last executing test programs: 16.581433781s ago: executing program 3 (id=177): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4202c78) write$ppp(r1, &(0x7f0000000240)="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", 0x800) write$ppp(r1, &(0x7f0000000200)="000000ad00000008000000e4", 0xc) 16.452270724s ago: executing program 3 (id=183): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x2, 0x7fff}) r2 = syz_open_dev$evdev(&(0x7f00000012c0), 0x1, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000001300)=""/30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) mprotect(&(0x7f00006fe000/0x1000)=nil, 0x1000, 0x3) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) splice(r4, &(0x7f0000000040)=0x7, r1, &(0x7f00000000c0)=0x4, 0x9, 0x4) recvmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000100), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)=""/31, 0x1f}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x40010000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 16.321729997s ago: executing program 3 (id=187): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000500)=""/134, 0x86}], 0x3, 0x3, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0xffffffffffffffcc, {0x0, 0xfc7c1a2622447dbe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, r4, {0x1}}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) 15.362139317s ago: executing program 3 (id=202): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4202c78) write$ppp(r1, &(0x7f0000000240)="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", 0x100) write$ppp(r1, &(0x7f0000000200)="000000ad00000008000000e4", 0xc) 15.279780068s ago: executing program 3 (id=204): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = userfaultfd(0x801) mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil) syz_clone(0xc080000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 15.222170687s ago: executing program 3 (id=205): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") 4.262133041s ago: executing program 1 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x2000}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3, r1}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0xd, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x0, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "53d95f58611bbfe6b265e5374d23ae0f37b35dc0e63b977f4659f3aa99070fc55e5328e21cd193e54ae5e8d5e220025853fdceced8b838740aa5e5"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "df35af1059ad0ecd24182bc6fbc8af495fea7d5063be185bc41a2ee368ac11a7a27c6713cab8127b4e16adfade48ab1381e90ad9a6ef70886fd11bc615cce8b8416971ae65c13efe44fbce66c655520f21e4820911542c"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "33f0c95e519e8fea92d08dd71a24faddb28193e764340b7c60429621d710ce9bd51d1eafdf225803b314d8dc0af3b24ceb3193d3e66fe979651443357a9898b98a7af95c658e0c3cae5075b4fb6d045c4a51a29389e12e01920a8f06468fe081a1fe4b8c616037b1c32aa37eac23432a3bfcbd23d8a9c4cf0320af599bf4b09b6231a34377e9f7d4bc05d00f095ae4f83aa38f258c21809ea78cfe6639e2b54a93bb10fa724166757f475597615e670b51778c6ef55f46e7655232b0d57de1a8f6620a426a73c6a3682170cb51885bad94da6ec855375d7c804b300a36b954ac87e20f49c10bf839bdf66cfa90a023afb4103bd773796d1e97"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "d61bc47d808f6c9bfcb5b98cda0b8709ad280512e91e935941b59305b92bdd2c9ff9ec372b5ebec43054c1f8ef0878c065d6ac5f2b64e14672d6ae745f11bcdad352d4ed0abc9497e35c0d0ef99150617cc3ab8b69b20a7442642b4c6408d3b7f8a893f229d7c5fe6e4ecbbae1cfc696af2eb83e9cba61d1397cc2845f122c4efb5f1fdccc2647c6c95ac638e1d14c8a1cdcf82ad715a7a426dbd186742a7a2979b64a3b3eb76088ffb9497bc955830c38e248e18d216376fd1671bd69edfefd5fb9e45aaff6f8027250f69ebff91a3eff8f37e4e8215571c485d0989fb3de571e178aebf9"}, @NFTA_DATA_VALUE={0x0, 0x1, "55e3fba4887447268d08f9c7afdc07485e88638ecc78424b490d9d33632453b849013f9c4e64f5acbeb17158caec9a45a31fab995e23d223e3c56ab17bbe76c10f65fbc1fe03afc8880c487d6ea352adc4ab03e154cb5889f84b5cf7b42ce1bf27d97455f1546cea8d7784b5f1fd71694abc4a06055ceac807d5bb549efd24932cdf6e98d9fe888815942723515fce857c7d0c734443d371e379987885a9e34092877fc186e9f010ba3ffdc98a3eb3529af4e7a25b9377c1f0647ba4"}]}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @connlimit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x2000}, 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3, r1}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0xd, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x0, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "53d95f58611bbfe6b265e5374d23ae0f37b35dc0e63b977f4659f3aa99070fc55e5328e21cd193e54ae5e8d5e220025853fdceced8b838740aa5e5"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "df35af1059ad0ecd24182bc6fbc8af495fea7d5063be185bc41a2ee368ac11a7a27c6713cab8127b4e16adfade48ab1381e90ad9a6ef70886fd11bc615cce8b8416971ae65c13efe44fbce66c655520f21e4820911542c"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "33f0c95e519e8fea92d08dd71a24faddb28193e764340b7c60429621d710ce9bd51d1eafdf225803b314d8dc0af3b24ceb3193d3e66fe979651443357a9898b98a7af95c658e0c3cae5075b4fb6d045c4a51a29389e12e01920a8f06468fe081a1fe4b8c616037b1c32aa37eac23432a3bfcbd23d8a9c4cf0320af599bf4b09b6231a34377e9f7d4bc05d00f095ae4f83aa38f258c21809ea78cfe6639e2b54a93bb10fa724166757f475597615e670b51778c6ef55f46e7655232b0d57de1a8f6620a426a73c6a3682170cb51885bad94da6ec855375d7c804b300a36b954ac87e20f49c10bf839bdf66cfa90a023afb4103bd773796d1e97"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "d61bc47d808f6c9bfcb5b98cda0b8709ad280512e91e935941b59305b92bdd2c9ff9ec372b5ebec43054c1f8ef0878c065d6ac5f2b64e14672d6ae745f11bcdad352d4ed0abc9497e35c0d0ef99150617cc3ab8b69b20a7442642b4c6408d3b7f8a893f229d7c5fe6e4ecbbae1cfc696af2eb83e9cba61d1397cc2845f122c4efb5f1fdccc2647c6c95ac638e1d14c8a1cdcf82ad715a7a426dbd186742a7a2979b64a3b3eb76088ffb9497bc955830c38e248e18d216376fd1671bd69edfefd5fb9e45aaff6f8027250f69ebff91a3eff8f37e4e8215571c485d0989fb3de571e178aebf9"}, @NFTA_DATA_VALUE={0x0, 0x1, "55e3fba4887447268d08f9c7afdc07485e88638ecc78424b490d9d33632453b849013f9c4e64f5acbeb17158caec9a45a31fab995e23d223e3c56ab17bbe76c10f65fbc1fe03afc8880c487d6ea352adc4ab03e154cb5889f84b5cf7b42ce1bf27d97455f1546cea8d7784b5f1fd71694abc4a06055ceac807d5bb549efd24932cdf6e98d9fe888815942723515fce857c7d0c734443d371e379987885a9e34092877fc186e9f010ba3ffdc98a3eb3529af4e7a25b9377c1f0647ba4"}]}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @connlimit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) (async) 4.071666865s ago: executing program 1 (id=344): socket$kcm(0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) 4.069789801s ago: executing program 1 (id=345): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x80000) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000040)={0x1, 0x4, 0x7, 0x81, 0x2}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0xd0, 0x1f0, 0xd0, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@tos={{0x28}, {0x5, 0xff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x3a}, [0xff000000, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 3.621620851s ago: executing program 2 (id=349): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) read(r1, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x122, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x7}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400140, 0x7f) ftruncate(r2, 0x200000) pwrite64(r2, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r2, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r2, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r2, &(0x7f0000000100)="0002000b", 0x4, 0xc0f) pwrite64(r2, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r2, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r2, &(0x7f0000000100)="0002000b", 0x4, 0x1e800c) pwrite64(r2, &(0x7f0000000100)='1238-1234\b\x002323456789612', 0x18, 0x5) pwrite64(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0x1e8123) pwrite64(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0x1e812b) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 3.128597783s ago: executing program 1 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x10, 0x40, 0x1, 0x7, {{0x34, 0x4, 0x1, 0x1b, 0xd0, 0x67, 0x0, 0xd9, 0x2f, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x23, 0x8, [@private=0xa010101, @loopback, @private=0xa010102, @remote, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @rr={0x7, 0x2b, 0x2c, [@dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010101, @private=0xa010102, @local, @local, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @multicast2]}, @end, @rr={0x7, 0xb, 0x12, [@local, @rand_addr=0x64010102]}, @lsrr={0x83, 0x13, 0xd0, [@local, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @remote]}, @ssrr={0x89, 0x7, 0xbd, [@dev={0xac, 0x14, 0x14, 0x15}]}, @timestamp_addr={0x44, 0x44, 0xa0, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x20}, 0x7}, {@empty, 0x3}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x3}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7}]}, @end, @end]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@mpls_getnetconf={0x4c, 0x52, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040810}, 0xc4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newroute={0x6c, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0x0, 0x38, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2d}, @dev={0xfe, 0x80, '\x00', 0x31}, @private2]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000240)={0x0, 