last executing test programs: 7.720122117s ago: executing program 3 (id=115): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], 0x0, 0x1, 0x1}) 7.670304794s ago: executing program 3 (id=116): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x9, 0x4317d336) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) write$input_event(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(0x0, 0x2, 0x1) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x70, &(0x7f0000000240)="aef3b52d3ab6ca7f4bbed33b224ee3095111a5624b486f87f34f86aa863e8f6441fc2845c62dab695f88be4f0d15c3073c5ad508cdb54c97878a068f5c6d59b747cf33cf476971c28d17bc4f775aa82aea83a200dc6e5260b43ac4423841e0d5adc651701fd67a99f2fd24ab364e0052"}], 0x1}) 5.700017767s ago: executing program 3 (id=137): syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x6, 0x0, 0xff, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff23, 0xa, 0x9, 0x13}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x3, 0x1, {0x8, 0x25, 0x1, 0x80, 0x30, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfe, 0x6, 0xe, {0x8, 0x25, 0x1, 0x0, 0xc, 0x0, 0x6}}}}}}}}]}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x20000810) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 3.270388575s ago: executing program 0 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) 3.259352322s ago: executing program 0 (id=169): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 2.660230831s ago: executing program 3 (id=177): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1, 0x9, 0x4317d336) write$input_event(r0, &(0x7f0000000080)={{}, 0x1, 0x1, 0x1}, 0x18) write$input_event(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r3, 0x707, 0x0) 2.289235756s ago: executing program 0 (id=180): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0], 0x0, 0x1, 0x1}) 2.288970195s ago: executing program 0 (id=181): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000140)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0xc025, 0x3}) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xadc, 0x3, 0x0, 0x0, 0x0, 0x2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) 2.219042317s ago: executing program 0 (id=182): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@local, 0x402, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[{}], r5, 0x0, '\x00', 0x0, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000480), 0x203, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1, 0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) mknodat$null(r9, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) r10 = inotify_init1(0x0) inotify_add_watch(r10, &(0x7f0000000040)='./file1\x00', 0x20000ba) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1, 0x8) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, r7], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x19b90c09, 0x6, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r12, 0xc01464a6, &(0x7f0000000240)={r13}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x5, r5, r13, 0xfbfbfbfb}) 2.050344987s ago: executing program 0 (id=185): syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x6, 0x0, 0xff, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff23, 0xa, 0x9, 0x13}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x3, 0x1, {0x8, 0x25, 0x1, 0x80, 0x30, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfe, 0x6, 0xe, {0x8, 0x25, 0x1, 0x0, 0xc, 0x0, 0x6}}}}}}}}]}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x20000810) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.910111478s ago: executing program 2 (id=190): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:s/px./file0:0', 0xf) 1.909858012s ago: executing program 2 (id=191): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xc0000) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000080)={0xb, 0x6, 0x81, 0x1, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r0], 0x0, 0x1, 0x1}) 1.838809328s ago: executing program 2 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000008000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 1.838629409s ago: executing program 2 (id=193): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.109382499s ago: executing program 1 (id=203): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f00000000c0)=""/229, 0xe5, 0x0, &(0x7f00000001c0)=""/116, 0x74}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="963418000000090000060000000003000000850000007d000000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x12, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async, rerun: 32) r3 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) sendto$rxrpc(r3, &(0x7f0000000900)="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", 0x1000, 0x8000, &(0x7f0000001900)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85220000c}], 0x1) (async, rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x40800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b9ee0800000f32dee066b9800000c00f326635008000000f30660f300f01c8660f1ac636660f3882480965660f38825200da83841000000000e0b5", 0x3c}], 0x1, 0x38, 0x0, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) (rerun: 64) write$char_usb(0xffffffffffffffff, &(0x7f00000002c0)="0b82023171cccb935813b1ba3b3c639dc3bc3e3183a5a492d7d282339d7b498278188515b5a6401737b00c17d93507a56d5331f64e2076590f3cb0bd21c44a359dedf73d990407404e0fc6d5ffd4ac52a666dada55c6f999b9dced4bbbbbf239fd5df2ad2581dc8f03b30f75b86593066bf25e53db06b2d1a014f0425382b8153a0e4ec330f692e24d2f6aa50fd61ce6bb7afc721b74a71b2f962d72b933e90007c900849096370d05a85067978f813ee9df842ee9c4dd97c28a7fb57316bc9190bb9425ec58d863cc92633aed9e", 0xce) 980.214237ms ago: executing program 1 (id=204): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe0400020088ca001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b00080001000b0000000800040001000000", 0x58) 979.983512ms ago: executing program 1 (id=205): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000107"], 0x20}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005001}, 0x40050) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 839.741741ms ago: executing program 2 (id=206): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x99f4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback={0x0, 0x41}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 539.512768ms ago: executing program 3 (id=207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x99f4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) (fail_nth: 76) 480.33789ms ago: executing program 3 (id=208): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 98.571079ms ago: executing program 1 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c, 0x0, 0x2}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x28, r5, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000841}, 0x4004000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd704001cdbf2f9f83f54d542a4c8ea60000000f004000080003000597886d341d30bcf52059d1028ff1d899c61f4963feebddd57e89fd85368d5353ff5418672ee84411e040c7779e83557add42d2f22da2149d22c0809af0f4b0d8fd1a3193f76ad86610efbdd91050a36824be9914aecc6ba8a954186d54e731ffa698436bb547e2e2c5e257f3b85b320665ffe285168f", @ANYRES32=r3, @ANYBLOB="0800310043100000"], 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 335.298µs ago: executing program 1 (id=210): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300008cffffff00280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 138.796µs ago: executing program 2 (id=211): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, 0x0) 0s ago: executing program 1 (id=212): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000080)=[r1], &(0x7f00000000c0)=[0x8, 0xfffffffffffffffc], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r1], 0x0, 0x1, 0x1}) 0s ago: executing program 2 (id=213): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) (fail_nth: 8) kernel console output (not intermixed with test programs): [ 38.263311][ T41] audit: type=1400 audit(1786105664.928:116): avc: denied { write } for pid=5632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.315475][ T41] audit: type=1400 audit(1786105664.988:117): avc: denied { write } for pid=5635 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.504921][ T41] audit: type=1400 audit(1786105665.178:118): avc: denied { write } for pid=5638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.571912][ T41] audit: type=1400 audit(1786105665.238:119): avc: denied { write } for pid=5641 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.678710][ T41] audit: type=1400 audit(1786105665.348:120): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:34091' (ED25519) to the list of known hosts. [ 41.936235][ T5682] cgroup: Unknown subsys name 'net' [ 42.066433][ T5682] cgroup: Unknown subsys name 'cpuset' [ 42.070709][ T5682] cgroup: Unknown subsys name 'rlimit' [ 42.293946][ T5713] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.983802][ T5682] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.632116][ T41] kauditd_printk_skb: 37 callbacks suppressed [ 46.632130][ T41] audit: type=1400 