last executing test programs: 4.619874102s ago: executing program 2 (id=227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x0, 0xfffffffe, 0x20000044, 0x102005, 0x1]}, &(0x7f0000000000)=0x54) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5001000010001304000000000c000000fe80000000000000000000000000009d20010000000000000000000000000000000000004e2400000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1e00010000000000000000000000000000001032000000640101020000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000800000000020000fbff09ffffffffff00000000000000000800000000000000cc000000000000000500000000000000f6000000000000000000000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000040"], 0x150}, 0x1, 0x0, 0x0, 0x400}, 0x4000) 4.386795146s ago: executing program 2 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8005}, 0xc884) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) r13 = userfaultfd(0x801) ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r13, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r13, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) 3.289805931s ago: executing program 2 (id=234): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1) write$dsp(r0, &(0x7f0000000480)="75d512d39077459e67ee110daaf0413bc745ef85bc9f2141d513969bd8000000", 0x1000c) mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x11, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140), &(0x7f00000004c0)="e9ffe34448581c935e1e6b28275be9e40f465c3eee524da6fd0ddd1bd26fa7a1a79590a52e8ad60e000000c857633d00ef5e183d7b2158b2e750ff06ae478d39ad74f71ac25d893ab1abb0a1bd3ea8de96024130f83412a527e0b21b90eb783b4d7a28a823504dedbf1a552b1e625ad5a3e5b437e0b400adf4aa028fc1cb1d85d001ddace00c5f9b2759a19048873401ae51e4b01d2aba0008e84085246052c098d5d7c1cc217818a7da7b06e6f17c7b6a5243dbd62cc41bf33fbfeaed79b671b01cfdbd5fb3b6c45bc9f19763c3f4234820a7ad6ff47d693976309ff4ad90e22ef29ce88c7ace151a7d9da211eae27c40f000000000000000000050b1c6e24f7101f7bb1e315a4670771c9d03248838e1a11ccc89c1457af6f8b09c45458e4aba5d8fc932b6a0b1b66d64e3f26cc4c73b6a2343a48e1e641f7df8b8965c888c930d3ee50fc2b123e12bcaf5812e58344dc6b0cffda7930a792c4c94a7e865c33766585a21fbbea6ea9b7e660374c917500d83b5cf9cce2091fb7e", 0x17b, 0x1) 2.609682803s ago: executing program 1 (id=249): syz_emit_ethernet(0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c289d50528ca2b9b7ea6000000aaaaaaaaaaaa8100000086dd60b33c8300323a0020010000000000000000000000000002fe8000000000000000000000000000aa010000780000000060e3e62700002c0020010000000000000000000000000002fe8000000000000000"], 0x0) 2.60944057s ago: executing program 1 (id=250): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nfc_llcp={0x27, r1, 0xffffffffffffffff, 0x3, 0xfc, 0x78, "323448d6c26dd417596ab8fe275ddf8b752b1b67bf48ee282cc8bb70f2f4b627c3291bfddfddab377ae9215a6b8ccf3a6ee68b18fd23f3c23b5095aca65573", 0x19}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2a48ad89396393fc026f0edbadf1c0332445e944908ede3b5648f33642ed894f4a69d84887", 0x25}, {&(0x7f0000000100)}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000140)="09a38a8a887df2d98c206dee39bfa5805020340bcbe37421b76c8ffd7c4541838d566bc816e13196afabdcda9e4b6175cfa3ffa972d8b95d332f9f7b60af4f21445d98e036a3df2c0c7745a625dc7a932028aed4d95122fc285d5df16535418585cc1556a9b7", 0x66}], 0x4}, 0x8000) sendmmsg$inet6(r0, &(0x7f0000002700)=[{{&(0x7f0000000780)={0xa, 0x4e21, 0x6, @empty, 0xc}, 0x1c, 0x0}}], 0x1, 0x44) 2.519571029s ago: executing program 1 (id=251): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd26, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={0x0}) (fail_nth: 6) 2.07935975s ago: executing program 1 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'ni_daq_700\x00', [0x8001, 0x46, 0x1, 0x0, 0x1, 0xcc7, 0x8, 0x7, 0x100a, 0x100, 0x1002, 0x8, 0xb, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x7, 0x8, 0x5, 0x8, 0x4, 0xfffe, 0xfffffff8]}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000a40)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$inet(0x10, 0x3, 0x0) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000002980)={'wpan0\x00', 0x0}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) write$binfmt_misc(r11, &(0x7f0000000000), 0xfffffecc) (rerun: 32) sendmsg$NL802154_CMD_GET_INTERFACE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc08c}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x400000, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0x58}}, 0x0) 2.079261942s ago: executing program 1 (id=254): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x8}) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0xfffc) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)={0x2000200b}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x200080c1) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x32040, 0x0) ioctl$KDGKBMODE(r4, 0x4bfa, &(0x7f0000000040)) 1.188068134s ago: executing program 1 (id=260): socketpair(0x1, 0x100000005, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x84000, 0x0) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000002c0)='memory.pressure\x00', 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYRESOCT=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) clock_gettime(0x1, &(0x7f0000004f40)) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d80)="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", 0x1026}, {&(0x7f00000003c0)="7a897316b3c3eac84248740c78dfa0bfc7a926b17a578bbca03131b5d1b189dfc1b88377a7d3fcbb2d088522d407b6d37e3c04140e855f2bb40b3f5d2a7ac3e2bf4a568266c148ab848bbdab08407c915c12a72fe605c87ca2ab5db3ddda5531381c0859dc4b32af79cd3f22707be070ba39c4c290420b7c8b052f0ee5c7240afeb3e27bf59e14ac3f5e7994e695a2141e5ce1f9e4517b7de2be71b783417361c8061e7ede", 0xa5}, {&(0x7f0000000480)="4d7635b78bf7cec9ed0161e0f2e9db0f5d2dfcb9310b569a0de721f8358a34c85164e678d7caa81ced846fccdc3906d33a68723cf1c47b7ba6d3d03a700c2a904e5884707588bdabaa962df07fa46c39392237a86b4e2b6aed46a3d41968f8d67a0d965439143dfa1636549b031450672c68419ca19182397851cd08a7654a45ce66f07e3dcb152ba0a1fe1a6ede8740360bdda89d47d7e4d7c0f872124e921726763e51777dcd737d", 0xa9}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)}}], 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r9, @ANYBLOB="00807c679e67c62a4f00f5f19ff2ba2713bd0000000800001800128008000100767469000c00028008000400640101022348fdf0a86e5713b605a5bdf3d88caca89bcadcf8e21b7b184fd1bc0fad78c65e073841ff262bd0bc8bff6255023e42c5203fd915af6bf8d68d45482a0ed90ee81e3cf202b58e0aaefac03ba46d414436724aeae195d4e3230b616912d74edd69bfc09f9227db4a511e343b4179811622d514c1d0bedbc27d3c603172a8b0439afea38d9b47190a60701447fac63a5250bad976f9d668a657f5999423420da099b532c44df9ba27694b9e68622d67627c12"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24040810) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) 668.518541ms ago: executing program 3 (id=266): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r1 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r1, 0x107, 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0xa0, r3, 0x200, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @NL80211_ATTR_AUTH_TYPE={0x6b}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x0, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @key_params]}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffff, 0x43}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x80) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x8, 0x0, 0x3, 0x0, 0x1001}, &(0x7f0000000100)=0x20) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000100), 0xffffffffffffff97) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x400}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f00000001c0)={0x0}) 667.829043ms ago: executing program 0 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x188}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}]}, 0x38}}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 667.352195ms ago: executing program 3 (id=268): getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4006001}, 0xc000) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x148) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x4e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40000000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0xd0) read$hiddev(r0, &(0x7f0000000380)=""/4096, 0x1000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000001, 0x11}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb46}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x18, 0x140b, 0x2, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20014}, 0x40) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x7001c350}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x142, 0x7d}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) epoll_pwait(r0, &(0x7f00000016c0)=[{}, {}, {}], 0x3, 0x2, &(0x7f0000001700)={[0x4]}, 0x8) ioctl$COMEDI_RANGEINFO(r0, 0x80106408, &(0x7f0000001780)={0x1, &(0x7f0000001740)=[{}]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000017c0)={0x2, "9b5d1d5a2f5d8784a74360d2ca6ba3abf6d7b8ddb951cc382131c0a24459e0e6", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000001800)={"abb8fca3f6b33dbb643746a64bd1aba1b8245e35d2f9f676a512f087fe25a634", r0, 0xffffffffffffffff}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xd) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000001840)={0x7f, 0xb17, 0x1, 0xff, 0x4, 0x0, [{0x3ff, 0x6, 0x0, '\x00', 0x900}, {0x7, 0x2, 0x6, '\x00', 0x4}, {0x8, 0x9, 0x7, '\x00', 0x100}, {0xffff, 0x6, 0x1, '\x00', 0x801}]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001980)={@mcast1, 0x43, r6}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001a80)={'tunl0\x00', &(0x7f00000019c0)=@ethtool_flash={0x33, 