0xe0, "70a0f16a502c91b96a348a70a74e018c2bf203584be64465e59f60e1c50561711ba9a3bef3850eee9f4a14cffc761f228425064f37d5f6ad1c7a584b72031ddab7f29a9f53b0a6923b6bb1d0f1367b95e4cfa09e5fcf021e9ef5505a0553d8a93857507c88f6fb413c80484abb541ded500fd25764ba7c8172e6914db4a814df8dfbefe6bee058f5f228dca3dda71b0b644c90a734ef342fa681ab5be8026ecede16da92ba21e848627f738f92047690856089811dadce10b3c3082ae2eced4655bc2e7c6c612ed993866e0af41535380713a7308be90a746d85d1e901d86344"}) 3.041915094s ago: executing program 1 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000280)={0x0, 0x79fb, 0x40000, 0x0, 0x51}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000540)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0xa84e5475952f9a3}], 0x1}, 0x40001002, 0x40c1, 0x1, {0x1}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 2.220253616s ago: executing program 1 (id=368): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r2 = syz_open_dev$media(&(0x7f0000000000), 0x800, 0x20000) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0x3d29, 0x2}, {0x6, 0x5}, 0xab4, [0x0, 0x7b, 0x3, 0x4000000005, 0x40, 0x66, 0x1000, 0x5f, 0x4, 0x8, 0x10, 0x80000000011, 0x0, 0xffdffffffffffff7, 0x8, 0xe3]}) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x9, @private0, 0xb}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000300)={r4, 0x1, 0x4}, 0x8) 2.129710641s ago: executing program 0 (id=369): socket$kcm(0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) (fail_nth: 3) 2.078838423s ago: executing program 0 (id=370): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000040d240f01000004eaffffff1e0006031a0000080480020009058117"], 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) fchmodat(r1, &(0x7f0000000040)='.\x00', 0xfffffff3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xfffffffffffffd7a}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000cc0)={[0xb, 0x166, 0x1, 0x64ff, 0x0, 0x4, 0x455, 0x7, 0x3, 0xfffffffb, 0x9, 0x9, 0x2, 0x8, 0x3, 0xb], 0x80a0000, 0x1124d1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x480000000000) 560.610261ms ago: executing program 2 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f00000000c0)="2b35a85eb4718459af5e368d4334d7c4ac4f6198aa764d668145362ece303c8d47c3d43edb01b38a0bae92d52213c866c9665138b6da96e4a4fc0ecf195d4ab38ae1c13625f198076ccde722e70dff185f395de165464cb35485059c28bc2c34f97d23a9cca2611fce3c6c0ce39063a6b14a629ef4642b8653cc7c00355d630a9102ac8f8303aa2e138daaa64ce85975b897799b258b4c5960feff9d8283097f2c2a8a40467d8f588da028cb04132340d9c35d232c1ef4b29d59bc2e6efcb4") (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f00000002c0)={0x9, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}]}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x23, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x1}}}}]}, 0x40}}, 0x44080) (async) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x56f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40841}, 0x4040000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 492.256458ms ago: executing program 0 (id=372): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4202c78) write$ppp(r1, &(0x7f0000000240)="5cb0", 0x2) write$ppp(r1, &(0x7f0000000200)='\x00\x00\x00', 0x3) 382.121595ms ago: executing program 2 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r0], 0x24}}, 0x0) 311.42135ms ago: executing program 0 (id=374): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003c40)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4000000) 311.271202ms ago: executing program 2 (id=375): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20fff4) 310.750749ms ago: executing program 0 (id=376): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r4, 0xc010644a, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000780)={0x2c, r3, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x367}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000100)) r7 = syz_open_pts(r6, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r8, 0x8914, &(0x7f0000000400)="736c2f0000000000000000000000000001") r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@ipv6header={{0x28}, {0x0, 0x80}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x18, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b8) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000600)="a310b8", 0x3}], 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000803)=0xc0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000006c0)) 200.924009ms ago: executing program 2 (id=377): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='namespace', 0x9) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x2049c0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x100, 0x8) chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000080)='./file1\x00', 0x104) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0xc, '\x00', @buffer={"6ec190283a8cc61aa9c9e87940989ce36c189075f1513b6faea3f510efe03f93", 0x20}, 0x40}]}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/namespace\x00', &(0x7f0000000240), 0x2, &(0x7f00000007c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc}}, {@default_permissions}], [{@audit}]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x30}, 0x15, 0x3, 'none\x00', 0x11, 0x2, 0x72}, 0x2c) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004051}, 0x20000000) 200.750201ms ago: executing program 32 (id=205): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") 100.776483ms ago: executing program 2 (id=379): r0 = gettid() syz_pidfd_open(r0, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x4, 0x1, @tid=r0}, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x37}) write$selinux_attr(r2, &(0x7f0000000480)='system_u:object_r:autofs_device_t:s0\x00', 0x25) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000400)={{&(0x7f0000000180), 0x0, 0x40, 0x0, 0x800}, {&(0x7f00000001c0)=[{0xfffffffffffffffc, 0x8000000000000001}, {0x0, 0x3}, {0x9, 0x81}, {0xfffffffffffffff7, 0x1}, {0x80000001, 0x3}, {0x4, 0x3}], 0x6, 0x10, 0x3}, {&(0x7f0000000240)=[0x1, 0x2, 0x0, 0x9, 0xa, 0x1, 0x5, 0x8], 0x8, 0x8, 0xfff0}, {&(0x7f0000000340)=[{0x60, 0x0, 0x100000002, 0x2fff}, {0x100000000, 0x4, 0xfffffffffffffffa, 0x7, 0x1000}, {0xc, 0x7, 0x9e, 0x2, 0xc}], 0x3, 0x28, 0x5, 0x7500}, {&(0x7f00000003c0)=[0x8c, 0x7], 0x2, 0x8, 0x9, 0x2}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04003120"], 0x7) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="66baf80cb870cdc082ef66bafc0c66ed0f01cff30fbc5ae83e0f01ca0f01cfb935080000b803000000ba000000000f30c4c1a5e250836736ca90c166ba6100b800000000ef66b8a0000f00d0", 0x4c}], 0x1, 0x4, &(0x7f0000000180), 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc0008000000000000000000000000000600150002"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 0 (id=380): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0xffe, 0x0, 0xfffffffffffffffe}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="52616e676c65000000000000000000000000000000000000000000000000000005000000f47e6aeb88"], &(0x7f0000000100)=0x2d) recvfrom$inet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0xffe, 0x0, 0xfffffffffffffffe}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="52616e676c65000000000000000000000000000000000000000000000000000005000000f47e6aeb88"], &(0x7f0000000100)=0x2d) (async) recvfrom$inet(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:4500' (ED25519) to the list of known hosts. [ 41.916131][ T5702] cgroup: Unknown subsys name 'net' [ 42.103354][ T5702] cgroup: Unknown subsys name 'cpuset' [ 42.111205][ T5702] cgroup: Unknown subsys name 'rlimit' [ 42.337137][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 42.337155][ T43] audit: type=1400 audit(1787128028.789:144): avc: denied { setattr } for pid=5702 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.348650][ T43] audit: type=1400 audit(1787128028.789:145): avc: denied { create } for pid=5702 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.356375][ T43] audit: type=1400 audit(1787128028.789:146): avc: denied { write } for pid=5702 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.364651][ T43] audit: type=1400 audit(1787128028.799:147): avc: denied { read } for pid=5702 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.370730][ T43] audit: type=1400 audit(1787128028.819:148): avc: denied { read } for pid=5434 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.376672][ T43] audit: type=1400 audit(1787128028.829:149): avc: denied { read } for pid=5434 comm="dhcpcd" name="n31" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.383664][ T43] audit: type=1400 audit(1787128028.829:150): avc: denied { open } for pid=5434 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.390415][ T43] audit: type=1400 audit(1787128028.829:151): avc: denied { getattr } for pid=5434 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.410045][ T5713] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.413231][ T43] audit: type=1400 audit(1787128028.869:152): avc: denied { relabelto } for pid=5713 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.421366][ T43] audit: type=1400 audit(1787128028.869:153): avc: denied { write } for pid=5713 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.101819][ T5702] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.657698][ T5728] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.663763][ T5730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.666646][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.670408][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.672991][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.676336][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.676564][ T5733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.679793][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.680194][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.680453][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.682612][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.682960][ T5733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.685742][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.687778][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.689869][ T5735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.690329][ T5733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.690812][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.692089][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.692182][ T5733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.694583][ T5735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.294544][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.298271][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.301231][ T5721] bridge_slave_0: entered allmulticast mode [ 47.305210][ T5721] bridge_slave_0: entered promiscuous mode [ 47.332244][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.335416][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.338852][ T5727] bridge_slave_0: entered allmulticast mode [ 47.342454][ T5727] bridge_slave_0: entered promiscuous mode [ 47.346874][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.351019][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.353950][ T5727] bridge_slave_1: entered allmulticast mode [ 47.357709][ T5727] bridge_slave_1: entered promiscuous mode [ 47.368239][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.371150][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.374301][ T5721] bridge_slave_1: entered allmulticast mode [ 47.378233][ T5721] bridge_slave_1: entered promiscuous mode [ 47.437923][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.440288][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.442504][ T5720] bridge_slave_0: entered allmulticast mode [ 47.445034][ T5720] bridge_slave_0: entered promiscuous mode [ 47.462687][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.465975][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.468356][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.470705][ T5720] bridge_slave_1: entered allmulticast mode [ 47.473345][ T5720] bridge_slave_1: entered promiscuous mode [ 47.478341][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.488641][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.492727][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.501870][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.504294][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.506648][ T5719] bridge_slave_0: entered allmulticast mode [ 47.509557][ T5719] bridge_slave_0: entered promiscuous mode [ 47.512815][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.515103][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.517358][ T5719] bridge_slave_1: entered allmulticast mode [ 47.520365][ T5719] bridge_slave_1: entered promiscuous mode [ 47.568523][ T5721] team0: Port device team_slave_0 added [ 47.571516][ T5727] team0: Port device team_slave_0 added [ 47.574702][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.579261][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.583310][ T5721] team0: Port device team_slave_1 added [ 47.586018][ T5727] team0: Port device team_slave_1 added [ 47.589087][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.593477][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.640757][ T5719] team0: Port device team_slave_0 added [ 47.660760][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.662995][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.670937][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.677538][ T5719] team0: Port device team_slave_1 added [ 47.692599][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.695614][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.706099][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.711817][ T5720] team0: Port device team_slave_0 added [ 47.714000][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.716789][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.725679][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.738345][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.741101][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.751165][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.757303][ T5720] team0: Port device team_slave_1 added [ 47.766907][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.770529][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.779703][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.787834][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.790512][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.798733][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.819202][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.821422][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.829378][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.834174][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.836355][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.845057][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.874304][ T5721] hsr_slave_0: entered promiscuous mode [ 47.876686][ T5721] hsr_slave_1: entered promiscuous mode [ 47.899854][ T5727] hsr_slave_0: entered promiscuous mode [ 47.902092][ T5727] hsr_slave_1: entered promiscuous mode [ 47.904080][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 47.905841][ T5727] Cannot create hsr debugfs directory [ 47.941593][ T5719] hsr_slave_0: entered promiscuous mode [ 47.943740][ T5719] hsr_slave_1: entered promiscuous mode [ 47.945750][ T5719] debugfs: 'hsr0' already exists in 'hsr' [ 47.947515][ T5719] Cannot create hsr debugfs directory [ 47.978585][ T5720] hsr_slave_0: entered promiscuous mode [ 47.981588][ T5720] hsr_slave_1: entered promiscuous mode [ 47.984355][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 47.986613][ T5720] Cannot create hsr debugfs directory [ 48.279634][ T5721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.291021][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.293840][ T5721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.300161][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.307628][ T5721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.314250][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.318136][ T5721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.325198][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.389591][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.395888][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.399531][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.404662][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.410182][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.415924][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.429687][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.434690][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.501874][ T5719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.508934][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.513834][ T5719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.520290][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.524918][ T5719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.532398][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.536035][ T5719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.543992][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.638375][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.645426][ T5720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.649709][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.659212][ T5720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.664751][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.668686][ T5720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.674978][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.680639][ T5720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.687846][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.715542][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.718874][ T64] Bluetooth: hci1: command tx timeout [ 48.719668][ T5735] Bluetooth: hci3: command tx timeout [ 48.728193][ T5735] Bluetooth: hci2: command tx timeout [ 48.728329][ T64] Bluetooth: hci0: command tx timeout [ 48.750370][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.753536][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.762075][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.781861][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.785175][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.819177][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.836079][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.838458][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.856325][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.859358][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.867160][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.904369][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.916751][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.925763][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.928904][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.946292][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.949278][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.956314][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.982407][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.985483][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.015974][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.019030][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.145484][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.180564][ T5721] veth0_vlan: entered promiscuous mode [ 49.191438][ T5721] veth1_vlan: entered promiscuous mode [ 49.215011][ T5721] veth0_macvtap: entered promiscuous mode [ 49.221107][ T5721] veth1_macvtap: entered promiscuous mode [ 49.231148][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.237751][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.245933][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.296556][ T5727] veth0_vlan: entered promiscuous mode [ 49.309133][ T5727] veth1_vlan: entered promiscuous mode [ 49.312745][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.332491][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.338416][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.339516][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.349047][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.378513][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.379463][ T5727] veth0_macvtap: entered promiscuous mode [ 49.380954][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.399847][ T5719] veth0_vlan: entered promiscuous mode [ 49.402362][ T5727] veth1_macvtap: entered promiscuous mode [ 49.414304][ T5720] veth0_vlan: entered promiscuous mode [ 49.414880][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 49.414891][ T43] audit: type=1400 audit(1787128035.869:167): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.426116][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.427784][ T43] audit: type=1400 audit(1787128035.869:168): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/syzkaller.6gbBIw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.432523][ T5719] veth1_vlan: entered promiscuous mode [ 49.440626][ T43] audit: type=1400 audit(1787128035.879:169): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.446900][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.450677][ T43] audit: type=1400 audit(1787128035.879:170): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/syzkaller.6gbBIw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.460278][ T43] audit: type=1400 audit(1787128035.879:171): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/syzkaller.6gbBIw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.463727][ T5721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.469749][ T5720] veth1_vlan: entered promiscuous mode [ 49.475035][ T43] audit: type=1400 audit(1787128035.879:172): avc: denied { unmount } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.481249][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.481286][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.481306][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.485162][ T5719] veth0_macvtap: entered promiscuous mode [ 49.487919][ T43] audit: type=1400 audit(1787128035.889:173): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.502702][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.502981][ T43] audit: type=1400 audit(1787128035.889:174): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="gadgetfs" ino=8469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 49.514147][ T43] audit: type=1400 audit(1787128035.889:175): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.515105][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.520774][ T43] audit: type=1400 audit(1787128035.889:176): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.539313][ T5719] veth1_macvtap: entered promiscuous mode [ 49.561144][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.570506][ T5720] veth0_macvtap: entered promiscuous mode [ 49.578177][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.603099][ T5720] veth1_macvtap: entered promiscuous mode [ 49.609425][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.612103][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.618102][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.637847][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.648986][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.653396][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.653755][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.678298][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.726284][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.737536][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.773276][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.776381][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.791435][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.796218][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.808695][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.811672][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.827939][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.833365][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.858088][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.863436][ T5877] sctp: [Deprecated]: syz.0.5 (pid 5877) Use of int in max_burst socket option. [ 49.863436][ T5877] Use struct sctp_assoc_value instead [ 49.868200][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.872754][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.898117][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.902841][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.908307][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.042471][ T5884] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 50.054795][ T5884] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 50.058272][ T5884] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 50.061354][ T5884] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 50.064623][ T5884] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 50.067135][ T5884] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 50.069825][ T5884] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 50.072299][ T5884] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 50.075847][ T5884] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 50.078731][ T5884] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 50.206030][ T5892] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 50.215589][ T5891] netlink: 'syz.1.7': attribute type 11 has an invalid length. [ 50.252616][ T5898] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.299230][ T5891] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 50.301380][ T5891] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 50.482882][ T5905] gadgetfs: bound to dummy_udc driver [ 50.728452][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.732837][ C1] gadgetfs: connected [ 50.734552][ T29] gadgetfs: disconnected [ 50.748248][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.798889][ T64] Bluetooth: hci0: command tx timeout [ 50.801547][ T5735] Bluetooth: hci1: command tx timeout [ 50.801788][ T5735] Bluetooth: hci2: command tx timeout [ 50.804453][ T64] Bluetooth: hci3: command tx timeout [ 50.899333][ C1] gadgetfs: connected [ 50.900792][ T29] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 50.905535][ T42] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 50.909081][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.912880][ T42] usb 7-1: config 0 has no interfaces? [ 50.920086][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.926761][ C1] gadgetfs: configuration #1 [ 50.928913][ T42] usb 7-1: Product: syz [ 50.930304][ T42] usb 7-1: Manufacturer: syz [ 50.938201][ T42] usb 7-1: SerialNumber: syz [ 50.943490][ T29] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input5 [ 50.950011][ T42] usb 7-1: config 0 descriptor?? [ 51.177090][ T5905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 51.202527][ T5921] jffs2: notice: (5921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.234483][ T5905] ublk0: read batch cmd buffer failed [ 51.236648][ T5905] ublk0: read batch cmd buffer failed [ 51.260906][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.264368][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.269576][ T5833] usb 7-1: USB disconnect, device number 2 [ 51.277877][ T5904] gadgetfs: suspended from state 3 [ 51.294701][ T5904] gadgetfs: disconnected [ 51.297183][ T5822] usb 5-1: USB disconnect, device number 2 [ 51.848545][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 51.852556][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23'. [ 51.871201][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 51.947029][ T5948] Bluetooth: MGMT ver 1.23 [ 52.014659][ T5950] jffs2: notice: (5950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 52.157534][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.169198][ T5962] batadv_slave_0: entered promiscuous mode [ 52.171122][ T5962] batadv_slave_0: entered allmulticast mode [ 52.264810][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 52.291881][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 52.324216][ T5976] team1: entered promiscuous mode [ 52.326872][ T5976] team1: entered allmulticast mode [ 52.330789][ T5976] 8021q: adding VLAN 0 to HW filter on device team1 [ 52.334327][ T5976] Zero length message leads to an empty skb [ 52.473225][ T5994] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 52.629400][ T6004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6004 comm=syz.2.43 [ 52.661796][ T6006] process 'syz.0.44' launched './file0' with NULL argv: empty string added [ 52.692888][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 52.706708][ T6008] team1: entered promiscuous mode [ 52.708558][ T6008] team1: entered allmulticast mode [ 52.710527][ T6008] 8021q: adding VLAN 0 to HW filter on device team1 [ 52.775912][ T6014] loop2: detected capacity change from 0 to 7 [ 52.782831][ T6016] fuse: Bad value for 'fd' [ 52.792242][ T6014] Dev loop2: unable to read RDB block 7 [ 52.795769][ T6014] loop2: AHDI p1 p2 p3 [ 52.797150][ T6014] loop2: partition table partially beyond EOD, truncated [ 52.800944][ T6014] loop2: p1 start 1601398130 is beyond EOD, truncated [ 52.803454][ T6014] loop2: p2 start 1702059890 is beyond EOD, truncated [ 52.822685][ T6014] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 52.862386][ T6026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.50'. [ 52.878145][ T64] Bluetooth: hci2: command tx timeout [ 52.879874][ T64] Bluetooth: hci0: command tx timeout [ 52.880069][ T5733] Bluetooth: hci3: command tx timeout [ 52.883392][ T5735] Bluetooth: hci1: command tx timeout [ 52.924580][ T6032] jffs2: notice: (6032) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 53.054627][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 53.077470][ T6043] team1: entered promiscuous mode [ 53.077644][ T6051] program syz.3.60 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.079212][ T6043] team1: entered allmulticast mode [ 53.084971][ T6043] 8021q: adding VLAN 0 to HW filter on device team1 [ 53.161248][ T6063] jffs2: notice: (6063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 53.190739][ T6067] openvswitch: netlink: Unknown key attributes 1 [ 53.247786][ T6075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=6075 comm=syz.1.68 [ 53.300798][ T6078] SELinux: failed to load policy [ 53.337587][ T6088] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 53.338526][ T6089] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 53.412114][ T6096] binder: 6095:6096 ioctl 40106e80 2000000002c0 returned -22 [ 53.423409][ T6096] hpfs: Bad magic ... probably not HPFS [ 53.455790][ T6102] jffs2: notice: (6102) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 53.478058][ T847] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.554759][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.558284][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.622745][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.671266][ T847] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 53.677116][ T847] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 53.680886][ T847] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 53.686294][ T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.692452][ T847] usb 5-1: Product: syz [ 53.693781][ T847] usb 5-1: Manufacturer: syz [ 53.695455][ T847] usb 5-1: SerialNumber: syz [ 53.702363][ T6070] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.705265][ T6070] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.708596][ T847] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 53.712073][ T847] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 53.715370][ T847] usbserial_generic 5-1:1.0: generic converter detected [ 53.721228][ T847] usb 5-1: generic converter now attached to ttyUSB0 [ 53.913535][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 53.916428][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 53.966662][ T42] usb 5-1: USB disconnect, device number 3 [ 53.976133][ T42] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 53.979277][ T42] usbserial_generic 5-1:1.0: device disconnected [ 54.341705][ T6153] MTD: Couldn't look up './dev/mtdblock0': -2 [ 54.452993][ T43] kauditd_printk_skb: 214 callbacks suppressed [ 54.453012][ T43] audit: type=1400 audit(1787128040.909:391): avc: denied { mount } for pid=6158 comm="syz.1.88" name="/" dev="hugetlbfs" ino=10860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 54.471505][ T43] audit: type=1400 audit(1787128040.929:392): avc: denied { unmount } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 54.500935][ T6163] netlink: 'syz.1.89': attribute type 1 has an invalid length. [ 54.504966][ T43] audit: type=1400 audit(1787128040.959:393): avc: denied { read } for pid=6161 comm="syz.1.89" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 54.513438][ T43] audit: type=1400 audit(1787128040.959:394): avc: denied { open } for pid=6161 comm="syz.1.89" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 54.558413][ T43] audit: type=1400 audit(1787128041.009:395): avc: denied { write } for pid=6161 comm="syz.1.89" name="event3" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.566922][ T43] audit: type=1400 audit(1787128041.019:396): avc: denied { open } for pid=6161 comm="syz.1.89" path="/dev/input/event3" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.625953][ T43] audit: type=1400 audit(1787128041.079:397): avc: denied { ioctl } for pid=6161 comm="syz.1.89" path="/dev/input/mice" dev="devtmpfs" ino=938 ioctlcmd=0x4508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 54.646135][ T43] audit: type=1400 audit(1787128041.099:398): avc: denied { write } for pid=6171 comm="syz.3.93" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.665645][ T43] audit: type=1400 audit(1787128041.119:399): avc: denied { write } for pid=6170 comm="syz.0.94" name="/" dev="9p" ino=78133963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.674156][ T43] audit: type=1400 audit(1787128041.119:400): avc: denied { remove_name } for pid=6170 comm="syz.0.94" name="file2" dev="9p" ino=78133971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.676822][ T6178] MTD: Couldn't look up './dev/mtdblock0': -2 [ 54.836433][ T6182] kvm: pic: non byte write [ 54.946242][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 54.949257][ T6185] netlink: 'syz.0.97': attribute type 7 has an invalid length. [ 54.952056][ T6185] netlink: 'syz.0.97': attribute type 13 has an invalid length. [ 54.959465][ T5728] Bluetooth: hci1: command tx timeout [ 54.961646][ T5728] Bluetooth: hci0: command tx timeout [ 54.962370][ T5735] Bluetooth: hci2: command tx timeout [ 55.415791][ T6204] bond0: no command found in slaves file - use +ifname or -ifname [ 55.596145][ T6210] capability: warning: `syz.1.108' uses deprecated v2 capabilities in a way that may be insecure [ 55.598902][ T5735] Bluetooth: hci4: command 0x1003 tx timeout [ 55.600348][ T5733] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.697231][ T6222] erspan0: entered promiscuous mode [ 55.748144][ T6227] MTD: Couldn't look up './dev/mtdblock0': -2 [ 56.060455][ T6198] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 56.082827][ T6252] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 56.091898][ T6254] MTD: Couldn't look up './dev/mtdblock0': -2 [ 56.121248][ T6252] af_packet: tpacket_rcv: packet too big, clamped from 22 to 4294967272. macoff=96 [ 56.126692][ T6235] netlink: 'syz.1.115': attribute type 10 has an invalid length. [ 56.193105][ T6263] netlink: 'syz.3.125': attribute type 2 has an invalid length. [ 56.421044][ T6273] cgroup: name respecified [ 56.495322][ T6289] __nla_validate_parse: 4 callbacks suppressed [ 56.495342][ T6289] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.133'. [ 56.509414][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 56.658454][ T6301] netlink: 7 bytes leftover after parsing attributes in process `syz.2.136'. [ 56.903374][ T6309] netlink: 68 bytes leftover after parsing attributes in process `syz.0.139'. [ 56.906911][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 57.072028][ T41] IPVS: starting estimator thread 0... [ 57.158178][ T6322] IPVS: using max 44 ests per chain, 105600 per kthread [ 57.226700][ T6334] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.278268][ T5733] Bluetooth: hci0: command 0x080f tx timeout [ 57.316142][ T6334] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.416673][ T6334] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.531840][ T6334] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.648082][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.668150][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.672106][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.677763][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.721684][ T6360] MTD: Couldn't look up './dev/mtdblock0': -2 [ 57.805405][ T847] logitech-hidpp-device 0005:046D:B012.