audit(1786105673.298:158): avc: denied { execmem } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.810785][ T41] audit: type=1400 audit(1786105673.478:159): avc: denied { create } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.825232][ T41] audit: type=1400 audit(1786105673.478:160): avc: denied { read write } for pid=5720 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.832686][ T41] audit: type=1400 audit(1786105673.498:161): avc: denied { open } for pid=5720 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.836495][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.840283][ T41] audit: type=1400 audit(1786105673.498:162): avc: denied { ioctl } for pid=5720 comm="syz-executor" path="socket:[6856]" dev="sockfs" ino=6856 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.853927][ T5724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.857843][ T5724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.863587][ T5724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.863591][ T5726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.868574][ T5724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.874332][ T5724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.875083][ T5732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.879697][ T5726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.882230][ T5732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.882373][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.885637][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.889189][ T5732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.890851][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.894305][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.898720][ T41] audit: type=1400 audit(1786105673.568:163): avc: denied { read } for pid=5720 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.899059][ T5726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.908771][ T41] audit: type=1400 audit(1786105673.568:164): avc: denied { open } for pid=5720 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.910114][ T5726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.918321][ T41] audit: type=1400 audit(1786105673.568:165): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.921955][ T5726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.929316][ T41] audit: type=1400 audit(1786105673.588:166): avc: denied { module_request } for pid=5720 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.933539][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.939569][ T41] audit: type=1400 audit(1786105673.608:167): avc: denied { sys_module } for pid=5720 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.946268][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.537658][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.540646][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.543023][ T5723] bridge_slave_0: entered allmulticast mode [ 47.548095][ T5723] bridge_slave_0: entered promiscuous mode [ 47.580355][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.583499][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.586522][ T5723] bridge_slave_1: entered allmulticast mode [ 47.590387][ T5723] bridge_slave_1: entered promiscuous mode [ 47.714204][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.729774][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.731943][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.736439][ T5720] bridge_slave_0: entered allmulticast mode [ 47.739956][ T5720] bridge_slave_0: entered promiscuous mode [ 47.744638][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.770215][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.773318][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.776355][ T5720] bridge_slave_1: entered allmulticast mode [ 47.780037][ T5720] bridge_slave_1: entered promiscuous mode [ 47.794967][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.797986][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.800789][ T5727] bridge_slave_0: entered allmulticast mode [ 47.804764][ T5727] bridge_slave_0: entered promiscuous mode [ 47.809519][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.812392][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.817145][ T5727] bridge_slave_1: entered allmulticast mode [ 47.820531][ T5727] bridge_slave_1: entered promiscuous mode [ 47.867859][ T5723] team0: Port device team_slave_0 added [ 47.872058][ T5723] team0: Port device team_slave_1 added [ 47.884454][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.896046][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.917657][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.929530][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.933090][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.935696][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.944981][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.950861][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.953134][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.961367][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.998893][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.001743][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.004456][ T5731] bridge_slave_0: entered allmulticast mode [ 48.007162][ T5731] bridge_slave_0: entered promiscuous mode [ 48.017695][ T5727] team0: Port device team_slave_0 added [ 48.020824][ T5727] team0: Port device team_slave_1 added [ 48.022801][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.025408][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.027760][ T5731] bridge_slave_1: entered allmulticast mode [ 48.030485][ T5731] bridge_slave_1: entered promiscuous mode [ 48.043329][ T5720] team0: Port device team_slave_0 added [ 48.046613][ T5720] team0: Port device team_slave_1 added [ 48.068511][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.084522][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.086784][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.094788][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.107166][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.116390][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.118705][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.127194][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.131425][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.134294][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.144534][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.160979][ T5723] hsr_slave_0: entered promiscuous mode [ 48.164661][ T5723] hsr_slave_1: entered promiscuous mode [ 48.173503][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.176128][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.183637][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.196812][ T5731] team0: Port device team_slave_0 added [ 48.200886][ T5731] team0: Port device team_slave_1 added [ 48.285757][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.288065][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.297583][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.308243][ T5727] hsr_slave_0: entered promiscuous mode [ 48.311339][ T5727] hsr_slave_1: entered promiscuous mode [ 48.315525][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 48.318361][ T5727] Cannot create hsr debugfs directory [ 48.333912][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.336227][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.345351][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.370293][ T5720] hsr_slave_0: entered promiscuous mode [ 48.372530][ T5720] hsr_slave_1: entered promiscuous mode [ 48.374969][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 48.376671][ T5720] Cannot create hsr debugfs directory [ 48.449895][ T5731] hsr_slave_0: entered promiscuous mode [ 48.452786][ T5731] hsr_slave_1: entered promiscuous mode [ 48.455604][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.457796][ T5731] Cannot create hsr debugfs directory [ 48.706215][ T5723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.714514][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.717378][ T5723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.722069][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.725693][ T5723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.730186][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.732964][ T5723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.738854][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.787197][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.792277][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.795517][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.800236][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.803340][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.807739][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.812696][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.818696][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.865441][ T5720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.870260][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.877793][ T5720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.882231][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.884952][ T5720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.888779][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.891280][ T5720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.895587][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.944174][ T5724] Bluetooth: hci1: command tx timeout [ 48.945154][ T64] Bluetooth: hci0: command tx timeout [ 48.960753][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.969394][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.972137][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.976788][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.980468][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.985582][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.989405][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.994344][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.023239][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.033336][ T64] Bluetooth: hci3: command tx timeout [ 49.033721][ T5724] Bluetooth: hci2: command tx timeout [ 49.047632][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.056006][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.058713][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.078551][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.084460][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.086736][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.113285][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.117011][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.133526][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.135720][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.147898][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.150202][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.154571][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.170517][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.172931][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.179866][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.182169][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.188331][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.224488][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.240214][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.243117][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.257112][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.259382][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.418121][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.457408][ T5723] veth0_vlan: entered promiscuous mode [ 49.464434][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.469538][ T5723] veth1_vlan: entered promiscuous mode [ 49.497435][ T5723] veth0_macvtap: entered promiscuous mode [ 49.507070][ T5727] veth0_vlan: entered promiscuous mode [ 49.511442][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.517525][ T5723] veth1_macvtap: entered promiscuous mode [ 49.531027][ T5727] veth1_vlan: entered promiscuous mode [ 49.539801][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.551934][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.579479][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.583807][ T5799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.592058][ T5727] veth0_macvtap: entered promiscuous mode [ 49.597970][ T5720] veth0_vlan: entered promiscuous mode [ 49.610798][ T5727] veth1_macvtap: entered promiscuous mode [ 49.629157][ T5720] veth1_vlan: entered promiscuous mode [ 49.648955][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.664870][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.689038][ T5731] veth0_vlan: entered promiscuous mode [ 49.700337][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.703839][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.720090][ T5731] veth1_vlan: entered promiscuous mode [ 49.724260][ T5720] veth0_macvtap: entered promiscuous mode [ 49.737895][ T5720] veth1_macvtap: entered promiscuous mode [ 49.737985][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.742804][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.791275][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.794606][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.801754][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.808570][ T5723] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.811053][ T5731] veth0_macvtap: entered promiscuous mode [ 49.823283][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.826588][ T5731] veth1_macvtap: entered promiscuous mode [ 49.832591][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.839061][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.842085][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.853354][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.866097][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.876611][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.889216][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.894477][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.931510][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.937891][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.990020][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.996244][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.011723][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.015803][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.023868][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.054020][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.057582][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.060816][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.074899][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.078394][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.093730][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.102597][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.108355][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.111996][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.117779][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.121215][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.125589][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.129368][ T5884] loop3: detected capacity change from 0 to 7 [ 50.136222][ T5884] loop3: p1 p4 [ 50.137840][ T5884] loop3: partition table partially beyond EOD, truncated [ 50.144617][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.149643][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.187057][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.189940][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.193151][ T5729] udevd[5729]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 50.194037][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.196984][ T5735] udevd[5735]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 50.209843][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.358128][ T5905] FAULT_INJECTION: forcing a failure. [ 50.358128][ T5905] name failslab, interval 1, probability 0, space 0, times 1 [ 50.364303][ T5905] CPU: 2 UID: 0 PID: 5905 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 50.364329][ T5905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.364347][ T5905] Call Trace: [ 50.364374][ T5905] [ 50.364382][ T5905] dump_stack_lvl+0x100/0x190 [ 50.364415][ T5905] should_fail_ex.cold+0x5/0xa [ 50.364439][ T5905] should_failslab+0xc2/0x120 [ 50.364466][ T5905] __kmalloc_noprof+0xfc/0x820 [ 50.364488][ T5905] ? drm_syncobj_array_find+0x34/0x3a0 [ 50.364516][ T5905] drm_syncobj_array_find+0x34/0x3a0 [ 50.364541][ T5905] drm_syncobj_reset_ioctl+0x20b/0x370 [ 50.364565][ T5905] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 50.364586][ T5905] ? drm_dev_exit+0x41/0x60 [ 50.364606][ T5905] ? drm_dev_exit+0x41/0x60 [ 50.364631][ T5905] drm_ioctl_kernel+0x1f3/0x3e0 [ 50.364652][ T5905] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 50.364674][ T5905] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 50.364700][ T5905] drm_ioctl+0x5e6/0xc60 [ 50.364723][ T5905] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 50.364753][ T5905] ? __pfx_drm_ioctl+0x10/0x10 [ 50.364779][ T5905] ? selinux_file_ioctl+0x13b/0x290 [ 50.364808][ T5905] ? selinux_file_ioctl+0xb6/0x290 [ 50.364835][ T5905] ? __pfx_drm_ioctl+0x10/0x10 [ 50.364855][ T5905] __x64_sys_ioctl+0x18e/0x210 [ 50.364885][ T5905] do_syscall_64+0x115/0x870 [ 50.364908][ T5905] ? clear_bhb_loop+0x70/0xc0 [ 50.364931][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.364949][ T5905] RIP: 0033:0x7f0a8959e0d9 [ 50.364966][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.364992][ T5905] RSP: 002b:00007f0a8a40b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.365020][ T5905] RAX: ffffffffffffffda RBX: 00007f0a89825fa0 RCX: 00007f0a8959e0d9 [ 50.365032][ T5905] RDX: 0000200000000180 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 50.365043][ T5905] RBP: 00007f0a8a40b090 R08: 0000000000000000 R09: 0000000000000000 [ 50.365052][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.365063][ T5905] R13: 00007f0a89826038 R14: 00007f0a89825fa0 R15: 00007ffec8867658 [ 50.365086][ T5905] [ 50.973611][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 50.977479][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 51.023984][ T5724] Bluetooth: hci0: command tx timeout [ 51.033503][ T5724] Bluetooth: hci1: command tx timeout [ 51.048067][ T5925] warning: `syz.1.