0xd, './file0\x00'}}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000001bc0)=@buf={0xe1, &(0x7f0000001ac0)="a67141b93d716096e6a3525f9234653464b9cb4d8e9c7970d3c550bf1d4b45a9750366d40a846fe66b6fa72af6d02d605e97251e7ae2dd6d61a060ccd62c3446a93b18f97e91a77e05f5b952478917b2043029455b5a99e2955b1e8badbe03e9b879eeab73c93b7a779d6b15b2e8512d116278b3b56d170f223e331cfc2c1598928eed25cf0e2c17b0b34bb44c792aa38a9083be83e2074785a1fe8019d9662b7c52f7a5fa2bc0843417ef9fa3966bcb4970a7c5e2859870ecef0b2977b24cbf265e255b3a975a3882b8aa426ed7ddea3fcb1f5ad9db1808441dcfa0215edc7940"}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c40), r0) getpeername$packet(r0, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001cc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001d40)={'gretap0\x00', &(0x7f0000001d00)={'gre0\x00', 0x0, 0x8008, 0x1, 0x4, 0x3ff, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x68, 0x0, 0xff, 0x2f, 0x0, @broadcast, @broadcast, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001f40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d80)={0x15c, r8, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1717419dd02aae2d}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x1) rmdir(&(0x7f0000001f80)='./file0\x00') ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f00000023c0)={{&(0x7f0000002340)={'GENERAL\x00', {&(0x7f0000002080)=@adf_dec={@normal='NumberCyInstances\x00', {0x7}, {&(0x7f0000001fc0)=@adf_hex={@normal='NumberCyInstances\x00', {0x400}}}}}, {&(0x7f00000022c0)={'Accelerator1\x00', {&(0x7f0000002200)=@adf_str={@normal='NumberCyInstances\x00', {"874d76b3b7c1aa7302014287a3b4769f00aed9e77604ecc56a7785dccca5dedea97b5a671110454b90638dbd33b7cbcc06bade083e3b40d7dd2259d47cbbbc93"}, {&(0x7f0000002140)=@adf_hex={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {0x8}}}}}}}}}, 0x6}) 590.038368ms ago: executing program 3 (id=269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 588.020781ms ago: executing program 3 (id=270): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "17c1b7df60c70000"}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900400000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 586.711479ms ago: executing program 0 (id=271): mlock(&(0x7f0000ff4000/0x1000)=nil, 0x1000) 519.998267ms ago: executing program 0 (id=272): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffd, 0x7, 0xfe, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="a29f7acda0b77e", 0x0, 0x80000, 0x14, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x5, 0x80000) 519.590259ms ago: executing program 3 (id=273): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000f9a000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaacce39067774286dd600cbb4500283a00fe880000000000000000000000000001fe8000000000000000000000000000aa020090780000000000000000000000000000000000000000fc010000000000000000000000000000550dd568be672b5e8c65bb08807c4c35feb5ad32800a8f0f36742362263ef2d016e2e8c02fbb3b613f0d557a9954f912552b8a7b731cfa93d13e4cfa78040060f5e9a3a578d2578f5500d675964aa4b5d6d918ac9b870b356f0cc65924a944bc909f7f91b4f0a7450362e7ff8133c45e06ae133b0e679022f67700f777ac9c9c8396ae9fde9026686a5d693b4b04d79a1440337522b84c28730dd74e24ca96d94f000000000000000000"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="09002bbd7000fbdbdf253a00000008000300", @ANYRES32=r9, @ANYBLOB="0400e191ab6e27a9035b000600650003000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x808}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x10001d}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x20000000) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000002000000a003000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r12, &(0x7f0000000080), 0x0}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x50, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd}) r13 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r13, 0x0, 0x0) fchdir(r14) 519.272921ms ago: executing program 0 (id=274): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB="26753ca8a46b7de83b042ab70a000000000000004bbcd6bcd83d26d1534eb1880ece503134a4871fb7fdd4", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x884) r8 = openat$kvm(0x0, &(0x7f0000000000), 0x101400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) setsockopt(r4, 0x7, 0x5, &(0x7f00000000c0)="af71f09ac1af13da9ec00080aa2123d9a4f854f3663b99a2b65fa3f92896f595aaed822c42a302acf1", 0x29) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x47cc}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x48, "3495db4329dc766e052c1aa52e188b1215bde84cdcda91f114028ff97d62392c9666156ac10621044379d56f6276ad2569f272c27e0c5743cc31f95cd420afddd2305eb5bc8bc3cb"}, &(0x7f00000003c0)=0x50) getsockopt$inet_sctp_SCTP_STATUS(r12, 0x84, 0xe, &(0x7f0000000400)={r13, 0x8, 0x1, 0x1, 0x3ff, 0x5, 0x3ff, 0x2, {r14, @in={{0x2, 0x4e20, @multicast2}}, 0x8001, 0x1, 0x7, 0x3ff, 0x9}}, &(0x7f0000000500)=0xb0) 208.286052ms ago: executing program 2 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYRES64=0x0], 0xb8}}, 0x2) 201.29718ms ago: executing program 0 (id=276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000157000200e00000010c00028005000100000000002c00028014000180080001000000000008000200ac1e00010c00028005000100000000000600000800074000000001"], 0x6c}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000001300)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) 200.830411ms ago: executing program 3 (id=277): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvmmsg(r3, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x7}], 0x1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYRESHEX=r2, @ANYRES32=r2, @ANYRES16=r1], 0x74}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 200.337498ms ago: executing program 2 (id=278): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x67]}, 0x8, 0x1000) read(r0, &(0x7f0000000040)=""/104, 0x68) connect(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x5}}, 0x80) io_setup(0x9, &(0x7f0000000140)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x5, &(0x7f00000015c0)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f0000000180)="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", 0x1000, 0x8, 0x0, 0x2, r0}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f00000011c0)="dcae326038c1821fe2c7544f49797a2c3031754e26632608d596c40cac52d35431e6211b8b4c6d85fcf5136fb78a040ef9a806820ce7df723d89307f679cd488509525e3d0127b2c1ab1df24f7d140bd53f011f2e9aa6cd96776565fdf85216a258d20a79e25e6345d7c1ed9a51923855cd637605c8ae2006507b2ecc61e8f916f514e", 0x83, 0xb, 0x0, 0x251349342cedc123, r0}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x2, 0x67ce, r0, &(0x7f00000012c0)="7f59a56663cad3df6ad9548748e3d040b3905c47f07728936ff1769d94bde0e123a8f9f5cbf489056e47109c5a4f256dfc3e3981d477560db1ba9c528b9781b2b109c9d6776be87e2295ed349d6e03a1b1831e897e0df628363988344adfd7ba94de4c31855541423187dc5444f2e3352fb26fd94da4c42936394b0cf281149f311819caece04e8e6eab49a3a83af0a016a6a0509847", 0x96, 0x101, 0x0, 0x2, r0}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f00000013c0)="93a9d41f3c8753014a2a3efa33a7570de8dbea719c907f0245b01972c409f47381936dc22cc38cc7d8787af0b7132c51baa14c5868bfa78f16cd3ea492b731e7b13ce99ca9776ad65954c8db4d5419bc168546cbee7770b781f7cedd826d9a086f002383c0241731ca856b82a416d067a8c87438082778300f6370", 0x7b, 0x2, 0x0, 0x2, r0}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x400, 0xffffffffffffffff, &(0x7f0000001480)="5bb71d9a8d81f836d8f9d2a764f28aacf17bdfbdae6194c0f7d6acb6ca085918fd8b31c5957d4f0380789ab8d76a62cb670c703ce8f1879332da8bbf883ba896a8e01a6fce9d4cc8b5971b0e4ac0c35731f5c39ba9753f9f6d0a8eaaeaa79d577e628afb98ffbb14a7b9d8443c15c8b6e791d69c7ac5566e2ba9f57d710fe3bf08619c2b5519054b58e52580c0ef1869b740324352dc867398be96383899148ae1983e0e2cea558f3ab89a02f92c69034e899c61a89a111ccb5e470266835ead4145d64f3da261f36ba314392e563481ffdefebc4bed0ac859db762df28bc9da40bb13", 0xe3, 0x6, 0x0, 0x0, r0}]) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000001600), 0x305080, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000001640)={0x101, 0x100020000, 0x5, 0x1}) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) r4 = syz_io_uring_setup(0x3841, &(0x7f0000001680)={0x0, 0xc52d, 0x400, 0x0, 0x38f, 0x0, r0}, &(0x7f0000001700), &(0x7f0000001740)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000001780), 0x1) preadv(r4, &(0x7f0000001b80)=[{&(0x7f00000017c0)=""/33, 0x21}, {&(0x7f0000001800)=""/143, 0x8f}, {&(0x7f00000018c0)=""/246, 0xf6}, {&(0x7f00000019c0)=""/194, 0xc2}, {&(0x7f0000001ac0)=""/81, 0x51}, {&(0x7f0000001b40)=""/46, 0x2e}], 0x6, 0x6, 0x1) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f000099f000/0x18000)=nil, &(0x7f0000001c80)=[@text32={0x20, &(0x7f0000001c00)="66b87e000f00d836660f38819600300000660f38822bc744240000100000c7442402c0842bb5c7442406000000000f0114240f01c366baf80cb874bca686ef66bafc0c66edb9800000c00f3235010000000f30b9800000c00f3235000800000f3066ba410066b8295266efce", 0x6c}], 0x1, 0x4, &(0x7f0000001cc0)=[@cstype3], 0x1) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000001d00)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x58, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044044}, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) connect$unix(r0, &(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002240)={r0, 0x20, &(0x7f0000002200)={&(0x7f00000020c0)=""/222, 0xde, 0x0, &(0x7f00000021c0)=""/6, 0x6}}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002280)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', 0x0, r0, 0x3, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x11, 0x6, &(0x7f0000001f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000001f40)='GPL\x00', 0x800, 0xef, &(0x7f0000001f80)=""/239, 0x41100, 0x35, '\x00', 0x0, @fallback=0x1a, r0, 0x8, &(0x7f0000002080)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x3, &(0x7f0000002300)=[r7], &(0x7f0000002340)=[{0x2, 0x5, 0xb}, {0x4, 0x5, 0x2, 0x9}, {0x5, 0x3, 0x7, 0xb}], 0x10, 0xe4}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002440)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r10 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002540)={{0x1, 0x1, 