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 57.890392][ T6396] fido_id[6396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.921123][ T6404] trusted_key: encrypted_key: keyword 'u' not recognized [ 57.928502][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.161'. [ 57.975165][ T6411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.165'. [ 57.979075][ T6412] netlink: 48 bytes leftover after parsing attributes in process `syz.2.165'. [ 57.981312][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 57.987360][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 58.094883][ T6420] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 58.118314][ T6420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.203212][ T6448] Config c/1 of g1 needs at least one function. [ 58.206887][ T6448] udc dummy_udc.0: failed to start g1: -22 [ 58.209868][ T6448] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 58.215641][ T6448] UDC core: g1: couldn't find an available UDC or it's busy [ 58.276147][ T6454] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 58.314229][ T6461] binder: 6460:6461 ioctl c0306201 200000000040 returned -14 [ 58.338169][ T41] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.465810][ T6474] JFS: charset not found [ 58.488633][ T41] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 58.493138][ T41] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.497501][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.506886][ T6476] evm: overlay not supported [ 58.589338][ T847] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 58.718874][ T847] usb 5-1: device descriptor read/64, error -71 [ 58.724481][ T41] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 58.737899][ T41] wwan wwan0: port wwan0qmi0 attached [ 58.769426][ T41] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 7e:ff:91:0c:64:db [ 58.775505][ T41] usb 7-1: USB disconnect, device number 3 [ 58.781260][ T41] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 58.865371][ T41] wwan wwan0: port wwan0qmi0 disconnected [ 58.968188][ T847] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 59.118609][ T847] usb 5-1: device descriptor read/64, error -71 [ 59.187853][ T6498] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 59.228554][ T847] usb usb5-port1: attempt power cycle [ 59.287942][ T6506] netlink: 'syz.2.197': attribute type 1 has an invalid length. [ 59.287943][ T6507] netlink: 'syz.2.197': attribute type 2 has an invalid length. [ 59.326765][ T6506] bond1: entered promiscuous mode [ 59.330947][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.450893][ T6516] nfs: Unknown parameter 'portort' [ 59.493977][ T43] kauditd_printk_skb: 81 callbacks suppressed [ 59.494004][ T43] audit: type=1400 audit(1787128045.949:482): avc: denied { read } for pid=6521 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.545529][ T43] audit: type=1400 audit(1787128045.999:483): avc: denied { shutdown } for pid=6521 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.578152][ T847] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 59.598781][ T847] usb 5-1: device descriptor read/8, error -71 [ 59.848216][ T847] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 59.870096][ T847] usb 5-1: device descriptor read/8, error -71 [ 59.979434][ T847] usb usb5-port1: unable to enumerate USB device [ 60.184402][ T43] audit: type=1400 audit(1787128046.639:484): avc: denied { write } for pid=6528 comm="syz.1.206" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 60.230002][ T43] audit: type=1400 audit(1787128046.689:485): avc: denied { create } for pid=6530 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.239025][ T43] audit: type=1400 audit(1787128046.689:486): avc: denied { setopt } for pid=6530 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.604046][ T43] audit: type=1400 audit(1787128047.059:487): avc: denied { watch } for pid=6550 comm="syz.2.214" path="/51" dev="tmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.635281][ T5733] Bluetooth: unknown link type 150 [ 60.637507][ T5733] Bluetooth: hci1: connection err: -111 [ 60.686143][ T6554] openvswitch: netlink: Multiple metadata blocks provided [ 60.691812][ T43] audit: type=1400 audit(1787128047.149:488): avc: denied { ioctl } for pid=6553 comm="syz.1.215" path="/dev/vhost-net" dev="devtmpfs" ino=1297 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.698580][ T6555] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 60.702607][ T6555] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 60.708119][ T6555] vhci_hcd vhci_hcd.0: Device attached [ 60.713431][ T43] audit: type=1400 audit(1787128047.169:489): avc: denied { setopt } for pid=6550 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.723239][ T43] audit: type=1400 audit(1787128047.179:490): avc: denied { read } for pid=6550 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.775040][ T6556] vhci_hcd: connection closed [ 60.778907][ T13] vhci_hcd vhci_hcd.2: stop threads [ 60.783211][ T6562] aoe: unknown AoE command type 0xbc [ 60.786869][ T13] vhci_hcd vhci_hcd.2: release socket [ 60.789724][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 60.876471][ T43] audit: type=1400 audit(1787128047.329:491): avc: denied { write } for pid=6565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.134975][ T6587] loop2: detected capacity change from 0 to 7 [ 61.142870][ T6587] Dev loop2: unable to read RDB block 7 [ 61.144930][ T6587] loop2: AHDI p1 p2 p3 [ 61.146281][ T6587] loop2: partition table partially beyond EOD, truncated [ 61.150898][ T6587] loop2: p1 start 1601398130 is beyond EOD, truncated [ 61.153526][ T6587] loop2: p2 start 1702059890 is beyond EOD, truncated [ 61.340559][ T6603] MTD: Couldn't look up './file0': -15 [ 61.413436][ T6614] warning: `syz.0.228' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.417327][ T6614] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 61.433506][ T6614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.454178][ T6614] bond1: (slave geneve2): making interface the new active one [ 61.460861][ T6614] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 61.540527][ T6626] __nla_validate_parse: 2 callbacks suppressed [ 61.540544][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 61.572149][ T6626] hsr_slave_1 (unregistering): left promiscuous mode [ 61.834583][ T6655] No source specified [ 62.352985][ T6674] netlink: 'syz.1.245': attribute type 39 has an invalid length. [ 62.426238][ T6680] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 62.493970][ T6680] dvmrp0: entered allmulticast mode [ 62.503112][ T6680] ======================================================= [ 62.503112][ T6680] WARNING: The mand mount option has been deprecated and [ 62.503112][ T6680] and is ignored by this kernel. Remove the mand [ 62.503112][ T6680] option from the mount to silence this warning. [ 62.503112][ T6680] ======================================================= [ 62.515311][ T6680] binder: Unknown parameter 'lŽ' [ 63.690027][ T6708] No source specified [ 64.318107][ T5735] Bluetooth: hci0: command 0x080f tx timeout [ 64.820385][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 64.820434][ T43] audit: type=1400 audit(1787128051.279:532): avc: denied { getopt } for pid=6745 comm="syz.2.273" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.054055][ T6746] pim6reg: entered allmulticast mode [ 65.059679][ T6746] pim6reg: left allmulticast mode [ 65.111687][ T6759] syzkaller0: entered promiscuous mode [ 65.113500][ T43] audit: type=1400 audit(1787128051.569:533): avc: denied { read } for pid=6745 comm="syz.2.273" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.120213][ T6759] syzkaller0: entered allmulticast mode [ 65.128458][ T6759] tipc: Started in network mode [ 65.131182][ T6759] tipc: Node identity caf23c2bbee9, cluster identity 4711 [ 65.134355][ T6759] tipc: Enabled bearer , priority 0 [ 65.141234][ T6761] tipc: Enabling of bearer rejected, already enabled [ 65.208643][ T43] audit: type=1400 audit(1787128051.669:534): avc: denied { block_suspend } for pid=6758 comm="syz.1.278" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.230744][ T6760] ip6t_srh: unknown srh invflags 4000 [ 65.255584][ T6759] tipc: Resetting bearer [ 65.263578][ T6757] tipc: Resetting bearer [ 65.280702][ T6757] tipc: Disabling bearer [ 65.417719][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 65.421221][ T6771] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 65.426457][ T6771] nbd: error processing sock list [ 65.443383][ T43] audit: type=1400 audit(1787128051.899:535): avc: denied { mounton } for pid=6770 comm="syz.2.281" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 65.454599][ T6771] /dev/nullb0: Can't open blockdev [ 65.504808][ T43] audit: type=1400 audit(1787128051.959:536): avc: denied { ioctl } for pid=6773 comm="syz.2.282" path="socket:[15437]" dev="sockfs" ino=15437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.596787][ T43] audit: type=1400 audit(1787128052.049:537): avc: denied { setopt } for pid=6776 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.760299][ T5735] Bluetooth: hci2: command 0x0406 tx timeout [ 65.771806][ T6795] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 65.862253][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.289'. [ 65.920370][ T43] audit: type=1400 audit(1787128052.379:538): avc: denied { append } for pid=6797 comm="syz.1.289" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 66.033115][ T6792] pim6reg: entered allmulticast mode [ 66.039447][ T6792] pim6reg: left allmulticast mode [ 66.504264][ T6811] netlink: 'syz.2.294': attribute type 5 has an invalid length. [ 66.533915][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 66.536733][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 66.553329][ T43] audit: type=1400 audit(1787128053.009:539): avc: denied { shutdown } for pid=6808 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.570572][ T43] audit: type=1400 audit(1787128053.029:540): avc: denied { bind } for pid=6814 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.570607][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.579277][ T43] audit: type=1400 audit(1787128053.029:541): avc: denied { node_bind } for pid=6814 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 66.585977][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.590187][ T6815] tipc: Enabling of bearer rejected, failed to enable media [ 