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.062485][ T5927] ipt_ECN: cannot use operation on non-tcp rule [ 51.090850][ T5925] XFS (mtdblock0): Invalid superblock magic number [ 51.103317][ T5724] Bluetooth: hci2: command tx timeout [ 51.105036][ T64] Bluetooth: hci3: command tx timeout [ 51.121286][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21'. [ 51.124931][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21'. [ 51.131343][ T5934] gretap0: entered promiscuous mode [ 51.141028][ T5934] gretap0: left promiscuous mode [ 51.307353][ T5950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.28'. [ 51.338943][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 51.411104][ T5961] ======================================================= [ 51.411104][ T5961] WARNING: The mand mount option has been deprecated and [ 51.411104][ T5961] and is ignored by this kernel. Remove the mand [ 51.411104][ T5961] option from the mount to silence this warning. [ 51.411104][ T5961] ======================================================= [ 51.807653][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 51.810495][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 51.817471][ T5984] gretap0: entered promiscuous mode [ 51.820093][ T5984] gretap0: left promiscuous mode [ 51.931379][ T41] kauditd_printk_skb: 91 callbacks suppressed [ 51.931393][ T41] audit: type=1400 audit(1786105678.598:259): avc: denied { bind } for pid=5985 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.939225][ T41] audit: type=1400 audit(1786105678.598:260): avc: denied { create } for pid=5985 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.945534][ T41] audit: type=1400 audit(1786105678.598:261): avc: denied { write } for pid=5985 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.954143][ T41] audit: type=1400 audit(1786105678.628:262): avc: denied { mmap_zero } for pid=5985 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 51.969668][ T41] audit: type=1400 audit(1786105678.638:263): avc: denied { write } for pid=5985 comm="syz.3.37" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.977126][ T41] audit: type=1400 audit(1786105678.638:264): avc: denied { write } for pid=5985 comm="syz.3.37" path="socket:[8830]" dev="sockfs" ino=8830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.985765][ T41] audit: type=1400 audit(1786105678.638:265): avc: denied { create } for pid=5985 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.991813][ T41] audit: type=1400 audit(1786105678.638:266): avc: denied { getopt } for pid=5985 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.148419][ T5996] Zero length message leads to an empty skb [ 52.184754][ T41] audit: type=1400 audit(1786105678.858:267): avc: denied { read write } for pid=5997 comm="syz.3.41" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.195298][ T41] audit: type=1400 audit(1786105678.858:268): avc: denied { open } for pid=5997 comm="syz.3.41" path="/dev/uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.223678][ T6002] FAULT_INJECTION: forcing a failure. [ 52.223678][ T6002] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.227701][ T6002] CPU: 1 UID: 0 PID: 6002 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT(full) [ 52.227715][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.227722][ T6002] Call Trace: [ 52.227736][ T6002] [ 52.227741][ T6002] dump_stack_lvl+0x100/0x190 [ 52.227799][ T6002] should_fail_ex.cold+0x5/0xa [ 52.227821][ T6002] _copy_to_user+0x32/0xd0 [ 52.227844][ T6002] drm_ioctl+0x608/0xc60 [ 52.227869][ T6002] ? __pfx_drm_syncobj_reset_ioctl+0x10/0x10 [ 52.227883][ T6002] ? __pfx_drm_ioctl+0x10/0x10 [ 52.227899][ T6002] ? selinux_file_ioctl+0x13b/0x290 [ 52.227921][ T6002] ? selinux_file_ioctl+0xb6/0x290 [ 52.227938][ T6002] ? __pfx_drm_ioctl+0x10/0x10 [ 52.227950][ T6002] __x64_sys_ioctl+0x18e/0x210 [ 52.227973][ T6002] do_syscall_64+0x115/0x870 [ 52.228003][ T6002] ? clear_bhb_loop+0x70/0xc0 [ 52.228017][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.228028][ T6002] RIP: 0033:0x7fdea539e0d9 [ 52.228040][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.228051][ T6002] RSP: 002b:00007fdea6257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.228068][ T6002] RAX: ffffffffffffffda RBX: 00007fdea5625fa0 RCX: 00007fdea539e0d9 [ 52.228075][ T6002] RDX: 0000200000000180 RSI: 00000000c01064c4 RDI: 0000000000000003 [ 52.228082][ T6002] RBP: 00007fdea6257090 R08: 0000000000000000 R09: 0000000000000000 [ 52.228088][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.228094][ T6002] R13: 00007fdea5626038 R14: 00007fdea5625fa0 R15: 00007ffdd208d9d8 [ 52.228108][ T6002] [ 52.443513][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.515776][ T6023] bond1: option xmit_hash_policy: invalid value (6) [ 52.520291][ T6023] bond1 (unregistering): Released all slaves [ 52.564043][ T6028] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 52.566393][ T6028] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 52.571691][ T6028] vhci_hcd vhci_hcd.0: Device attached [ 52.575769][ T6030] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 52.577129][ T6028] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 52.581206][ T12] vhci_hcd vhci_hcd.0: stop threads [ 52.583644][ T12] vhci_hcd vhci_hcd.0: release socket [ 52.585399][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 52.594135][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 52.600270][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.617911][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 52.622491][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.626600][ T9] usb 8-1: Product: syz [ 52.628475][ T9] usb 8-1: Manufacturer: syz [ 52.630194][ T9] usb 8-1: SerialNumber: syz [ 52.634616][ T9] usb 8-1: config 0 descriptor?? [ 53.067369][ T6039] bridge1: entered promiscuous mode [ 53.068869][ T6039] bridge1: entered allmulticast mode [ 53.113711][ T64] Bluetooth: hci0: command tx timeout [ 53.183945][ T64] Bluetooth: hci3: command tx timeout [ 53.184134][ T5724] Bluetooth: hci2: command tx timeout [ 53.725902][ T6077] devpts: Bad value for 'max' [ 54.066018][ T6093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.149375][ T6093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.234288][ T6093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.317347][ T6093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.439781][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.443505][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.446502][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.449126][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.543440][ T5724] Bluetooth: hci1: command tx timeout [ 54.773252][ T50] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.913317][ T50] usb 6-1: device descriptor read/64, error -71 [ 55.163269][ T50] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.183315][ T5724] Bluetooth: hci0: command tx timeout [ 55.273853][ T64] Bluetooth: hci3: command tx timeout [ 55.275269][ T5724] Bluetooth: hci2: command tx timeout [ 55.303616][ T50] usb 6-1: device descriptor read/64, error -71 [ 55.425284][ T50] usb usb6-port1: attempt power cycle [ 55.784725][ T50] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.813949][ T50] usb 6-1: device descriptor read/8, error -71 [ 56.000416][ T5875] usb 8-1: USB disconnect, device number 2 [ 56.064233][ T50] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.093688][ T50] usb 6-1: device descriptor read/8, error -71 [ 56.203959][ T50] usb usb6-port1: unable to enumerate USB device [ 57.035755][ T6095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.101871][ T6139] __nla_validate_parse: 8 callbacks suppressed [ 57.101886][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 57.107700][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 57.113889][ T6139] gretap0: entered promiscuous mode [ 57.117730][ T6139] gretap0: left promiscuous mode [ 57.188065][ T6142] netlink: 444 bytes leftover after parsing attributes in process `syz.3.88'. [ 57.239365][ T6145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.91'. [ 57.714583][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 57.717730][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 57.755414][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 57.758368][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 57.959800][ T6176] syz.3.101 uses obsolete (PF_INET,SOCK_PACKET) [ 58.037147][ T41] kauditd_printk_skb: 52 callbacks suppressed [ 58.037166][ T41] audit: type=1400 audit(1786105684.708:321): avc: denied { create } for pid=6175 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.047440][ T41] audit: type=1400 audit(1786105684.718:322): avc: denied { ioctl } for pid=6175 comm="syz.3.101" path="socket:[10923]" dev="sockfs" ino=10923 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.055728][ T41] audit: type=1400 audit(1786105684.718:323): avc: denied { connect } for pid=6175 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.070739][ T6180] ip6erspan0: entered promiscuous mode [ 58.145737][ T6176] block device autoloading is deprecated and will be removed. [ 58.194584][ T41] audit: type=1400 audit(1786105684.858:324): avc: denied { kexec_image_load } for pid=6185 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 58.399150][ T41] audit: type=1400 audit(1786105685.068:325): avc: denied { ioctl } for pid=6199 comm="syz.0.107" path="socket:[12532]" dev="sockfs" ino=12532 ioctlcmd=0xae67 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.399275][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.107'. [ 58.453600][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 58.466797][ T6204] gretap0: entered promiscuous mode [ 58.472242][ T6204] gretap0: left promiscuous mode [ 58.489397][ T6208] FAULT_INJECTION: forcing a failure. [ 58.489397][ T6208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.494789][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 58.494805][ T6208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.494811][ T6208] Call Trace: [ 58.494823][ T6208] [ 58.494828][ T6208] dump_stack_lvl+0x100/0x190 [ 58.494880][ T6208] should_fail_ex.cold+0x5/0xa [ 58.494901][ T6208] _copy_to_user+0x32/0xd0 [ 58.494924][ T6208] drm_syncobj_query_ioctl+0x49f/0xa90 [ 58.494955][ T6208] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 58.494969][ T6208] ? find_held_lock+0x2b/0x80 [ 58.494987][ T6208] ? drm_dev_exit+0x41/0x60 [ 58.495000][ T6208] ? drm_dev_exit+0x41/0x60 [ 58.495014][ T6208] drm_ioctl_kernel+0x1f3/0x3e0 [ 58.495027][ T6208] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 58.495042][ T6208] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 58.495058][ T6208] drm_ioctl+0x5e6/0xc60 [ 58.495072][ T6208] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 58.495087][ T6208] ? __pfx_drm_ioctl+0x10/0x10 [ 58.495104][ T6208] ? selinux_file_ioctl+0x13b/0x290 [ 58.495127][ T6208] ? selinux_file_ioctl+0xb6/0x290 [ 58.495145][ T6208] ? __pfx_drm_ioctl+0x10/0x10 [ 58.495158][ T6208] __x64_sys_ioctl+0x18e/0x210 [ 58.495181][ T6208] do_syscall_64+0x115/0x870 [ 58.495211][ T6208] ? clear_bhb_loop+0x70/0xc0 [ 58.495224][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.495235][ T6208] RIP: 0033:0x7f0a8959e0d9 [ 58.495244][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.495254][ T6208] RSP: 002b:00007f0a8a40b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.495273][ T6208] RAX: ffffffffffffffda RBX: 00007f0a89825fa0 RCX: 00007f0a8959e0d9 [ 58.495279][ T6208] RDX: 0000200000000340 RSI: 00000000c01864cb RDI: 0000000000000003 [ 58.495285][ T6208] RBP: 00007f0a8a40b090 R08: 0000000000000000 R09: 0000000000000000 [ 58.495291][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.495297][ T6208] R13: 00007f0a89826038 R14: 00007f0a89825fa0 R15: 00007ffec8867658 [ 58.495324][ T6208] [ 58.723360][ T5875] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 58.769515][ T41] audit: type=1400 audit(1786105685.438:326): avc: denied { read } for pid=6222 comm="syz.2.117" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.776355][ T41] audit: type=1400 audit(1786105685.438:327): avc: denied { open } for pid=6222 comm="syz.2.117" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.783257][ T41] audit: type=1400 audit(1786105685.448:328): avc: denied { ioctl } for pid=6222 comm="syz.2.117" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.810543][ T41] audit: type=1400 audit(1786105685.478:329): avc: denied { getopt } for pid=6224 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.884611][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.887884][ T5875] usb 5-1: config 0 has no interfaces? [ 58.889569][ T5875] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.892419][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.897767][ T5875] usb 5-1: config 0 descriptor?? [ 58.933301][ T57] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.093423][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 59.096528][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 59.102540][ T57] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 59.107006][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.107022][ T5724] Bluetooth: hci0: adv larger than maximum supported [ 59.108396][ T5875] usb 5-1: USB disconnect, device number 2 [ 59.110418][ T57] usb 8-1: Product: syz [ 59.110436][ T57] usb 8-1: Manufacturer: syz [ 59.110449][ T57] usb 8-1: SerialNumber: syz [ 59.121147][ T57] usb 8-1: config 0 descriptor?? [ 59.121892][ T5724] Bluetooth: hci0: Malformed LE Event: 0x0d [ 59.128798][ T57] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 59.132579][ T57] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 59.516041][ T41] audit: type=1804 audit(1786105686.188:330): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.124" name="/newroot/36/file0" dev="tmpfs" ino=217 res=1 errno=0 [ 59.659440][ T6252] gretap0: entered promiscuous mode [ 59.664780][ T6252] gretap0: left promiscuous mode [ 59.699811][ T6255] nvme nvme0: failed to connect socket: -111 [ 59.731179][ T57] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 59.973468][ T9] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 60.123407][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 60.143943][ T57] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 60.147201][ T57] em28xx 8-1:0.0: board has no eeprom [ 60.203376][ T57] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 60.206775][ T57] em28xx 8-1:0.0: dvb set to bulk mode. [ 60.214588][ T29] em28xx 8-1:0.0: Binding DVB extension [ 60.224239][ T57] usb 8-1: USB disconnect, device number 3 [ 60.239600][ T57] em28xx 8-1:0.0: Disconnecting em28xx [ 60.247391][ T29] em28xx 8-1:0.0: Registering input extension [ 60.251151][ T57] em28xx 8-1:0.0: Closing input extension [ 60.270152][ T57] em28xx 8-1:0.0: Freeing device [ 60.273806][ T9] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 60.433354][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 60.438539][ T9] usb usb5-port1: attempt power cycle [ 60.661797][ T6275] cgroup2: Unknown parameter 'euid' [ 60.774955][ T9] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 60.795049][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 60.922703][ T6287] FAULT_INJECTION: forcing a failure. [ 60.922703][ T6287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.929273][ T9] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 60.932794][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.1.141 Not tainted syzkaller #0 PREEMPT(full) [ 60.932810][ T6287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.932816][ T6287] Call Trace: [ 60.932821][ T6287] [ 60.932826][ T6287] dump_stack_lvl+0x100/0x190 [ 60.932847][ T6287] should_fail_ex.cold+0x5/0xa [ 60.932863][ T6287] _copy_to_user+0x32/0xd0 [ 60.932880][ T6287] simple_read_from_buffer+0xcb/0x170 [ 60.932894][ T6287] proc_fail_nth_read+0x1af/0x230 [ 60.932925][ T6287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.932943][ T6287] ? rw_verify_area+0xce/0x6d0 [ 60.932959][ T6287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.932976][ T6287] vfs_read+0x1e4/0xb40 [ 60.932994][ T6287] ? __pfx_vfs_read+0x10/0x10 [ 60.933010][ T6287] ? __fget_files+0x215/0x3d0 [ 60.933026][ T6287] ? __fget_files+0x21f/0x3d0 [ 60.933047][ T6287] ksys_read+0x12a/0x250 [ 60.933061][ T6287] ? __pfx_ksys_read+0x10/0x10 [ 60.933091][ T6287] do_syscall_64+0x115/0x870 [ 60.933115][ T6287] ? clear_bhb_loop+0x70/0xc0 [ 60.933138][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.933157][ T6287] RIP: 0033:0x7fdea535e90e [ 60.933189][ T6287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.933206][ T6287] RSP: 002b:00007fdea6256fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.933223][ T6287] RAX: ffffffffffffffda RBX: 00007fdea62576c0 RCX: 00007fdea535e90e [ 60.933239][ T6287] RDX: 000000000000000f RSI: 00007fdea62570a0 RDI: 0000000000000004 [ 60.933251][ T6287] RBP: 00007fdea6257090 R08: 0000000000000000 R09: 0000000000000000 [ 60.933260][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.933269][ T6287] R13: 00007fdea5626038 R14: 00007fdea5625fa0 R15: 00007ffdd208d9d8 [ 60.933292][ T6287] [ 60.933372][ T57] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 60.955454][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 61.007875][ T9] usb usb5-port1: unable to enumerate USB device [ 61.094865][ T57] usb 8-1: device descriptor read/64, error -71 [ 61.303313][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.333358][ T57] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 