0x18, r9, {r10, r11}}, './file0\x00'}) ioctl$KVM_GET_FPU(r12, 0x81a0ae8c, &(0x7f0000002580)) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b00)=@bpf_lsm={0x1d, 0x13, &(0x7f0000002940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x620a6ff8d29708cd, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit]}, &(0x7f0000002a00)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002a40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000002a80)={0x0, 0x9, 0x8, 0xffffffff}, 0x10, r6, 0x0, 0x0, &(0x7f0000002ac0)=[r12, r0, r4, r0, r0], 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0xe, 0xd, &(0x7f0000002740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x400}, [@generic={0xa, 0xa, 0x7, 0xff01, 0x8001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000027c0)='GPL\x00', 0x6, 0xc0, &(0x7f0000002800)=""/192, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r12, 0x8, &(0x7f00000028c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002900)={0x0, 0x6, 0x5, 0x53295c46}, 0x10, r6, r13, 0x3, 0x0, &(0x7f0000002bc0)=[{0x5, 0x4, 0x4, 0x5}, {0x1, 0x4, 0xf, 0xb}, {0x5, 0x2, 0xb, 0xc}]}, 0x94) sendmsg$netlink(r8, &(0x7f0000005140)={&(0x7f0000002cc0)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005100)=[{&(0x7f0000004d40)={0x3c0, 0x1d, 0x2, 0x70bd25, 0x25dfdbfb, "", [@generic="35196fb0fbaaf70d6209bc39f269de10edcd004527d110e5ea4fb87735d6ed9bdd556aeee0fe17933a441b19b0cb48673bc0c81342000ffa352db36a4b15edbaa6be29c1ca48524a7b3beef3140bd4c36dc898de0ca303a28d71d2d70f446300c0e60fd57c413a7f09b30e3d073ae77ae95599987c8538d079a8c7d634dda36115682e8a21948fd8a5de21105132753004218938646ee577d2eb62c9b652ce8385290bc7fc370ade53ae2f73ff3708887e6f0b10698e8cad6259437f3423dd169e85cbd0a7775c2702fc6f2c9c5148afbbc7566aa5348407657136b8474b6e8b866793f5751193f53d928221455dd3cc", @nested={0x14f, 0xb74, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @uid}, @typed={0x14, 0x100, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0xd4}, @generic="f74a3e7aab610acd56e6ab12d9003da75a696e3b4e72fd1d8d5aa30339ca446ef83789bfe3b0b388b3b20f38a1aa910b48cf0a610834b4271eb7c967fa070855356e9d3fdba5289c7e67a99e4fd4b08b857b23da6b14acee4919fe24f0d0b201", @generic="1e33186b2680a185011160471b5eca3f94a474b9761a0544f96acef55be9ea0576a42d060d527ed4443803875439eecfbf00cd59fd2d61ad7cfbf25672b129269a6764082f39be4cc856be6e9eb3c86f242398dce37ef2c7e22b2ea2bfcce692efecbd46d09afbe137c22164074903ae414642fbb3623730db97e1f5eac27dd06682ccdba353fdd29cb076d879f1bd9a3cfb7c322767ac4a25297205f8973f83f1f6e1c8183958074c504cd31d512d63ae2ba70b02dab9ef674ccc691cb847376e8076430e0277", @nested={0x4, 0x13f}]}, @nested={0x16d, 0xa7, 0x0, 0x1, [@nested={0x4, 0x4c}, @typed={0x20, 0x141, 0x0, 0x0, @str='/proc/sys/net/ipv4/tcp_rmem\x00'}, @nested={0x4, 0x78}, @nested={0x4, 0x6c}, @nested={0x4, 0xcc}, @generic="3f199a2e954820d92c21faf14793ae0cd09fac99bcfe523401c6c295e6f85df6558a35fc853d0f59f8653c3e75ff4d1046b14525f536533162639b120e8c6c7c3b55f6772632387a348c266891e04c0b615f517fd56b6b5dc09434a3f79cf850645e73acb605cb05acec7680bac7a96693df2c647649e5645cf7dd6f98919054bdf5d4ab4661f60de8cc908d59dca0b64fa153", @generic="165b86c181c4fe64957ced31ae916e0954710e5b1e33c9d147f4662de2cb0714cbf27e77b68d837cc8bbb0bed71f77d8537aa2a6054b4b2976218cd506f3e5a5bfc6ed265aa5675dac05d0e2a613414e57d8290b734462920c7c98cf0b3aeebd2e922db794450b35dbc49b406f0d4d8cf42387a6380c59b5c1f63ed024e3fd9fa9280ee14819a911fba813d9f4e1085a3e2dd9296240fc8f96ad", @typed={0x6, 0x4d, 0x0, 0x0, @str='-\x00'}, @nested={0x4, 0xc8}]}]}, 0x3c0}], 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 109.809918ms ago: executing program 0 (id=279): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044004}, 0x2000800) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) (async) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="080107a40d0200007c0200000a0018001003000000000000000000007b1c741b84c3f7f5eb"], 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r5, 0x0) (async) listen(r5, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000068a7d9f6"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x7, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8041, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd0000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) fcntl$dupfd(r6, 0x0, r6) (async) r7 = fcntl$dupfd(r6, 0x0, r6) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffd, 0x6, 0x4, @buffer={0x0, 0x1004, &(0x7f00000018c0)=""/4100}, &(0x7f0000000440)="15188ea093f1", 0x0, 0x84, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000006000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/28], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000006000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000280)='kvm_unmap_hva_range\x00', r9}, 0x18) 0s ago: executing program 2 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r1 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0x1cb) close(r2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_subtree(r3, 0x0, 0x9) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={r4, 0x64, "331733507b7a3b5a816d73c99c1d08b03a5d901d4ba0de584644fa42bad26c05ab5297929e2d950095a291b729dc6a2686d9354b4a9162ec66ad4d5a374eae1a59ddd01b72cce5d92160ff9bd3a7ecb9733e29efb04219bd11fd44e9dc31dac4ce1a1e77"}, &(0x7f0000000140)=0x6c) kernel console output (not intermixed with test programs): [ 44.210574][ T40] audit: type=1400 audit(1768575001.895:61): avc: denied { siginh } for pid=5835 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:53294' (ED25519) to the list of known hosts. [ 46.494266][ T40] audit: type=1400 audit(1768575004.205:62): avc: denied { name_bind } for pid=5847 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.522785][ T40] audit: type=1400 audit(1768575004.235:63): avc: denied { execute } for pid=5848 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.531718][ T40] audit: type=1400 audit(1768575004.235:64): avc: denied { execute_no_trans } for pid=5848 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.619380][ T40] audit: type=1400 audit(1768575006.325:65): avc: denied { getattr } for pid=5864 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.ifb1.ipv4ll" dev="tmpfs" ino=1952 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.630541][ T40] audit: type=1400 audit(1768575006.325:66): avc: denied { unlink } for pid=5864 comm="rm" name="resolv.conf.ifb1.ipv4ll" dev="tmpfs" ino=1952 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.649660][ T5848] cgroup: Unknown subsys name 'net' [ 48.785756][ T5848] cgroup: Unknown subsys name 'cpuset' [ 48.794755][ T5848] cgroup: Unknown subsys name 'rlimit' [ 49.041269][ T5886] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.912903][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.271564][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 53.271574][ T40] audit: type=1400 audit(1768575010.985:85): avc: denied { execmem } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.451215][ T40] audit: type=1400 audit(1768575011.155:86): avc: denied { create } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.457733][ T40] audit: type=1400 audit(1768575011.155:87): avc: denied { read write } for pid=5936 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.465549][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.471283][ T40] audit: type=1400 audit(1768575011.155:88): avc: denied { open } for pid=5936 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.472200][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.480651][ T40] audit: type=1400 audit(1768575011.155:89): avc: denied { ioctl } for pid=5936 comm="syz-executor" path="socket:[6025]" dev="sockfs" ino=6025 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.487327][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.496080][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.496752][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.499575][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.501624][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.503657][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.507249][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.509459][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.512280][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.514371][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.516655][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.519655][ T5299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.523266][ T5299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.523686][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.525501][ T40] audit: type=1400 audit(1768575011.225:90): avc: denied { read } for pid=5936 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.531670][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.537132][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.537836][ T5299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.540684][ T40] audit: type=1400 audit(1768575011.235:91): avc: denied { open } for pid=5936 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.549537][ T40] audit: type=1400 audit(1768575011.235:92): avc: denied { mounton } for pid=5936 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.556932][ T5299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.735406][ T40] audit: type=1400 audit(1768575011.445:93): avc: denied { module_request } for pid=5936 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.767889][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 53.961443][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 53.983062][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.986828][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.990137][ T5936] bridge_slave_0: entered allmulticast mode [ 53.995211][ T5936] bridge_slave_0: entered promiscuous mode [ 54.000137][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 