][ T7719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.846021][ T7886] syz.0.690 (7886): drop_caches: 0 [ 97.864000][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.869192][ T7719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.888476][ T42] audit: type=1400 audit(1786044439.005:560): avc: denied { write } for pid=7885 comm="syz.0.690" name="/" dev="9p" ino=78395317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.908041][ T42] audit: type=1400 audit(1786044439.005:561): avc: denied { create } for pid=7885 comm="syz.0.690" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.918890][ T42] audit: type=1400 audit(1786044439.005:562): avc: denied { associate } for pid=7885 comm="syz.0.690" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 97.927494][ T42] audit: type=1400 audit(1786044439.005:563): avc: denied { write } for pid=7885 comm="syz.0.690" name="/" dev="9p" ino=78395317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.961712][ T5756] Bluetooth: hci1: command tx timeout [ 97.988013][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.021605][ T233] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.033533][ T233] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.056325][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.074956][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.080333][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.130968][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.133975][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.278209][ T42] audit: type=1400 audit(1786044439.370:564): avc: denied { bind } for pid=7904 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.284221][ T7917] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 98.300737][ T7917] CIFS: VFS: Malformed UNC in devname [ 98.302094][ T42] audit: type=1400 audit(1786044439.370:565): avc: denied { name_bind } for pid=7904 comm="syz.1.696" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 98.314745][ T7917] dummy_hcd dummy_hcd.0: remove, state 4 [ 98.316008][ T42] audit: type=1400 audit(1786044439.370:566): avc: denied { node_bind } for pid=7904 comm="syz.1.696" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 98.318908][ T7917] usb usb5: USB disconnect, device number 1 [ 98.357175][ T7917] dummy_hcd dummy_hcd.0: stopped [ 98.359406][ T7917] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 98.373560][ T7917] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 98.376542][ T7917] dummy_hcd dummy_hcd.0: Dummy host controller [ 98.386005][ T7917] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 98.391755][ T7917] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 98.395352][ T7917] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 98.398409][ T7917] usb usb5: Product: Dummy host controller [ 98.400909][ T7917] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 98.403534][ T7917] usb usb5: SerialNumber: dummy_hcd.0 [ 98.415157][ T7917] hub 5-0:1.0: USB hub found [ 98.417325][ T7917] hub 5-0:1.0: 1 port detected [ 98.523625][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.702628][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 98.706342][ T7940] netlink: 'syz.0.703': attribute type 11 has an invalid length. [ 98.709757][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 98.729082][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 98.734809][ T7940] netlink: 'syz.0.703': attribute type 11 has an invalid length. [ 98.738096][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.703'. [ 98.762487][ T7719] veth0_vlan: entered promiscuous mode [ 98.770306][ T7719] veth1_vlan: entered promiscuous mode [ 98.783779][ T7514] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.787475][ T7514] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.799178][ T7944] Bluetooth: MGMT ver 1.23 [ 98.808260][ T7719] veth0_macvtap: entered promiscuous mode [ 98.818062][ T7719] veth1_macvtap: entered promiscuous mode [ 98.834064][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.853644][ T5819] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.856748][ T5819] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.870230][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.877752][ T7514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.976659][ T7514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.982198][ T7514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.986127][ T7514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.008310][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.011808][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.044539][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.048809][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.072259][ T5756] Bluetooth: hci2: command tx timeout [ 99.277697][ T7956] FAULT_INJECTION: forcing a failure. [ 99.277697][ T7956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.284630][ T7956] CPU: 3 UID: 0 PID: 7956 Comm: syz.4.707 Tainted: G L N syzkaller #0 PREEMPT(full) [ 99.284663][ T7956] Tainted: [L]=SOFTLOCKUP, [N]=TEST [ 99.284670][ T7956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.284694][ T7956] Call Trace: [ 99.284710][ T7956] [ 99.284718][ T7956] dump_stack_lvl+0x100/0x190 [ 99.284771][ T7956] should_fail_ex.cold+0x5/0xa [ 99.284794][ T7956] _copy_from_user+0x2e/0xd0 [ 99.284832][ T7956] comedi_unlocked_ioctl+0x9b5/0x3310 [ 99.284897][ T7956] ? tomoyo_path_number_perm+0x188/0x580 [ 99.284937][ T7956] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 99.284975][ T7956] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.285010][ T7956] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.285056][ T7956] ? __fget_files+0x215/0x3d0 [ 99.285074][ T7956] ? hook_file_ioctl_common+0x140/0x440 [ 99.285102][ T7956] ? selinux_file_ioctl+0x13b/0x290 [ 99.285144][ T7956] ? selinux_file_ioctl+0xb6/0x290 [ 99.285162][ T7956] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 99.285185][ T7956] __x64_sys_ioctl+0x18e/0x210 [ 99.285209][ T7956] do_syscall_64+0x115/0x870 [ 99.285266][ T7956] ? clear_bhb_loop+0x70/0xc0 [ 99.285288][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.285305][ T7956] RIP: 0033:0x7f94acb9e0d9 [ 99.285322][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.285339][ T7956] RSP: 002b:00007f94ada67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.285366][ T7956] RAX: ffffffffffffffda RBX: 00007f94ace25fa0 RCX: 00007f94acb9e0d9 [ 99.285378][ T7956] RDX: 0000200000000180 RSI: 0000000080506409 RDI: 0000000000000003 [ 99.285388][ T7956] RBP: 00007f94ada67090 R08: 0000000000000000 R09: 0000000000000000 [ 99.285399][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.285408][ T7956] R13: 00007f94ace26038 R14: 00007f94ace25fa0 R15: 00007fff34eee548 [ 99.285440][ T7956] [ 99.470032][ T7964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.711'. [ 99.509646][ T42] audit: type=1400 audit(1786044440.512:567): avc: denied { ioctl } for pid=7965 comm="syz.0.712" path="socket:[33841]" dev="sockfs" ino=33841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.528481][ T7966] i2c i2c-0: delete_device: Extra parameters [ 99.534422][ T42] audit: type=1400 audit(1786044440.549:568): avc: denied { create } for pid=7965 comm="syz.0.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.642039][ T7970] netlink: 68 bytes leftover after parsing attributes in process `syz.0.713'. [ 99.879798][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 100.350446][ T8012] base or size exceeds the MTRR width [ 100.436633][ T8016] netlink: 88 bytes leftover after parsing attributes in process `syz.2.729'. [ 100.570218][ T40] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 100.732374][ T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.741820][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.746229][ T40] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 100.751873][ T40] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 100.755989][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.766429][ T40] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 100.767812][ T8028] netlink: 10 bytes leftover after parsing attributes in process `syz.4.734'. [ 100.773670][ T8028] openvswitch: netlink: Flow key attr not present in new flow. [ 100.775398][ T40] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 100.781661][ T40] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 100.795875][ T40] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 100.809680][ T40] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 100.812714][ T40] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 100.817692][ T40] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 100.831603][ T8030] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 100.837692][ T8030] CIFS: VFS: Malformed UNC in devname [ 100.854683][ T8030] dummy_hcd dummy_hcd.0: remove, state 1 [ 100.861895][ T8030] usb usb5: USB disconnect, device number 1 [ 100.864341][ T8030] usb 5-1: USB disconnect, device number 2 [ 100.890016][ T8030] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 100.901578][ T8030] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 100.911463][ T8030] keyspan 5-1:1.0: device disconnected [ 100.941608][ T8030] dummy_hcd dummy_hcd.0: stopped [ 100.944555][ T8030] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 100.990940][ T8003] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 100.995414][ T8003] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 100.999285][ T8003] CPU: 2 UID: 0 PID: 8003 Comm: syz.0.725 Tainted: G L N syzkaller #0 PREEMPT(full) [ 101.003937][ T8003] Tainted: [L]=SOFTLOCKUP, [N]=TEST [ 101.006281][ T8003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.010867][ T8003] RIP: 0010:set_link_state+0x27/0xc70 [ 101.013340][ T8003] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 aa b9 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 101.021741][ T8003] RSP: 0018:ffffc9000dcf7b88 EFLAGS: 00010046 [ 101.024421][ T8003] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d0ba13 [ 101.027896][ T8003] RDX: 0000000000000000 RSI: ffffffff87d0ab36 RDI: 0000000000000000 [ 101.031237][ T8003] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 101.034622][ T8003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 101.038113][ T8003] R13: ffff88802a920000 R14: 0000000000000000 R15: ffff88802a920c00 [ 101.041663][ T8003] FS: 000055558a418500(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 101.045547][ T8003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.048557][ T8003] CR2: 0000000000000000 CR3: 00000000356d6000 CR4: 0000000000352ef0 [ 101.052253][ T8003] Call Trace: [ 101.053838][ T8003] [ 101.055198][ T8003] ? __pfx_dummy_pullup+0x10/0x10 [ 101.057376][ T8003] dummy_pullup+0xf3/0x170 [ 101.059309][ T8003] ? __pfx_dummy_pullup+0x10/0x10 [ 101.061499][ T8003] usb_gadget_disconnect_locked+0x142/0x4e0 [ 101.064018][ T8003] gadget_unbind_driver+0xd8/0x4f0 [ 101.066240][ T8003] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 101.068677][ T8003] device_remove+0xcb/0x180 [ 101.070648][ T8003] device_release_driver_internal+0x44e/0x620 [ 101.073277][ T8003] driver_detach+0xd8/0x1b0 [ 101.075210][ T8003] bus_remove_driver+0x13b/0x2e0 [ 101.077349][ T8003] driver_unregister+0x76/0xb0 [ 101.079538][ T8003] usb_gadget_unregister_driver+0x49/0x70 [ 101.081931][ T8003] raw_release+0x19b/0x260 [ 101.083885][ T8003] ? __pfx_raw_release+0x10/0x10 [ 101.086061][ T8003] __fput+0x3ff/0xb50 [ 101.087791][ T8003] task_work_run+0x150/0x240 [ 101.089815][ T8003] ? __pfx_task_work_run+0x10/0x10 [ 101.092006][ T8003] exit_to_user_mode_loop+0x1d8/0x6f0 [ 101.094512][ T8003] ? rcu_is_watching+0x12/0xc0 [ 101.096503][ T8003] do_syscall_64+0x666/0x870 [ 101.098318][ T8003] ? clear_bhb_loop+0x70/0xc0 [ 101.100313][ T8003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.102756][ T8003] RIP: 0033:0x7fa7a779e0d9 [ 101.104218][ T8003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.111159][ T8003] RSP: 002b:00007fffef9072c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 101.113893][ T8003] RAX: 0000000000000000 RBX: 00007fffef9073b0 RCX: 00007fa7a779e0d9 [ 101.116714][ T8003] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 101.119524][ T8003] RBP: 0000000000017e06 R08: 0000000000000001 R09: 0000000000000000 [ 101.122241][ T8003] R10: 0000001b32720000 R11: 0000000000000246 R12: 00007fffef9073f0 [ 101.124767][ T8003] R13: 00007fa7a7a25fac R14: 00000000000180fe R15: 00007fa7a7a25fa0 [ 101.127314][ T8003] [ 101.128298][ T8003] Modules linked in: [ 101.129641][ T8003] ---[ end trace 0000000000000000 ]--- [ 101.131408][ T8003] RIP: 0010:set_link_state+0x27/0xc70 [ 101.133131][ T8003] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 aa b9 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 101.139923][ T8003] RSP: 0018:ffffc9000dcf7b88 EFLAGS: 00010046 [ 101.142344][ T8003] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d0ba13 [ 101.145423][ T8003] RDX: 0000000000000000 RSI: ffffffff87d0ab36 RDI: 0000000000000000 [ 101.148428][ T8003] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 101.151254][ T8003] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 101.154237][ T8003] R13: ffff88802a920000 R14: 0000000000000000 R15: ffff88802a920c00 [ 101.157040][ T8003] FS: 000055558a418500(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 101.160497][ T8003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.162891][ T8003] CR2: 0000000000000000 CR3: 00000000356d6000 CR4: 0000000000352ef0 [ 101.165678][ T8003] Kernel panic - not syncing: Fatal exception [ 101.168691][ T8003] Kernel Offset: disabled [ 101.170233][ T8003] Rebooting in 86400 seconds..