61.453333][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 61.456622][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 61.462416][ T29] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 61.465707][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.468439][ T57] usb 8-1: device descriptor read/64, error -71 [ 61.470705][ T29] usb 7-1: Product: syz [ 61.472324][ T29] usb 7-1: Manufacturer: syz [ 61.473937][ T29] usb 7-1: SerialNumber: syz [ 61.479160][ T29] usb 7-1: config 0 descriptor?? [ 61.483315][ T29] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 61.486325][ T29] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 61.573906][ T57] usb usb8-port1: attempt power cycle [ 61.902233][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.905445][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.909711][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.912839][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.913348][ T57] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 61.933724][ T57] usb 8-1: device descriptor read/8, error -71 [ 62.080157][ T6305] FAULT_INJECTION: forcing a failure. [ 62.080157][ T6305] name failslab, interval 1, probability 0, space 0, times 0 [ 62.084263][ T6305] CPU: 1 UID: 0 PID: 6305 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(full) [ 62.084278][ T6305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.084284][ T6305] Call Trace: [ 62.084289][ T6305] [ 62.084294][ T6305] dump_stack_lvl+0x100/0x190 [ 62.084314][ T6305] should_fail_ex.cold+0x5/0xa [ 62.084330][ T6305] should_failslab+0xc2/0x120 [ 62.084358][ T6305] __kmalloc_noprof+0xfc/0x820 [ 62.084374][ T6305] ? argv_split+0x173/0x420 [ 62.084392][ T6305] argv_split+0x173/0x420 [ 62.084406][ T6305] ? __pfx___trace_uprobe_create+0x10/0x10 [ 62.084423][ T6305] trace_probe_create+0x7d/0x100 [ 62.084440][ T6305] ? __pfx_trace_probe_create+0x10/0x10 [ 62.084456][ T6305] dyn_event_create+0x46/0x70 [ 62.084473][ T6305] create_or_delete_trace_uprobe+0x5a/0xb0 [ 62.084488][ T6305] trace_parse_run_command+0x1ab/0x3b0 [ 62.084502][ T6305] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 62.084518][ T6305] vfs_write+0x2aa/0x1050 [ 62.084537][ T6305] ? __pfx_probes_write+0x10/0x10 [ 62.084555][ T6305] ? __pfx_vfs_write+0x10/0x10 [ 62.084571][ T6305] ? __fget_files+0x215/0x3d0 [ 62.084586][ T6305] ? __fget_files+0x21f/0x3d0 [ 62.084600][ T6305] ksys_write+0x12a/0x250 [ 62.084610][ T6305] ? __pfx_ksys_write+0x10/0x10 [ 62.084623][ T6305] do_syscall_64+0x115/0x870 [ 62.084637][ T6305] ? clear_bhb_loop+0x70/0xc0 [ 62.084651][ T6305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.084662][ T6305] RIP: 0033:0x7fdea539e0d9 [ 62.084672][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.084682][ T6305] RSP: 002b:00007fdea6257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.084694][ T6305] RAX: ffffffffffffffda RBX: 00007fdea5625fa0 RCX: 00007fdea539e0d9 [ 62.084700][ T6305] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 62.084706][ T6305] RBP: 00007fdea6257090 R08: 0000000000000000 R09: 0000000000000000 [ 62.084712][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.084717][ T6305] R13: 00007fdea5626038 R14: 00007fdea5625fa0 R15: 00007ffdd208d9d8 [ 62.084731][ T6305] [ 62.088692][ T29] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 62.213459][ T57] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 62.236081][ T57] usb 8-1: device descriptor read/8, error -71 [ 62.243829][ T6309] FAULT_INJECTION: forcing a failure. [ 62.243829][ T6309] name failslab, interval 1, probability 0, space 0, times 0 [ 62.249234][ T6309] CPU: 2 UID: 0 PID: 6309 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(full) [ 62.249249][ T6309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.249255][ T6309] Call Trace: [ 62.249260][ T6309] [ 62.249265][ T6309] dump_stack_lvl+0x100/0x190 [ 62.249285][ T6309] should_fail_ex.cold+0x5/0xa [ 62.249301][ T6309] should_failslab+0xc2/0x120 [ 62.249317][ T6309] __kmalloc_noprof+0xfc/0x820 [ 62.249331][ T6309] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 62.249349][ T6309] kernfs_fop_write_iter+0x26a/0x5f0 [ 62.249366][ T6309] vfs_write+0x6ac/0x1050 [ 62.249384][ T6309] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 62.249422][ T6309] ? __pfx_vfs_write+0x10/0x10 [ 62.249447][ T6309] ksys_write+0x12a/0x250 [ 62.249456][ T6309] ? __pfx_ksys_write+0x10/0x10 [ 62.249469][ T6309] do_syscall_64+0x115/0x870 [ 62.249484][ T6309] ? clear_bhb_loop+0x70/0xc0 [ 62.249498][ T6309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.249508][ T6309] RIP: 0033:0x7fdea539e0d9 [ 62.249518][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.249528][ T6309] RSP: 002b:00007fdea6257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.249540][ T6309] RAX: ffffffffffffffda RBX: 00007fdea5625fa0 RCX: 00007fdea539e0d9 [ 62.249546][ T6309] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 62.249552][ T6309] RBP: 00007fdea6257090 R08: 0000000000000000 R09: 0000000000000000 [ 62.249558][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.249564][ T6309] R13: 00007fdea5626038 R14: 00007fdea5625fa0 R15: 00007ffdd208d9d8 [ 62.249577][ T6309] [ 62.343503][ T57] usb usb8-port1: unable to enumerate USB device [ 62.570964][ T29] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 62.573954][ T29] em28xx 7-1:0.0: board has no eeprom [ 62.633280][ T29] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 62.640297][ T29] em28xx 7-1:0.0: dvb set to bulk mode. [ 62.643058][ T57] em28xx 7-1:0.0: Binding DVB extension [ 62.649922][ T29] usb 7-1: USB disconnect, device number 2 [ 62.653973][ T29] em28xx 7-1:0.0: Disconnecting em28xx [ 62.677733][ T57] em28xx 7-1:0.0: Registering input extension [ 62.681154][ T29] em28xx 7-1:0.0: Closing input extension [ 62.703104][ T29] em28xx 7-1:0.0: Freeing device [ 62.822418][ T6332] __nla_validate_parse: 9 callbacks suppressed [ 62.822433][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.160'. [ 62.828024][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.160'. [ 62.833879][ T6332] gretap0: entered promiscuous mode [ 62.836677][ T6332] gretap0: left promiscuous mode [ 62.900648][ T6334] FAULT_INJECTION: forcing a failure. [ 62.900648][ T6334] name failslab, interval 1, probability 0, space 0, times 0 [ 62.904750][ T6334] CPU: 2 UID: 0 PID: 6334 Comm: syz.0.161 Not tainted syzkaller #0 PREEMPT(full) [ 62.904771][ T6334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.904778][ T6334] Call Trace: [ 62.904782][ T6334] [ 62.904787][ T6334] dump_stack_lvl+0x100/0x190 [ 62.904809][ T6334] should_fail_ex.cold+0x5/0xa [ 62.904824][ T6334] should_failslab+0xc2/0x120 [ 62.904839][ T6334] __kmalloc_noprof+0xfc/0x820 [ 62.904854][ T6334] ? argv_split+0x173/0x420 [ 62.904871][ T6334] argv_split+0x173/0x420 [ 62.904894][ T6334] ? __pfx___trace_uprobe_create+0x10/0x10 [ 62.904910][ T6334] trace_probe_create+0x7d/0x100 [ 62.904923][ T6334] ? __pfx_trace_probe_create+0x10/0x10 [ 62.904939][ T6334] dyn_event_create+0x46/0x70 [ 62.904956][ T6334] create_or_delete_trace_uprobe+0x5a/0xb0 [ 62.904970][ T6334] trace_parse_run_command+0x1ab/0x3b0 [ 62.904983][ T6334] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 62.904999][ T6334] vfs_write+0x2aa/0x1050 [ 62.905017][ T6334] ? __pfx_probes_write+0x10/0x10 [ 62.905031][ T6334] ? __pfx_vfs_write+0x10/0x10 [ 62.905047][ T6334] ? __fget_files+0x215/0x3d0 [ 62.905062][ T6334] ? __fget_files+0x21f/0x3d0 [ 62.905076][ T6334] ksys_write+0x12a/0x250 [ 62.905086][ T6334] ? __pfx_ksys_write+0x10/0x10 [ 62.905099][ T6334] do_syscall_64+0x115/0x870 [ 62.905113][ T6334] ? clear_bhb_loop+0x70/0xc0 [ 62.905126][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.905137][ T6334] RIP: 0033:0x7fef3e39e0d9 [ 62.905147][ T6334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.905157][ T6334] RSP: 002b:00007fef3f192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.905168][ T6334] RAX: ffffffffffffffda RBX: 00007fef3e625fa0 RCX: 00007fef3e39e0d9 [ 62.905174][ T6334] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 62.905180][ T6334] RBP: 00007fef3f192090 R08: 0000000000000000 R09: 0000000000000000 [ 62.905186][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.905192][ T6334] R13: 00007fef3e626038 R14: 00007fef3e625fa0 R15: 00007fffea1f0088 [ 62.905205][ T6334] [ 62.998512][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 63.001327][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 63.025062][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.027705][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.031033][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.035076][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.122435][ T6349] FAULT_INJECTION: forcing a failure. [ 63.122435][ T6349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.129736][ T6349] CPU: 3 UID: 0 PID: 6349 Comm: syz.2.168 Not tainted syzkaller #0 PREEMPT(full) [ 63.129754][ T6349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.129761][ T6349] Call Trace: [ 63.129766][ T6349] [ 