66.623064][ T6822] loop0: detected capacity change from 0 to 3904 [ 66.668518][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.671584][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.690692][ T6822] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 66.696508][ T6822] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 66.700498][ T6822] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 66.703544][ T6822] loop0: [ 66.778418][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.784890][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.810085][ T6836] binder: Unknown parameter 'lŽ' [ 66.894493][ T6817] team1: left promiscuous mode [ 66.896142][ T6817] team1: left allmulticast mode [ 66.938155][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.942582][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.968243][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.971495][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.974710][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.977759][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.027775][ T6841] create_pit_timer: 58 callbacks suppressed [ 67.027801][ T6841] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 67.120135][ T6851] netlink: 'syz.2.306': attribute type 8 has an invalid length. [ 67.126459][ T6851] zonefs (loop2) ERROR: Not a zoned block device [ 67.171399][ T6854] »»»»»»: renamed from vlan0 (while UP) [ 67.302025][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 67.321000][ T6867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57364 sclass=netlink_route_socket pid=6867 comm=syz.1.311 [ 67.333008][ T6867] mmap: syz.1.311 (6867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.480813][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 67.484695][ T10] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 67.487520][ T10] usb 5-1: config 0 has no interface number 0 [ 67.490078][ T10] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.495866][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.498833][ T10] usb 5-1: Product: syz [ 67.500248][ T10] usb 5-1: Manufacturer: syz [ 67.501795][ T10] usb 5-1: SerialNumber: syz [ 67.507460][ T10] usb 5-1: config 0 descriptor?? [ 67.527432][ T6880] dvmrp0: entered allmulticast mode [ 67.540101][ T10] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 67.811932][ T6890] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 67.823642][ T6890] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 67.826540][ T6890] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 67.829858][ T6890] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 67.832607][ T6890] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 67.835221][ T6890] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 67.837876][ T6890] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 67.840929][ T6890] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 67.844395][ T6890] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 67.893680][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 67.972367][ T5822] usb 5-1: USB disconnect, device number 8 [ 67.990385][ T5822] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 68.278088][ T42] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 68.430180][ T42] usb 7-1: unable to get BOS descriptor or descriptor too short [ 68.433348][ T42] usb 7-1: not running at top speed; connect to a high speed hub [ 68.436515][ T42] usb 7-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40 [ 68.443580][ T42] usb 7-1: config 1 interface 0 altsetting 160 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.447702][ T42] usb 7-1: config 1 interface 0 has no altsetting 0 [ 68.452453][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.455901][ T42] usb 7-1: Product: syz [ 68.457671][ T42] usb 7-1: Manufacturer: syz [ 68.459631][ T42] usb 7-1: SerialNumber: syz [ 68.517351][ T6907] netlink: 40 bytes leftover after parsing attributes in process `syz.1.322'. [ 68.682542][ T6915] dvmrp0: entered allmulticast mode [ 68.902241][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 68.905140][ T6934] openvswitch: netlink: Flow actions attr not present in new flow. [ 69.104540][ T6951] jffs2: notice: (6951) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 69.223872][ T6960] xt_hashlimit: size too large, truncated to 1048576 [ 69.814049][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 69.978605][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.982293][ T34] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.985665][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.988939][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.991912][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.995856][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.002184][ T34] usb 5-1: config 0 descriptor?? [ 70.237250][ T6980] netlink: 'syz.1.341': attribute type 16 has an invalid length. [ 70.240508][ T6980] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.341'. [ 70.245559][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 70.245578][ T43] audit: type=1400 audit(1787128056.699:568): avc: denied { bind } for pid=6979 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.250035][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.341'. [ 70.261617][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6980 comm=syz.1.341 [ 70.265549][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6980 comm=syz.1.341 [ 70.269861][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6980 comm=syz.1.341 [ 70.273749][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6980 comm=syz.1.341 [ 70.277610][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6980 comm=syz.1.341 [ 70.281427][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6980 comm=syz.1.341 [ 70.285223][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6980 comm=syz.1.341 [ 70.289140][ T6980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6980 comm=syz.1.341 [ 70.390925][ T6982] netlink: 64 bytes leftover after parsing attributes in process `syz.1.342'. [ 70.404077][ T6982] syzkaller1: entered promiscuous mode [ 70.405815][ T6982] syzkaller1: entered allmulticast mode [ 70.411961][ T34] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 70.428569][ T34] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 70.676413][ T847] usb 5-1: USB disconnect, device number 9 [ 70.761380][ T6991] jffs2: notice: (6991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 70.992723][ T42] usbhid 7-1:1.0: can't add hid device: -71 [ 70.998872][ T42] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 71.015214][ T42] usb 7-1: USB disconnect, device number 4 [ 71.111953][ T43] audit: type=1400 audit(1787128057.569:569): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 71.280252][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.282783][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.461301][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 71.470405][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 71.470736][ T7011] bridge0: port 3(macvlan2) entered blocking state [ 71.476232][ T7011] bridge0: port 3(macvlan2) entered disabled state [ 71.479069][ T7011] macvlan2: entered allmulticast mode [ 71.485510][ T7011] macvlan2: left allmulticast mode [ 71.599055][ T34] usb 7-1: device descriptor read/64, error -71 [ 71.742072][ T7020] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 71.754701][ T7025] capability: warning: `syz.0.354' uses 32-bit capabilities (legacy support in use) [ 71.799441][ T43] audit: type=1400 audit(1787128058.259:570): avc: denied { mount } for pid=7027 comm="syz.0.356" name="/" dev="ramfs" ino=17678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 71.856500][ T43] audit: type=1400 audit(1787128058.309:571): avc: denied { mounton } for pid=7026 comm="syz.1.355" path="/125/proc/fs/nfsd" dev="proc" ino=4026531847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 71.858743][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 71.864101][ T43] audit: type=1400 audit(1787128058.319:572): avc: denied { mount } for pid=7026 comm="syz.1.355" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 71.998124][ T34] usb 7-1: device descriptor read/64, error -71 [ 72.108321][ T34] usb usb7-port1: attempt power cycle [ 72.121279][ T7040] program syz.0.