54.022460][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.025494][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.028671][ T5936] bridge_slave_1: entered allmulticast mode [ 54.033011][ T5936] bridge_slave_1: entered promiscuous mode [ 54.091115][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 54.125847][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.136041][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.162619][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.165827][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.168852][ T5937] bridge_slave_0: entered allmulticast mode [ 54.172916][ T5937] bridge_slave_0: entered promiscuous mode [ 54.222541][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.225654][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.228693][ T5937] bridge_slave_1: entered allmulticast mode [ 54.231728][ T5937] bridge_slave_1: entered promiscuous mode [ 54.263037][ T5936] team0: Port device team_slave_0 added [ 54.272559][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.283823][ T5936] team0: Port device team_slave_1 added [ 54.305290][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.307867][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.310234][ T5945] bridge_slave_0: entered allmulticast mode [ 54.313108][ T5945] bridge_slave_0: entered promiscuous mode [ 54.317392][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.342526][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.345551][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.348721][ T5947] bridge_slave_0: entered allmulticast mode [ 54.352814][ T5947] bridge_slave_0: entered promiscuous mode [ 54.357745][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.360775][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.364352][ T5945] bridge_slave_1: entered allmulticast mode [ 54.368156][ T5945] bridge_slave_1: entered promiscuous mode [ 54.393054][ T5937] team0: Port device team_slave_0 added [ 54.395299][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.397505][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.399844][ T5947] bridge_slave_1: entered allmulticast mode [ 54.402685][ T5947] bridge_slave_1: entered promiscuous mode [ 54.419346][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.421815][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.429721][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.435339][ T5937] team0: Port device team_slave_1 added [ 54.445521][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.449975][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.452683][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.460636][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.483067][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.488596][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.507601][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.519129][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.522045][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.532347][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.540342][ T5936] hsr_slave_0: entered promiscuous mode [ 54.542743][ T5936] hsr_slave_1: entered promiscuous mode [ 54.564145][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.566934][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.575584][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.595163][ T5945] team0: Port device team_slave_0 added [ 54.600047][ T5947] team0: Port device team_slave_0 added [ 54.603031][ T5945] team0: Port device team_slave_1 added [ 54.624357][ T5947] team0: Port device team_slave_1 added [ 54.650739][ T5937] hsr_slave_0: entered promiscuous mode [ 54.653299][ T5937] hsr_slave_1: entered promiscuous mode [ 54.655475][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 54.657336][ T5937] Cannot create hsr debugfs directory [ 54.675322][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.677575][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.685692][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.690025][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.692383][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.700986][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.715780][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.718666][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.729269][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.734548][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.737343][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.748024][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.855046][ T5947] hsr_slave_0: entered promiscuous mode [ 54.858267][ T5947] hsr_slave_1: entered promiscuous mode [ 54.861470][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 54.863898][ T5947] Cannot create hsr debugfs directory [ 54.898673][ T5945] hsr_slave_0: entered promiscuous mode [ 54.902013][ T5945] hsr_slave_1: entered promiscuous mode [ 54.904950][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 54.907363][ T5945] Cannot create hsr debugfs directory [ 55.083004][ T5936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.097058][ T5936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.109970][ T5936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.144152][ T5936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.218789][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.227054][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.240209][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.246992][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.308807][ T5947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.318624][ T5947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.327535][ T5947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.340198][ T5947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.402909][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.407680][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.415675][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.421487][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.433025][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.465039][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.479256][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.482448][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.495283][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.504891][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.507919][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.529879][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.545761][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.548805][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.568080][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.570395][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.591852][ T5943] Bluetooth: hci0: command tx timeout [ 55.591911][ T5299] Bluetooth: hci1: command tx timeout [ 55.596718][ T5944] Bluetooth: hci2: command tx timeout [ 55.598908][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.601615][ T5299] Bluetooth: hci3: command tx timeout [ 55.608492][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.633267][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.644176][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.652877][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.655444][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.660204][ T40] audit: type=1400 audit(1768575013.365:94): avc: denied { sys_module } for pid=5936 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.672547][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.674973][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.678487][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.680886][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.690701][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.693328][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.760044][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.773989][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.814301][ T5936] veth0_vlan: entered promiscuous mode [ 55.818259][ T5937] veth0_vlan: entered promiscuous mode [ 55.823745][ T5936] veth1_vlan: entered promiscuous mode [ 55.834302][ T5937] veth1_vlan: entered promiscuous mode [ 55.860156][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.863933][ T5936] veth0_macvtap: entered promiscuous mode [ 55.875377][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.878578][ T5936] veth1_macvtap: entered promiscuous mode [ 55.883899][ T5937] veth0_macvtap: entered promiscuous mode [ 55.896711][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.900194][ T5937] veth1_macvtap: entered promiscuous mode [ 55.912672][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.932739][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.936448][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.941604][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.944967][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.948550][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.958108][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.976768][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.980420][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.989278][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.003210][ T5947] veth0_vlan: entered promiscuous mode [ 56.005410][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.011516][ T5945] veth0_vlan: entered promiscuous mode [ 56.022606][ T5947] veth1_vlan: entered promiscuous mode [ 56.039388][ T5945] veth1_vlan: entered promiscuous mode [ 56.075527][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.078126][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.079121][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.087046][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.096020][ T5945] veth0_macvtap: entered promiscuous mode [ 56.108865][ T5945] veth1_macvtap: entered promiscuous mode [ 56.118151][ T5947] veth0_macvtap: entered promiscuous mode [ 56.128378][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.131513][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.145223][ T5947] veth1_macvtap: entered promiscuous mode [ 56.148611][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.154999][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.158346][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.166119][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.178925][ T4313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.181731][ T5936] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.184952][ T4313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.194387][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.197685][ T4313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.201608][ T4313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.220539][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.247674][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.261231][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.271315][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.293800][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.304063][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.307286][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.365807][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.369096][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.385362][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.396631][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.418165][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.420973][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.489990][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 56.498691][ T6034] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.503267][ T6034] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6034 comm=syz.3.4 [ 56.666483][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 56.670727][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 56.734432][ T6045] syzkaller0: entered promiscuous mode [ 56.736813][ T6045] syzkaller0: entered allmulticast mode [ 56.779228][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5'. [ 56.999119][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 57.040647][ T6059] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 57.251437][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 57.273112][ T6081] random: crng reseeded on system resumption [ 57.278526][ T6081] syz_tun: entered allmulticast mode [ 57.281848][ T6081] netlink: 'syz.1.20': attribute type 11 has an invalid length. [ 57.290215][ T6080] syz_tun: left allmulticast mode [ 57.335547][ T6090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23'. [ 57.466000][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28'. [ 57.475303][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 57.478233][ T6108] netlink: 2 bytes leftover after parsing attributes in process `syz.3.28'. [ 57.529047][ T6110] random: crng reseeded on system resumption [ 57.670922][ T5944] Bluetooth: hci1: command tx timeout [ 57.670941][ T5943] Bluetooth: hci0: command tx timeout [ 57.672768][ T5944] Bluetooth: hci2: command tx timeout [ 57.676437][ T5299] Bluetooth: hci3: command tx timeout [ 58.060916][ T6021] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.241253][ T6021] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 58.245124][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.248699][ T6021] usb 6-1: Product: syz [ 58.250469][ T6021] usb 6-1: Manufacturer: syz [ 58.253491][ T6021] usb 6-1: SerialNumber: syz [ 58.267007][ T6021] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 58.286025][ T5976] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 58.336216][ T40] kauditd_printk_skb: 157 callbacks suppressed [ 58.336232][ T40] audit: type=1400 audit(1768575016.045:252): avc: denied { mount } for pid=6151 comm="syz.2.45" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.356501][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.369817][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.881821][ T40] audit: type=1400 audit(1768575016.585:253): avc: denied { read write } for pid=6168 comm="syz.3.50" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.885099][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.892260][ T40] audit: type=1400 audit(1768575016.595:254): avc: denied { open } for pid=6168 comm="syz.3.50" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.900932][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.903370][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.905717][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.907772][ T6169] geneve2: entered promiscuous mode [ 58.908074][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.910259][ T6169] geneve2: entered allmulticast mode [ 58.913179][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.913197][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.913214][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.913230][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.913247][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.916013][ T10] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 58.952251][ T6170] fido_id[6170]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.018986][ T40] audit: type=1400 audit(1768575016.725:255): avc: denied { append } for pid=6171 comm="syz.3.51" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.148433][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.154820][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.159697][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.162704][ T144] usb 6-1: USB disconnect, device number 2 [ 59.165924][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.225909][ T6182] xt_ecn: cannot match TCP bits for non-tcp packets [ 59.266848][ T40] audit: type=1400 audit(1768575016.975:256): avc: denied { create } for pid=6183 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.276769][ T40] audit: type=1400 audit(1768575016.985:257): avc: denied { connect } for pid=6183 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.285203][ T40] audit: type=1400 audit(1768575016.985:258): avc: denied { write } for pid=6183 comm="syz.1.53" path="socket:[8070]" dev="sockfs" ino=8070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.350875][ T5976] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 59.353334][ T5976] ath9k_htc: Failed to initialize the device [ 59.356397][ T144] usb 6-1: ath9k_htc: USB layer deinitialized [ 59.416085][ T6194] netlink: 'syz.3.56': attribute type 21 has an invalid length. [ 59.447891][ T40] audit: type=1400 audit(1768575017.155:259): avc: denied { create } for pid=6195 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.475495][ T40] audit: type=1400 audit(1768575017.185:260): avc: denied { read write } for pid=6198 comm="syz.0.57" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 59.485526][ T40] audit: type=1400 audit(1768575017.195:261): avc: denied { open } for pid=6198 comm="syz.0.57" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 59.491595][ T6196] capability: warning: `syz.3.58' uses deprecated v2 capabilities in a way that may be insecure [ 59.497888][ T6197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 59.501908][ T6197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 59.504989][ T6197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 59.507857][ T6197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 59.513651][ T6197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 59.516773][ T6197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 59.519861][ T6197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 59.524044][ T6197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 59.528016][ T6197] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 59.750946][ T5299] Bluetooth: hci1: command tx timeout [ 59.753085][ T5944] Bluetooth: hci0: command tx timeout [ 59.761122][ T5944] Bluetooth: hci3: command tx timeout [ 59.762967][ T5299] Bluetooth: hci2: command tx timeout [ 60.210623][ T6235] warning: `syz.1.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.222883][ T6235] Zero length message leads to an empty skb [ 60.342772][ T6244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.534343][ T6259] SELinux: ebitmap: truncated map [ 60.539451][ T6259] SELinux: failed to load policy [ 60.540250][ T6260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.599537][ T6264] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 60.617380][ T6263] Mount JFS Failure: -5 [ 60.618909][ T6263] jfs_mount failed w/return code = -5 [ 60.725508][ T6273] ptrace attach of "/syz-executor exec"[5945] was attempted by ""[6273] [ 61.011177][ T6287] XFS (nbd2): SB validate failed with error -5. [ 61.261279][ T6297] mmap: syz.2.87 (6297) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.597535][ T6321] netlink: 'syz.0.92': attribute type 4 has an invalid length. [ 61.632115][ T6324] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 61.639387][ T6324] vlan2: entered allmulticast mode [ 61.641151][ T6324] veth0_to_bond: entered allmulticast mode [ 61.661816][ T839] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.689767][ T6326] __nla_validate_parse: 8 callbacks suppressed [ 61.689789][ T6326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.93'. [ 61.821018][ T839] usb 8-1: Using ep0 maxpacket: 16 [ 61.831028][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.841457][ T5944] Bluetooth: hci3: command tx timeout [ 61.841535][ T5949] Bluetooth: hci1: command tx timeout [ 61.841657][ T5943] Bluetooth: hci0: command tx