63.129771][ T6349] dump_stack_lvl+0x100/0x190 [ 63.129793][ T6349] should_fail_ex.cold+0x5/0xa [ 63.129809][ T6349] _copy_from_iter+0x1f4/0x1690 [ 63.129829][ T6349] ? __pfx__copy_from_iter+0x10/0x10 [ 63.129843][ T6349] ? trace_kmalloc+0xeb/0x110 [ 63.129858][ T6349] ? __kasan_kmalloc+0xaa/0xb0 [ 63.129872][ T6349] ? __kmalloc_noprof+0x343/0x820 [ 63.129885][ T6349] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 63.129904][ T6349] kernfs_fop_write_iter+0x186/0x5f0 [ 63.129921][ T6349] vfs_write+0x6ac/0x1050 [ 63.129938][ T6349] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 63.129955][ T6349] ? __pfx_vfs_write+0x10/0x10 [ 63.129979][ T6349] ksys_write+0x12a/0x250 [ 63.129988][ T6349] ? __pfx_ksys_write+0x10/0x10 [ 63.130002][ T6349] do_syscall_64+0x115/0x870 [ 63.130017][ T6349] ? clear_bhb_loop+0x70/0xc0 [ 63.130031][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.130042][ T6349] RIP: 0033:0x7f0a8959e0d9 [ 63.130052][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.130062][ T6349] RSP: 002b:00007f0a8a40b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.130074][ T6349] RAX: ffffffffffffffda RBX: 00007f0a89825fa0 RCX: 00007f0a8959e0d9 [ 63.130080][ T6349] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 63.130086][ T6349] RBP: 00007f0a8a40b090 R08: 0000000000000000 R09: 0000000000000000 [ 63.130092][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.130098][ T6349] R13: 00007f0a89826038 R14: 00007f0a89825fa0 R15: 00007ffec8867658 [ 63.130111][ T6349] [ 63.292605][ T41] kauditd_printk_skb: 14 callbacks suppressed [ 63.292619][ T41] audit: type=1400 audit(1786105689.958:345): avc: denied { read } for pid=6357 comm="syz.2.172" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.332783][ T41] audit: type=1400 audit(1786105689.998:346): avc: denied { shutdown } for pid=6359 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.749523][ T41] audit: type=1400 audit(1786105690.418:347): avc: denied { name_bind } for pid=6375 comm="syz.1.178" src=18460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 63.756083][ T41] audit: type=1400 audit(1786105690.418:348): avc: denied { accept } for pid=6375 comm="syz.1.178" laddr=172.20.20.187 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.758313][ T6376] netlink: 'syz.1.178': attribute type 6 has an invalid length. [ 63.765957][ T41] audit: type=1400 audit(1786105690.418:349): avc: denied { create } for pid=6375 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.772990][ T41] audit: type=1400 audit(1786105690.418:350): avc: denied { getopt } for pid=6375 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.779057][ T41] audit: type=1400 audit(1786105690.418:351): avc: denied { create } for pid=6375 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 63.784857][ T41] audit: type=1400 audit(1786105690.418:352): avc: denied { write } for pid=6375 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 63.835537][ T41] audit: type=1400 audit(1786105690.508:353): avc: denied { read } for pid=6375 comm="syz.1.178" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 63.842080][ T41] audit: type=1400 audit(1786105690.508:354): avc: denied { open } for pid=6375 comm="syz.1.178" path="/61/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 63.846752][ T6377] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.853325][ T6377] block device autoloading is deprecated and will be removed. [ 64.093334][ T55] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 64.243255][ T55] usb 8-1: Using ep0 maxpacket: 16 [ 64.246471][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 64.252157][ T55] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 64.255525][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.258067][ T55] usb 8-1: Product: syz [ 64.259388][ T55] usb 8-1: Manufacturer: syz [ 64.260889][ T55] usb 8-1: SerialNumber: syz [ 64.266955][ T55] usb 8-1: config 0 descriptor?? [ 64.270647][ T55] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 64.273788][ T55] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 64.278108][ T6393] tmpfs: Bad value for 'mpol' [ 64.553350][ T34] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 64.705375][ T34] usb 5-1: device descriptor read/64, error -71 [ 64.731082][ T6431] FAULT_INJECTION: forcing a failure. [ 64.731082][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 64.736168][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: syz.1.196 Not tainted syzkaller #0 PREEMPT(full) [ 64.736182][ T6431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.736189][ T6431] Call Trace: [ 64.736193][ T6431] [ 64.736198][ T6431] dump_stack_lvl+0x100/0x190 [ 64.736219][ T6431] should_fail_ex.cold+0x5/0xa [ 64.736234][ T6431] should_failslab+0xc2/0x120 [ 64.736249][ T6431] __kmalloc_cache_noprof+0x91/0x6c0 [ 64.736261][ T6431] ? __trace_uprobe_create+0x5c4/0x22f0 [ 64.736279][ T6431] __trace_uprobe_create+0x5c4/0x22f0 [ 64.736298][ T6431] ? __pfx___trace_uprobe_create+0x10/0x10 [ 64.736313][ T6431] ? __kmalloc_noprof+0x343/0x820 [ 64.736326][ T6431] ? argv_split+0x173/0x420 [ 64.736344][ T6431] ? argv_split+0x359/0x420 [ 64.736357][ T6431] ? __pfx___trace_uprobe_create+0x10/0x10 [ 64.736372][ T6431] trace_probe_create+0xef/0x100 [ 64.736384][ T6431] ? __pfx_trace_probe_create+0x10/0x10 [ 64.736400][ T6431] dyn_event_create+0x46/0x70 [ 64.736417][ T6431] create_or_delete_trace_uprobe+0x5a/0xb0 [ 64.736431][ T6431] trace_parse_run_command+0x1ab/0x3b0 [ 64.736444][ T6431] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 64.736460][ T6431] vfs_write+0x2aa/0x1050 [ 64.736478][ T6431] ? __pfx_probes_write+0x10/0x10 [ 64.736492][ T6431] ? __pfx_vfs_write+0x10/0x10 [ 64.736508][ T6431] ? __fget_files+0x215/0x3d0 [ 64.736523][ T6431] ? __fget_files+0x21f/0x3d0 [ 64.736537][ T6431] ksys_write+0x12a/0x250 [ 64.736546][ T6431] ? __pfx_ksys_write+0x10/0x10 [ 64.736560][ T6431] do_syscall_64+0x115/0x870 [ 64.736573][ T6431] ? clear_bhb_loop+0x70/0xc0 [ 64.736587][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.736597][ T6431] RIP: 0033:0x7fdea539e0d9 [ 64.736607][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.736619][ T6431] RSP: 002b:00007fdea6257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.736631][ T6431] RAX: ffffffffffffffda RBX: 00007fdea5625fa0 RCX: 00007fdea539e0d9 [ 64.736637][ T6431] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 64.736643][ T6431] RBP: 00007fdea6257090 R08: 0000000000000000 R09: 0000000000000000 [ 64.736649][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.736654][ T6431] R13: 00007fdea5626038 R14: 00007fdea5625fa0 R15: 00007ffdd208d9d8 [ 64.736668][ T6431] [ 64.874927][ T55] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 64.953298][ T34] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 65.083403][ T34] usb 5-1: device descriptor read/64, error -71 [ 65.193690][ T34] usb usb5-port1: attempt power cycle [ 65.217619][ T6463] netlink: 72 bytes leftover after parsing attributes in process `syz.1.202'. [ 65.286276][ T55] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 65.289288][ T55] em28xx 8-1:0.0: board has no eeprom [ 65.343344][ T55] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 65.346740][ T55] em28xx 8-1:0.0: dvb set to bulk mode. [ 65.350989][ T5734] em28xx 8-1:0.0: Binding DVB extension [ 65.358010][ T55] usb 8-1: USB disconnect, device number 8 [ 65.361237][ T55] em28xx 8-1:0.0: Disconnecting em28xx [ 65.383085][ T5734] em28xx 8-1:0.0: Registering input extension [ 65.386170][ T55] em28xx 8-1:0.0: Closing input extension [ 65.386927][ T847] cfg80211: failed to load regulatory.db [ 65.393884][ T55] em28xx 8-1:0.0: Freeing device [ 65.418120][ T6475] netlink: 'syz.1.205': attribute type 4 has an invalid length. [ 65.432704][ T6475] netlink: 'syz.1.205': attribute type 4 has an invalid length. [ 65.543342][ T34] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 65.574080][ T34] usb 5-1: device descriptor read/8, error -71 [ 65.824133][ T34] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 65.837865][ T6481] FAULT_INJECTION: forcing a failure. [ 65.837865][ T6481] name failslab, interval 1, probability 0, space 0, times 0 [ 65.841858][ T6481] CPU: 2 UID: 0 PID: 6481 Comm: syz.3.207 Not tainted syzkaller #0 PREEMPT(full) [ 65.841873][ T6481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.841880][ T6481] Call Trace: [ 65.841885][ T6481] [ 65.841890][ T6481] dump_stack_lvl+0x100/0x190 [ 65.841911][ T6481] should_fail_ex.cold+0x5/0xa [ 65.841927][ T6481] should_failslab+0xc2/0x120 [ 65.841942][ T6481] __kmalloc_cache_noprof+0x91/0x6c0 [ 65.841954][ T6481] ? sctp_add_bind_addr+0xae/0x3e0 [ 65.841986][ T6481] sctp_add_bind_addr+0xae/0x3e0 [ 65.842002][ T6481] sctp_copy_local_addr_list+0x349/0x550 [ 65.842022][ T6481] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 65.842048][ T6481] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 65.842074][ T6481] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.842096][ T6481] sctp_bind_addr_copy+0xe0/0x530 [ 65.842131][ T6481] sctp_connect_new_asoc+0x1c9/0x770 [ 65.842153][ T6481] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 65.842172][ T6481] ? selinux_sctp_bind_connect+0xe0/0x230 [ 65.842192][ T6481] sctp_sendmsg+0x1743/0x22e0 [ 65.842206][ T6481] ? __pfx_sctp_sendmsg+0x10/0x10 [ 65.842217][ T6481] ? sock_has_perm+0x25a/0x2f0 [ 65.842230][ T6481] ? __pfx_sock_has_perm+0x10/0x10 [ 65.842252][ T6481] ? __pfx_sctp_sendmsg+0x10/0x10 [ 65.842265][ T6481] inet_sendmsg+0x11c/0x140 [ 65.842292][ T6481] ____sys_sendmsg+0x9c9/0xbe0 [ 65.842317][ T6481] ? __pfx_inet_sendmsg+0x10/0x10 [ 65.842333][ T6481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.842352][ T6481] ? __pfx__kstrtoull+0x10/0x10 [ 65.842365][ T6481] ___sys_sendmsg+0x190/0x1e0 [ 65.842376][ T6481] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.842393][ T6481] ? find_held_lock+0x2b/0x80 [ 65.842412][ T6481] __sys_sendmmsg+0x20c/0x440 [ 65.842428][ T6481] ? __pfx___sys_sendmmsg+0x10/0x10 [ 65.842441][ T6481] ? ksys_write+0x190/0x250 [ 65.842462][ T6481] ? fput+0x79/0x100 [ 65.842475][ T6481] ? ksys_write+0x1ac/0x250 [ 65.842484][ T6481] ? __pfx_ksys_write+0x10/0x10 [ 65.842496][ T6481] __x64_sys_sendmmsg+0x9c/0x100 [ 65.842510][ T6481] ? lockdep_hardirqs_on+0x78/0x100 [ 65.842525][ T6481] do_syscall_64+0x115/0x870 [ 65.842538][ T6481] ? clear_bhb_loop+0x70/0xc0 [ 65.842551][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.842563][ T6481] RIP: 0033:0x7fccb759e0d9 [ 65.842573][ T6481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.842583][ T6481] RSP: 002b:00007fccb852c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.842595][ T6481] RAX: ffffffffffffffda RBX: 00007fccb7825fa0 RCX: 00007fccb759e0d9 [ 65.842602][ T6481] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 65.842607][ T6481] RBP: 00007fccb852c090 R08: 0000000000000000 R09: 0000000000000000 [ 65.842613][ T6481] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 65.842619][ T6481] R13: 00007fccb7826038 R14: 00007fccb7825fa0 R15: 00007ffd0ee92dd8 [ 65.842632][ T6481] [ 65.854018][ T34] usb 5-1: device descriptor read/8, error -71 [ 66.055081][ T34] usb usb5-port1: unable to enumerate USB device [ 66.369307][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 66.372199][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 66.417492][ T6499] FAULT_INJECTION: forcing a failure. [ 66.417492][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 66.424454][ T6499] CPU: 2 UID: 0 PID: 6499 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 66.424478][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.424487][ T6499] Call Trace: [ 66.424495][ T6499] [ 66.424502][ T6499] dump_stack_lvl+0x100/0x190 [ 66.424532][ T6499] should_fail_ex.cold+0x5/0xa [ 66.424581][ T6499] should_failslab+0xc2/0x120 [ 66.424605][ T6499] __kmalloc_noprof+0xfc/0x820 [ 66.424624][ T6499] ? kasan_save_track+0x14/0x30 [ 66.424645][ T6499] ? alloc_trace_uprobe+0x86/0x370 [ 66.424672][ T6499] alloc_trace_uprobe+0x86/0x370 [ 66.424696][ T6499] __trace_uprobe_create+0x673/0x22f0 [ 66.424727][ T6499] ? __pfx___trace_uprobe_create+0x10/0x10 [ 66.424752][ T6499] ? __kmalloc_noprof+0x343/0x820 [ 66.424784][ T6499] ? argv_split+0x173/0x420 [ 66.424811][ T6499] ? argv_split+0x359/0x420 [ 66.424832][ T6499] ? __pfx___trace_uprobe_create+0x10/0x10 [ 66.424855][ T6499] trace_probe_create+0xef/0x100 [ 66.424875][ T6499] ? __pfx_trace_probe_create+0x10/0x10 [ 66.424901][ T6499] dyn_event_create+0x46/0x70 [ 66.424927][ T6499] create_or_delete_trace_uprobe+0x5a/0xb0 [ 66.424950][ T6499] trace_parse_run_command+0x1ab/0x3b0 [ 66.424970][ T6499] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 66.424995][ T6499] vfs_write+0x2aa/0x1050 [ 66.425023][ T6499] ? __pfx_probes_write+0x10/0x10 [ 66.425046][ T6499] ? __pfx_vfs_write+0x10/0x10 [ 66.425070][ T6499] ? __fget_files+0x215/0x3d0 [ 66.425095][ T6499] ? __fget_files+0x21f/0x3d0 [ 66.425124][ T6499] ksys_write+0x12a/0x250 [ 66.425140][ T6499] ? __pfx_ksys_write+0x10/0x10 [ 66.425163][ T6499] do_syscall_64+0x115/0x870 [ 66.425184][ T6499] ? clear_bhb_loop+0x70/0xc0 [ 66.425205][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.425222][ T6499] RIP: 0033:0x7f0a8959e0d9 [ 66.425238][ T6499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.425252][ T6499] RSP: 002b:00007f0a8a40b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.425271][ T6499] RAX: ffffffffffffffda RBX: 00007f0a89825fa0 RCX: 00007f0a8959e0d9 [ 66.425282][ T6499] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 66.425292][ T6499] RBP: 00007f0a8a40b090 R08: 0000000000000000 R09: 0000000000000000 [ 66.425301][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.425312][ T6499] R13: 00007f0a89826038 R14: 00007f0a89825fa0 R15: 00007ffec8867658 [ 66.425335][ T6499] [ 66.425964][ T6499] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN NOPTI [ 66.530659][ T6499] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 66.534385][ T6499] CPU: 2 UID: 0 PID: 6499 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 66.538269][ T6499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.542131][ T6499] RIP: 0010:path_put+0x22/0x70 [ 66.544150][ T6499] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 63 50 78 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 4f 97 04 00 48 89 da 48 b8 00 00 [ 66.551295][ T6499] RSP: 0018:ffffc90007db7a68 EFLAGS: 00010203 [ 66.553861][ T6499] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 66.557145][ T6499] RDX: 0000000000000008 RSI: ffffffff8292147d RDI: 0000000000000044 [ 66.560368][ T6499] RBP: ffffc90007db7bf8 R08: 0000000000000001 R09: 0000000000000000 [ 66.563654][ T6499] R10: ffffffff9b73bc40 R11: 0000000000000000 R12: ffff88803b6529c8 [ 66.566879][ T6499] R13: ffff888056f0c340 R14: ffff888059a2c900 R15: fffffffffffffff4 [ 66.570101][ T6499] FS: 00007f0a8a40b6c0(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000 [ 66.573636][ T6499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.576034][ T6499] CR2: 00007f0a8a40aff8 CR3: 000000005c1f0000 CR4: 0000000000352ef0 [ 66.579282][ T6499] Call Trace: [ 66.580685][ T6499] [ 66.581697][ T6499] __trace_uprobe_create+0x96d/0x22f0 [ 66.583709][ T6499] ? __pfx___trace_uprobe_create+0x10/0x10 [ 66.586146][ T6499] ? __kmalloc_noprof+0x343/0x820 [ 66.588147][ T6499] ? argv_split+0x173/0x420 [ 66.589930][ T6499] ? argv_split+0x359/0x420 [ 66.591837][ T6499] ? __pfx___trace_uprobe_create+0x10/0x10 [ 66.594310][ T6499] trace_probe_create+0xef/0x100 [ 66.596364][ T6499] ? __pfx_trace_probe_create+0x10/0x10 [ 66.598549][ T6499] dyn_event_create+0x46/0x70 [ 66.600351][ T6499] create_or_delete_trace_uprobe+0x5a/0xb0 [ 66.602369][ T6499] trace_parse_run_command+0x1ab/0x3b0 [ 66.604661][ T6499] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 66.607384][ T6499] vfs_write+0x2aa/0x1050 [ 66.609216][ T6499] ? __pfx_probes_write+0x10/0x10 [ 66.611301][ T6499] ? __pfx_vfs_write+0x10/0x10 [ 66.613304][ T6499] ? __fget_files+0x215/0x3d0 [ 66.615362][ T6499] ? __fget_files+0x21f/0x3d0 [ 66.617319][ T6499] ksys_write+0x12a/0x250 [ 66.619119][ T6499] ? __pfx_ksys_write+0x10/0x10 [ 66.621163][ T6499] do_syscall_64+0x115/0x870 [ 66.623135][ T6499] ? clear_bhb_loop+0x70/0xc0 [ 66.625164][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.627147][ T6499] RIP: 0033:0x7f0a8959e0d9 [ 66.628563][ T6499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.634675][ T6499] RSP: 002b:00007f0a8a40b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.637167][ T6499] RAX: ffffffffffffffda RBX: 00007f0a89825fa0 RCX: 00007f0a8959e0d9 [ 66.639553][ T6499] RDX: 000000000000000f RSI: 0000200000000180 RDI: 0000000000000004 [ 66.641963][ T6499] RBP: 00007f0a8a40b090 R08: 0000000000000000 R09: 0000000000000000 [ 66.644468][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.646922][ T6499] R13: 00007f0a89826038 R14: 00007f0a89825fa0 R15: 00007ffec8867658 [ 66.649365][ T6499] [ 66.650365][ T6499] Modules linked in: [ 66.652076][ T6499] ---[ end trace 0000000000000000 ]--- [ 66.660274][ T6499] RIP: 0010:path_put+0x22/0x70 [ 66.661889][ T6499] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 fb e8 63 50 78 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 29 48 8b 7b 08 e8 4f 97 04 00 48 89 da 48 b8 00 00 [ 66.668103][ T6499] RSP: 0018:ffffc90007db7a68 EFLAGS: 00010203 [ 66.670040][ T6499] RAX: dffffc0000000000 RBX: 000000000000003c RCX: 0000000000000000 [ 66.672551][ T6499] RDX: 0000000000000008 RSI: ffffffff8292147d RDI: 0000000000000044 [ 66.675523][ T6499] RBP: ffffc90007db7bf8 R08: 0000000000000001 R09: 0000000000000000 [ 66.678062][ T6499] R10: ffffffff9b73bc40 R11: 0000000000000000 R12: ffff88803b6529c8 [ 66.680529][ T6499] R13: ffff888056f0c340 R14: ffff888059a2c900 R15: fffffffffffffff4 [ 66.682994][ T6499] FS: 00007f0a8a40b6c0(0000) GS:ffff8880d5fec000(0000) knlGS:0000000000000000 [ 66.686350][ T6499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.688461][ T6499] CR2: 00007fdea6214ff8 CR3: 000000005c1f0000 CR4: 0000000000352ef0 [ 66.690992][ T6499] Kernel panic - not syncing: Fatal exception [ 66.693663][ T6499] Kernel Offset: disabled [ 66.695035][ T6499] Rebooting in 86400 seconds..