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.448102][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 72.470303][ T34] usb 7-1: device descriptor read/8, error -71 [ 72.472040][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 72.643034][ T43] audit: type=1804 audit(1787128059.099:573): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.367" name="/newroot/85/file0/file1" dev="overlay" ino=472 res=1 errno=0 [ 72.650739][ T6675] IPVS: starting estimator thread 0... [ 72.711804][ T7068] jffs2: notice: (7068) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 72.718565][ T7068] FAULT_INJECTION: forcing a failure. [ 72.718565][ T7068] name failslab, interval 1, probability 0, space 0, times 1 [ 72.719711][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 72.722325][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT(full) [ 72.722340][ T7068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.722353][ T7068] Call Trace: [ 72.722366][ T7068] [ 72.722371][ T7068] dump_stack_lvl+0x100/0x190 [ 72.722425][ T7068] should_fail_ex.cold+0x5/0xa [ 72.722439][ T7068] should_failslab+0xc2/0x120 [ 72.722463][ T7068] kmem_cache_alloc_noprof+0x91/0x6a0 [ 72.722479][ T7068] ? alloc_empty_file+0x5b/0x1c0 [ 72.722496][ T7068] alloc_empty_file+0x5b/0x1c0 [ 72.722512][ T7068] path_openat+0xdb/0x2440 [ 72.722536][ T7068] ? __pfx_path_openat+0x10/0x10 [ 72.722553][ T7068] do_file_open+0x20e/0x430 [ 72.722567][ T7068] ? __pfx_do_file_open+0x10/0x10 [ 72.722590][ T7068] ? _raw_spin_unlock+0x28/0x50 [ 72.722623][ T7068] ? alloc_fd+0x471/0x7a0 [ 72.722641][ T7068] do_sys_openat2+0x10f/0x1e0 [ 72.722657][ T7068] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.722673][ T7068] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 72.722683][ T7068] ? __fget_files+0x21f/0x3d0 [ 72.722699][ T7068] __x64_sys_openat+0x12d/0x210 [ 72.722714][ T7068] ? __pfx___x64_sys_openat+0x10/0x10 [ 72.722732][ T7068] ? ksys_write+0x1ac/0x250 [ 72.722748][ T7068] do_syscall_64+0x123/0x790 [ 72.722759][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.722770][ T7068] RIP: 0033:0x7f4bff79e0d9 [ 72.722779][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.722789][ T7068] RSP: 002b:00007f4c006a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.722806][ T7068] RAX: ffffffffffffffda RBX: 00007f4bffa25fa0 RCX: 00007f4bff79e0d9 [ 72.722812][ T7068] RDX: 0000000000000042 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 72.722818][ T7068] RBP: 00007f4c006a6090 R08: 0000000000000000 R09: 0000000000000000 [ 72.722824][ T7068] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 72.722830][ T7068] R13: 00007f4bffa26038 R14: 00007f4bffa25fa0 R15: 00007ffc5ce7bec8 [ 72.722843][ T7068] [ 72.758181][ T7066] IPVS: using max 45 ests per chain, 108000 per kthread [ 72.780119][ T34] usb 7-1: device descriptor read/8, error -71 [ 72.908348][ T34] usb usb7-port1: unable to enumerate USB device [ 73.068146][ T42] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 73.230113][ T42] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.233965][ T42] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.236724][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.241281][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.244355][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.247840][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.252502][ T42] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.255558][ T42] usb 5-1: Product: syz [ 73.257065][ T42] usb 5-1: Manufacturer: syz [ 73.271836][ T42] cdc_wdm 5-1:1.0: skipping garbage [ 73.274005][ T42] cdc_wdm 5-1:1.0: skipping garbage [ 73.278027][ T42] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 73.280072][ T42] cdc_wdm 5-1:1.0: Unknown control protocol [ 73.552565][ T43] audit: type=1400 audit(1787128060.009:574): avc: denied { read write } for pid=7070 comm="syz.0.370" name="cdc-wdm0" dev="devtmpfs" ino=2901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 73.561707][ T7073] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 73.564901][ T43] audit: type=1400 audit(1787128060.009:575): avc: denied { open } for pid=7070 comm="syz.0.370" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 73.689136][ T7071] kvm_intel: kvm [7070]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xc2d9 [ 73.701273][ T7071] kvm: kvm [7070]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x351b [ 73.704021][ T7071] kvm: kvm [7070]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x40c4 [ 73.717103][ T7071] kvm: kvm [7070]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x5dba [ 73.782420][ T5822] usb 5-1: USB disconnect, device number 10 [ 74.446995][ T7084] loop5: detected capacity change from 0 to 7 [ 74.452714][ T7084] Dev loop5: unable to read RDB block 7 [ 74.454571][ T7084] loop5: AHDI p1 p3 p4 [ 74.455892][ T7084] loop5: partition table partially beyond EOD, truncated [ 74.459063][ T7084] loop5: p1 size 100663296 extends beyond EOD, truncated [ 74.463880][ T7084] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 74.504596][ T5722] udevd[5722]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 74.511939][ T5729] udevd[5729]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 74.575608][ T43] audit: type=1400 audit(1787128061.029:576): avc: denied { ioctl } for pid=7092 comm="syz.0.376" path="socket:[18484]" dev="sockfs" ino=18484 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.636978][ T43] audit: type=1400 audit(1787128061.089:577): avc: denied { execute } for pid=7097 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 74.708566][ T5822] IPVS: starting estimator thread 0... [ 74.758746][ T5735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.767522][ T5735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.771584][ T5735] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.775567][ T5735] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.780765][ T5735] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.808072][ T7104] IPVS: using max 45 ests per chain, 108000 per kthread [ 74.882398][ T5727] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 74.886174][ T5727] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 74.888857][ T5727] CPU: 1 UID: 0 PID: 5727 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.891786][ T5727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.894911][ T5727] RIP: 0010:klist_put+0x4d/0x1d0 [ 74.896495][ T5727] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c 1e 0d [ 74.902527][ T5727] RSP: 0018:ffffc90003caf700 EFLAGS: 00010202 [ 74.904448][ T5727] RAX: dffffc0000000000 RBX: ffff88803d65dc60 RCX: 0000000000000000 [ 74.906955][ T5727] RDX: 000000000000000b RSI: ffffffff8bb4a395 RDI: 0000000000000058 [ 74.909432][ T5727] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2248630 [ 74.911911][ T5727] R10: ffffffff91243183 R11: 0000000000000001 R12: 0000000000000000 [ 74.914394][ T5727] R13: 0000000000000001 R14: ffffffff91243140 R15: dffffc0000000000 [ 74.916901][ T5727] FS: 0000000000000000(0000) GS:ffff8880d5cd1000(0000) knlGS:0000000000000000 [ 74.919700][ T5727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.921782][ T5727] CR2: 00007f6e346aa6b0 CR3: 0000000033ebb000 CR4: 0000000000352ef0 [ 74.924273][ T5727] Call Trace: [ 74.925342][ T5727] [ 74.926305][ T5727] klist_remove+0x14c/0x2e0 [ 74.927748][ T5727] ? __pfx_klist_remove+0x10/0x10 [ 74.929346][ T5727] ? kobject_put+0xb9/0x640 [ 74.930796][ T5727] device_move+0x12d/0x1140 [ 74.932259][ T5727] hci_conn_del_sysfs+0x86/0x1a0 [ 74.933836][ T5727] hci_conn_del+0x506/0x1180 [ 74.935302][ T5727] hci_conn_hash_flush+0x186/0x280 [ 74.936915][ T5727] hci_dev_close_sync+0x5cf/0x13c0 [ 74.938545][ T5727] ? find_held_lock+0x2b/0x80 [ 74.940050][ T5727] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 74.941809][ T5727] hci_dev_do_close+0x2e/0xb0 [ 74.943300][ T5727] hci_unregister_dev+0x23f/0x690 [ 74.944890][ T5727] vhci_release+0x17d/0x230 [ 74.946353][ T5727] ? __pfx_vhci_release+0x10/0x10 [ 74.947945][ T5727] __fput+0x3ff/0xb50 [ 74.949222][ T5727] task_work_run+0x150/0x240 [ 74.950691][ T5727] ? __pfx_task_work_run+0x10/0x10 [ 74.952311][ T5727] do_exit+0x951/0x2ae0 [ 74.953635][ T5727] ? __pfx_stack_trace_save+0x10/0x10 [ 74.955324][ T5727] ? __pfx_do_exit+0x10/0x10 [ 74.956793][ T5727] ? do_raw_spin_lock+0x128/0x260 [ 74.958397][ T5727] ? find_held_lock+0x2b/0x80 [ 74.959895][ T5727] ? get_signal+0x7e0/0x21e0 [ 74.961365][ T5727] do_group_exit+0xd5/0x2a0 [ 74.962815][ T5727] get_signal+0x1ec7/0x21e0 [ 74.964261][ T5727] ? __pfx_get_signal+0x10/0x10 [ 74.965807][ T5727] arch_do_signal_or_restart+0x91/0x7e0 [ 74.967548][ T5727] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 74.969483][ T5727] exit_to_user_mode_loop+0x139/0x700 [ 74.971187][ T5727] ? rcu_is_watching+0x13/0xc0 [ 74.972701][ T5727] do_syscall_64+0x661/0x790 [ 74.974177][ T5727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.976034][ T5727] RIP: 0033:0x7f7e9d39d1c7 [ 74.977449][ T5727] Code: Unable to access opcode bytes at 0x7f7e9d39d19d. [ 74.979631][ T5727] RSP: 002b:00007ffc91bd22a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 74.982240][ T5727] RAX: ffffffffffffffff RBX: 000000000000e217 RCX: 00007f7e9d39d1c7 [ 74.984705][ T5727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffc91bd2360 [ 74.987181][ T5727] RBP: 00007ffc91bd2360 R08: 0000000000000000 R09: 0000000000000000 [ 74.989653][ T5727] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc91bd3450 [ 74.992124][ T5727] R13: 00007f7e9d434474 R14: 000055555dda04e8 R15: 0000000000000007 [ 74.994602][ T5727] [ 74.995601][ T5727] Modules linked in: [ 74.997672][ T5727] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 75.003292][ T5727] RIP: 0010:klist_put+0x4d/0x1d0 [ 75.005408][ T5727] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c 1e 0d [ 75.015549][ T5727] RSP: 0018:ffffc90003caf700 EFLAGS: 00010202 [ 75.020122][ T5727] RAX: dffffc0000000000 RBX: ffff88803d65dc60 RCX: 0000000000000000 [ 75.024360][ T5727] RDX: 000000000000000b RSI: ffffffff8bb4a395 RDI: 0000000000000058 [ 75.026963][ T5727] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2248630 [ 75.029773][ T5727] R10: ffffffff91243183 R11: 0000000000000001 R12: 0000000000000000 [ 75.034561][ T5727] R13: 0000000000000001 R14: ffffffff91243140 R15: dffffc0000000000 [ 75.037120][ T5727] FS: 0000000000000000(0000) GS:ffff8880d5cd1000(0000) knlGS:0000000000000000 [ 75.040835][ T5727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.042999][ T5727] CR2: 00007f6e346aa6b0 CR3: 000000000eb94000 CR4: 0000000000352ef0 [ 75.045493][ T5727] Kernel panic - not syncing: Fatal exception [ 75.047971][ T5727] Kernel Offset: disabled [ 75.049367][ T5727] Rebooting in 86400 seconds..