timeout [ 61.843505][ T5299] Bluetooth: hci2: command tx timeout [ 61.843600][ T839] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 61.843621][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.843637][ T839] usb 8-1: Product: syz [ 61.843647][ T839] usb 8-1: Manufacturer: syz [ 61.843657][ T839] usb 8-1: SerialNumber: syz [ 61.847064][ T839] usb 8-1: config 0 descriptor?? [ 61.883551][ T839] hub 8-1:0.0: bad descriptor, ignoring hub [ 61.885436][ T839] hub 8-1:0.0: probe with driver hub failed with error -5 [ 61.889471][ T839] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input6 [ 62.013384][ T6332] netlink: 'syz.0.95': attribute type 4 has an invalid length. [ 62.075797][ T6337] xt_hashlimit: max too large, truncated to 1048576 [ 62.078765][ T6335] xt_hashlimit: max too large, truncated to 1048576 [ 62.087790][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96'. [ 62.269748][ T6335] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.302534][ T1346] usb 8-1: USB disconnect, device number 2 [ 62.330945][ T6082] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.440958][ T839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.592131][ T839] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 62.595495][ T839] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 62.598728][ T839] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 62.601686][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.608070][ T6344] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 62.616216][ T839] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.848949][ T839] usb 7-1: USB disconnect, device number 2 [ 62.882243][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 62.925009][ T6348] team0: Port device team_slave_0 removed [ 62.955350][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 62.959092][ T6354] bridge_slave_1: left allmulticast mode [ 62.961550][ T6354] bridge_slave_1: left promiscuous mode [ 62.965094][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.973120][ T6354] bridge_slave_0: left allmulticast mode [ 62.975471][ T6354] bridge_slave_0: left promiscuous mode [ 62.977937][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.080269][ T6358] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 63.265694][ T6365] netlink: 10 bytes leftover after parsing attributes in process `syz.0.103'. [ 63.326729][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 63.363273][ T6367] team0: Port device team_slave_0 removed [ 63.376871][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 63.376886][ T40] audit: type=1400 audit(1768575021.085:335): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.531233][ T1346] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 63.564843][ T40] audit: type=1400 audit(1768575021.275:336): avc: denied { allowed } for pid=6376 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.572522][ T6378] (syz.0.106,6378,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 63.576772][ T6378] (syz.0.106,6378,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 63.664238][ T6377] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.107'. [ 63.692403][ T1346] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 63.697302][ T1346] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 63.705384][ T1346] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.709312][ T1346] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 63.714438][ T1346] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 63.719337][ T1346] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 63.728701][ T1346] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 63.732400][ T1346] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.736104][ T1346] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 63.739801][ T1346] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 63.746436][ T1346] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 63.748899][ T1346] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 63.752838][ T1346] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.756925][ T1346] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 63.760594][ T1346] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 63.767549][ T1346] usb 8-1: string descriptor 0 read error: -22 [ 63.769741][ T1346] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 63.772803][ T1346] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.783635][ T1346] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 63.789742][ T6387] syzkaller0: entered promiscuous mode [ 63.792685][ T6387] syzkaller0: entered allmulticast mode [ 63.980318][ T40] audit: type=1400 audit(1768575021.685:337): avc: denied { ioctl } for pid=6362 comm="syz.3.102" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.993626][ T1346] usb 8-1: USB disconnect, device number 3 [ 64.017933][ T6391] syz.2.111 uses obsolete (PF_INET,SOCK_PACKET) [ 64.021792][ T6391] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 64.241407][ T6393] binder: 6392:6393 ioctl 4040942c 0 returned -22 [ 64.244267][ T6393] binder: 6392:6393 ioctl 400c620e 200000000580 returned -22 [ 64.267952][ T40] audit: type=1400 audit(1768575021.975:338): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.392109][ T40] audit: type=1400 audit(1768575022.105:339): avc: denied { watch } for pid=6399 comm="syz.0.114" path="/22" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.401651][ T40] audit: type=1400 audit(1768575022.105:340): avc: denied { watch_sb watch_reads } for pid=6399 comm="syz.0.114" path="/22" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.411012][ T40] audit: type=1400 audit(1768575022.115:341): avc: denied { getopt } for pid=6399 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.475566][ T40] audit: type=1400 audit(1768575022.185:342): avc: denied { bind } for pid=6403 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.483673][ T40] audit: type=1400 audit(1768575022.185:343): avc: denied { create } for pid=6403 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.490531][ T40] audit: type=1400 audit(1768575022.185:344): avc: denied { create } for pid=6403 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.554762][ T6412] syzkaller0: entered promiscuous mode [ 64.556494][ T6412] syzkaller0: entered allmulticast mode [ 64.738671][ T6416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6416 comm=syz.3.118 [ 64.744972][ T6416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6416 comm=syz.3.118 [ 64.775214][ T6418] netlink: 10 bytes leftover after parsing attributes in process `syz.3.119'. [ 64.871098][ T53] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.010630][ T6440] 9p: Bad value for 'wfdno' [ 65.024365][ T53] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 65.030032][ T53] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 65.034083][ T53] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.037151][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 65.041384][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 65.049718][ T53] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 65.055752][ T53] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 65.059158][ T53] usb 7-1: Product: syz [ 65.061160][ T53] usb 7-1: Manufacturer: syz [ 65.073277][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 65.075577][ T53] cdc_wdm 7-1:1.0: skipping garbage [ 65.080186][ T53] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 65.083323][ T53] cdc_wdm 7-1:1.0: Unknown control protocol [ 65.251901][ T6444] net_ratelimit: 1 callbacks suppressed [ 65.251914][ T6444] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 65.257047][ T6444] No source specified [ 65.296436][ T6446] FAULT_INJECTION: forcing a failure. [ 65.296436][ T6446] name failslab, interval 1, probability 0, space 0, times 1 [ 65.300910][ T6446] CPU: 2 UID: 0 PID: 6446 Comm: syz.1.130 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.300927][ T6446] Tainted: [L]=SOFTLOCKUP [ 65.300930][ T6446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.300936][ T6446] Call Trace: [ 65.300941][ T6446] [ 65.300947][ T6446] dump_stack_lvl+0x16c/0x1f0 [ 65.300973][ T6446] should_fail_ex+0x512/0x640 [ 65.300987][ T6446] ? fs_reclaim_acquire+0xae/0x150 [ 65.301010][ T6446] should_failslab+0xc2/0x120 [ 65.301033][ T6446] __kmalloc_noprof+0xeb/0x910 [ 65.301059][ T6446] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 65.301089][ T6446] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 65.301110][ T6446] tomoyo_realpath_from_path+0xc2/0x6e0 [ 65.301135][ T6446] ? tomoyo_profile+0x47/0x60 [ 65.301153][ T6446] tomoyo_path_number_perm+0x245/0x580 [ 65.301172][ T6446] ? tomoyo_path_number_perm+0x237/0x580 [ 65.301192][ T6446] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 65.301212][ T6446] ? find_held_lock+0x2b/0x80 [ 65.301259][ T6446] ? find_held_lock+0x2b/0x80 [ 65.301281][ T6446] ? hook_file_ioctl_common+0x144/0x410 [ 65.301303][ T6446] ? __fget_files+0x20e/0x3c0 [ 65.301330][ T6446] security_file_ioctl+0x9b/0x240 [ 65.301355][ T6446] __x64_sys_ioctl+0xb7/0x210 [ 65.301378][ T6446] do_syscall_64+0xcd/0xf80 [ 65.301402][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.301419][ T6446] RIP: 0033:0x7f0bac18f7c9 [ 65.301432][ T6446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.301446][ T6446] RSP: 002b:00007f0bad0e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.301462][ T6446] RAX: ffffffffffffffda RBX: 00007f0bac3e5fa0 RCX: 00007f0bac18f7c9 [ 65.301472][ T6446] RDX: 00002000000001c0 RSI: 00000000c01064bd RDI: 0000000000000003 [ 65.301482][ T6446] RBP: 00007f0bad0e9090 R08: 0000000000000000 R09: 0000000000000000 [ 65.301491][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.301499][ T6446] R13: 00007f0bac3e6038 R14: 00007f0bac3e5fa0 R15: 00007ffddcddb498 [ 65.301523][ T6446] [ 65.301530][ T6446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.319827][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 65.521508][ T53] usb 7-1: USB disconnect, device number 3 [ 65.589807][ T6456] binder: Bad value for 'max' [ 66.216766][ T6468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.136'. [ 66.222070][ T6470] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 66.232353][ T6470] ucma_write: process 75 (syz.0.137) changed security contexts after opening file descriptor, this is not allowed. [ 66.481083][ T3568] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.632836][ T3568] usb 7-1: Using ep0 maxpacket: 32 [ 66.637035][ T3568] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 1024 [ 66.641528][ T3568] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 66.648909][ T3568] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 66.654630][ T3568] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 66.658098][ T3568] usb 7-1: Product: syz [ 66.659915][ T3568] usb 7-1: Manufacturer: syz [ 66.662526][ T3568] usb 7-1: SerialNumber: syz [ 66.666317][ T3568] usb 7-1: config 0 descriptor?? [ 66.673225][ T6468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.695440][ T6501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.703697][ T6502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.762248][ T6506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=6506 comm=syz.3.148 [ 66.762368][ T6507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=6507 comm=syz.3.148 [ 66.842083][ T6509] could not open pipe file descriptor [ 66.926993][ T6515] __nla_validate_parse: 2 callbacks suppressed [ 66.927003][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 66.931177][ T61] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.934466][ T5299] Bluetooth: Frame is too long (len 84, expected len 14) [ 66.943864][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 66.959248][ T6515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.150'. [ 66.963997][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 66.967082][ T6517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.150'. [ 67.110977][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 67.117025][ T61] usb 6-1: config 1 interface 0 altsetting 78 bulk endpoint 0x82 has invalid maxpacket 1023 [ 67.121680][ T61] usb 6-1: config 1 interface 0 altsetting 78 bulk endpoint 0x3 has invalid maxpacket 32 [ 67.125984][ T61] usb 6-1: config 1 interface 0 altsetting 78 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.132643][ T61] usb 6-1: config 1 interface 0 has no altsetting 0 [ 67.139449][ T61] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.143244][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.145907][ T61] usb 6-1: Product: syz [ 67.147544][ T61] usb 6-1: Manufacturer: syz [ 67.149453][ T61] usb 6-1: SerialNumber: syz [ 67.155989][ T6500] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 67.159195][ T6500] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 67.357642][ T6527] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.152'. [ 67.361612][ T6527] netlink: Conntrack attr has 4 unknown bytes [ 67.375764][ T61] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 67.384507][ T61] usb 6-1: USB disconnect, device number 3 [ 67.530758][ T6537] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 67.552691][ T6537] bond1: (slave geneve2): making interface the new active one [ 67.555723][ T6537] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 67.558591][ T89] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.563139][ T89] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.567196][ T89] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.573563][ T89] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 67.674767][ T6546] Invalid logical block size (6) [ 67.965319][ T6560] syzkaller0: entered promiscuous mode [ 67.967442][ T6560] syzkaller0: entered allmulticast mode [ 68.290367][ T6584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6584 comm=syz.3.172 [ 68.290512][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 68.294586][ T6584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6584 comm=syz.3.172 [ 68.341187][ T6584] macvlan2: entered promiscuous mode [ 68.342988][ T6584] macvlan2: entered allmulticast mode [ 68.345080][ T6584] bond2: entered promiscuous mode [ 68.347057][ T6584] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.352213][ T6584] bond2: left promiscuous mode [ 68.487982][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 68.493061][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.730385][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 68.730399][ T40] audit: type=1400 audit(1768575026.435:407): avc: denied { shutdown } for pid=6609 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.746839][ T40] audit: type=1400 audit(1768575026.455:408): avc: denied { append } for pid=6613 comm="syz.0.180" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.752096][ T6614] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 68.758215][ T6614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.180'. [ 68.759902][ T40] audit: type=1400 audit(1768575026.465:409): avc: denied { getopt } for pid=6613 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.851145][ T40] audit: type=1400 audit(1768575026.565:410): avc: denied { setopt } for pid=6617 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.901708][ T40] audit: type=1400 audit(1768575026.615:411): avc: denied { open } for pid=6622 comm="syz.0.184" path="/dev/ptyq5" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.916463][ T40] audit: type=1400 audit(1768575026.625:412): avc: denied { ioctl } for pid=6622 comm="syz.0.184" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x4b68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.997332][ T40] audit: type=1400 audit(1768575026.705:413): avc: denied { ioctl } for pid=6625 comm="syz.3.186" path="socket:[14753]" dev="sockfs" ino=14753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.005310][ T6626] loop6: detected capacity change from 0 to 2640 [ 69.009270][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.012172][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.015483][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.018750][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.021456][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.024634][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.027134][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.029705][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.033707][ T6626] ldm_validate_partition_table(): Disk read failed. [ 69.036312][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.039709][ T6626] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.044282][ T6626] Dev loop6: unable to read RDB block 0 [ 69.047641][ T6626] loop6: unable to read partition table [ 69.050248][ T6626] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 69.262547][ T40] audit: type=1400 audit(1768575026.975:414): avc: denied { read write } for pid=6643 comm="syz.3.189" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.269651][ T40] audit: type=1400 audit(1768575026.975:415): avc: denied { open } for pid=6643 comm="syz.3.189" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.277810][ T40] audit: type=1400 audit(1768575026.975:416): avc: denied { ioctl } for pid=6643 comm="syz.3.189" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.361176][ T6181] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 69.512876][ T6181] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.516425][ T6181] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.519826][ T6181] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.523336][ T6181] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.528147][ T6181] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.533900][ T6181] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.539155][ T6181] usb 6-1: config 0 descriptor?? [ 69.959334][ T6181] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 69.968680][ T5976] usb 7-1: USB disconnect, device number 4 [ 69.984911][ T6664] netlink: 'syz.3.195': attribute type 7 has an invalid length. [ 69.988305][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 69.991682][ T6664] netlink: 'syz.3.195': attribute type 18 has an invalid length. [ 70.231351][ T6679] overlayfs: conflicting options: userxattr,metacopy=on [ 70.235558][ T6679] macvtap0: entered allmulticast mode [ 70.237618][ T6679] veth0_macvtap: entered allmulticast mode [ 70.326624][ T6684] batadv_slave_1: entered promiscuous mode [ 70.341906][ T6691] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 70.391610][ T6683] batadv_slave_1: left promiscuous mode [ 70.474864][ T6700] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 70.541365][ T6701] loop6: detected capacity change from 2640 to 0 [ 70.571247][ T61] hid_parser_main: 73 callbacks suppressed [ 70.571265][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.577106][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.580446][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.583764][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.586920][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.590171][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.593479][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.596559][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.600663][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.604252][ T61] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 70.618767][ T61] hid-generic 0005:00B6:0009.0004: unexpected long global item [ 70.621788][ T61] hid-generic 0005:00B6:0009.0004: probe with driver hid-generic failed with error -22 [ 70.950925][ T5299] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.220656][ T6722] xt_ecn: cannot match TCP bits for non-tcp packets [ 71.393868][ T6731] pimreg3: entered allmulticast mode [ 71.432559][ T6739] bridge0: port 3(syz_tun) entered blocking state [ 71.435632][ T6739] bridge0: port 3(syz_tun) entered disabled state [ 71.438494][ T6739] syz_tun: entered allmulticast mode [ 71.441167][ T6739] syz_tun: entered promiscuous mode [ 71.443312][ T6739] bridge0: port 3(syz_tun) entered blocking state [ 71.446374][ T6739] bridge0: port 3(syz_tun) entered forwarding state [ 71.459605][ T6741] sp0: Synchronizing with TNC [ 71.483758][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.487861][ T6741] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 71.526055][ T6745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.913640][ T6753] syzkaller0: entered promiscuous mode [ 71.915781][ T6753] syzkaller0: entered allmulticast mode [ 71.995252][ T5976] usb 6-1: USB disconnect, device number 4 [ 72.016312][ T6624] [U] ^Ač [ 72.947982][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 73.006657][ T6779] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 73.011708][ T6779] Error validating options; rc = [-22] [ 73.034347][ T6777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6777 comm=syz.0.233 [ 73.074502][ T6790] ======================================================= [ 73.074502][ T6790] WARNING: The mand mount option has been deprecated and [ 73.074502][ T6790] and is ignored by this kernel. Remove the mand [ 73.074502][ T6790] option from the mount to silence this warning. [ 73.074502][ T6790] ======================================================= [ 73.091960][ T6790] MTD: Couldn't look up '/dev/sg0': -15 [ 73.093767][ T6790] /dev/sg0: Can't lookup blockdev [ 73.280916][ T839] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 73.402458][ T6811] tmpfs: Bad value for 'mpol' [ 73.449815][ T839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.453028][ T839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.457043][ T839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.460116][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.584218][ T6822] netlink: 'syz.1.248': attribute type 2 has an invalid length. [ 73.587637][ T6822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.667429][ T839] usb 5-1: usb_control_msg returned -32 [ 73.669369][ T839] usbtmc 5-1:16.0: can't read capabilities [ 73.719954][ T6828] FAULT_INJECTION: forcing a failure. [ 73.719954][ T6828] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 73.725820][ T6828] CPU: 3 UID: 0 PID: 6828 Comm: syz.1.251 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.725847][ T6828] Tainted: [L]=SOFTLOCKUP [ 73.725852][ T6828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.725860][ T6828] Call Trace: [ 73.725865][ T6828] [ 73.725871][ T6828] dump_stack_lvl+0x16c/0x1f0 [ 73.725895][ T6828] should_fail_ex+0x512/0x640 [ 73.725907][ T6828] should_fail_alloc_page+0xe7/0x130 [ 73.725922][ T6828] prepare_alloc_pages+0x401/0x670 [ 73.725938][ T6828] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 73.725949][ T6828] ? stack_trace_save+0x8e/0xc0 [ 73.725961][ T6828] ? __pfx_stack_trace_save+0x10/0x10 [ 73.725972][ T6828] ? stack_depot_save_flags+0x29/0x9b0 [ 73.725988][ T6828] ? find_held_lock+0x2b/0x80 [ 73.726005][ T6828] ? kasan_save_stack+0x42/0x60 [ 73.726016][ T6828] ? kasan_save_stack+0x33/0x60 [ 73.726026][ T6828] ? kasan_save_track+0x14/0x30 [ 73.726038][ T6828] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 73.726047][ T6828] ? __get_vm_area_node+0x1ca/0x330 [ 73.726061][ T6828] ? __kvmalloc_node_noprof+0x42c/0xa40 [ 73.726072][ T6828] ? drm_mode_createblob_ioctl+0x10d/0x450 [ 73.726086][ T6828] ? drm_ioctl_kernel+0x1f4/0x3e0 [ 73.726100][ T6828] ? drm_ioctl+0x5c9/0xc30 [ 73.726117][ T6828] ? __x64_sys_ioctl+0x18e/0x210 [ 73.726132][ T6828] ? do_syscall_64+0xcd/0xf80 [ 73.726163][ T6828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.726187][ T6828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.726205][ T6828] ? policy_nodemask+0xea/0x4e0 [ 73.726226][ T6828] alloc_pages_mpol+0x1fb/0x550 [ 73.726246][ T6828] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 73.726273][ T6828] alloc_pages_noprof+0x131/0x390 [ 73.726295][ T6828] get_free_pages_noprof+0x10/0xb0 [ 73.726313][ T6828] __kasan_populate_vmalloc+0xa0/0x220 [ 73.726328][ T6828] alloc_vmap_area+0x98d/0x2a50 [ 73.726345][ T6828] ? __pfx_alloc_vmap_area+0x10/0x10 [ 73.726361][ T6828] __get_vm_area_node+0x1ca/0x330 [ 73.726376][ T6828] __vmalloc_node_range_noprof+0x247/0x16b0 [ 73.726436][ T6828] ? drm_property_create_blob+0x79/0x330 [ 73.726450][ T6828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.726461][ T6828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.726473][ T6828] ? policy_nodemask+0xea/0x4e0 [ 73.726485][ T6828] ? drm_property_create_blob+0x79/0x330 [ 73.726499][ T6828] ? alloc_pages_mpol+0x25a/0x550 [ 73.726512][ T6828] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 73.726525][ T6828] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.726543][ T6828] ? ___kmalloc_large_node+0x10c/0x150 [ 73.726559][ T6828] __kvmalloc_node_noprof+0x42c/0xa40 [ 73.726571][ T6828] ? drm_property_create_blob+0x79/0x330 [ 73.726584][ T6828] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.726598][ T6828] ? drm_property_create_blob+0x79/0x330 [ 73.726613][ T6828] ? drm_property_create_blob+0x79/0x330 [ 73.726626][ T6828] drm_property_create_blob+0x79/0x330 [ 73.726638][ T6828] ? find_held_lock+0x2b/0x80 [ 73.726654][ T6828] drm_mode_createblob_ioctl+0x10d/0x450 [ 73.726670][ T6828] drm_ioctl_kernel+0x1f4/0x3e0 [ 73.726686][ T6828] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 73.726700][ T6828] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 73.726718][ T6828] drm_ioctl+0x5c9/0xc30 [ 73.726734][ T6828] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 73.726748][ T6828] ? __pfx_drm_ioctl+0x10/0x10 [ 73.726768][ T6828] ? selinux_file_ioctl+0x180/0x270 [ 73.726782][ T6828] ? selinux_file_ioctl+0xb4/0x270 [ 73.726796][ T6828] ? __pfx_drm_ioctl+0x10/0x10 [ 73.726811][ T6828] __x64_sys_ioctl+0x18e/0x210 [ 73.726823][ T6828] do_syscall_64+0xcd/0xf80 [ 73.726838][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.726847][ T6828] RIP: 0033:0x7f0bac18f7c9 [ 73.726856][ T6828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.726865][ T6828] RSP: 002b:00007f0bad0e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.726876][ T6828] RAX: ffffffffffffffda RBX: 00007f0bac3e5fa0 RCX: 00007f0bac18f7c9 [ 73.726882][ T6828] RDX: 00002000000001c0 RSI: 00000000c01064bd RDI: 0000000000000003 [ 73.726887][ T6828] RBP: 00007f0bad0e9090 R08: 0000000000000000 R09: 0000000000000000 [ 73.726893][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.726899][ T6828] R13: 00007f0bac3e6038 R14: 00007f0bac3e5fa0 R15: 00007ffddcddb498 [ 73.726911][ T6828] [ 73.727066][ T6828] syz.1.251: vmalloc error: size 7388542, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 73.873272][ T6828] CPU: 2 UID: 0 PID: 6828 Comm: syz.1.251 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.873288][ T6828] Tainted: [L]=SOFTLOCKUP [ 73.873292][ T6828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.873297][ T6828] Call Trace: [ 73.873300][ T6828] [ 73.873304][ T6828] dump_stack_lvl+0x16c/0x1f0 [ 73.873323][ T6828] warn_alloc+0x248/0x3a0 [ 73.873335][ T6828] ? __pfx_warn_alloc+0x10/0x10 [ 73.873346][ T6828] ? __get_vm_area_node+0x2cd/0x330 [ 73.873362][ T6828] ? __get_vm_area_node+0x2cd/0x330 [ 73.873374][ T6828] ? __get_vm_area_node+0x208/0x330 [ 73.873390][ T6828] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 73.873405][ T6828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.873418][ T6828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.873431][ T6828] ? policy_nodemask+0xea/0x4e0 [ 73.873444][ T6828] ? drm_property_create_blob+0x79/0x330 [ 73.873460][ T6828] ? alloc_pages_mpol+0x25a/0x550 [ 73.873473][ T6828] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 73.873486][ T6828] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.873504][ T6828] ? ___kmalloc_large_node+0x10c/0x150 [ 73.873521][ T6828] __kvmalloc_node_noprof+0x42c/0xa40 [ 73.873533][ T6828] ? drm_property_create_blob+0x79/0x330 [ 73.873545][ T6828] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.873560][ T6828] ? drm_property_create_blob+0x79/0x330 [ 73.873576][ T6828] ? drm_property_create_blob+0x79/0x330 [ 73.873588][ T6828] drm_property_create_blob+0x79/0x330 [ 73.873601][ T6828] ? find_held_lock+0x2b/0x80 [ 73.873617][ T6828] drm_mode_createblob_ioctl+0x10d/0x450 [ 73.873633][ T6828] drm_ioctl_kernel+0x1f4/0x3e0 [ 73.873648][ T6828] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 73.873668][ T6828] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 73.873693][ T6828] drm_ioctl+0x5c9/0xc30 [ 73.873715][ T6828] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 73.873735][ T6828] ? __pfx_drm_ioctl+0x10/0x10 [ 73.873764][ T6828] ? selinux_file_ioctl+0x180/0x270 [ 73.873783][ T6828] ? selinux_file_ioctl+0xb4/0x270 [ 73.873804][ T6828] ? __pfx_drm_ioctl+0x10/0x10 [ 73.873828][ T6828] __x64_sys_ioctl+0x18e/0x210 [ 73.873848][ T6828] do_syscall_64+0xcd/0xf80 [ 73.873870][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.873885][ T6828] RIP: 0033:0x7f0bac18f7c9 [ 73.873899][ T6828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.873913][ T6828] RSP: 002b:00007f0bad0e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.873928][ T6828] RAX: ffffffffffffffda RBX: 00007f0bac3e5fa0 RCX: 00007f0bac18f7c9 [ 73.873938][ T6828] RDX: 00002000000001c0 RSI: 00000000c01064bd RDI: 0000000000000003 [ 73.873947][ T6828] RBP: 00007f0bad0e9090 R08: 0000000000000000 R09: 0000000000000000 [ 73.873956][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.873965][ T6828] R13: 00007f0bac3e6038 R14: 00007f0bac3e5fa0 R15: 00007ffddcddb498 [ 73.873988][ T6828] [ 73.873994][ T6828] Mem-Info: [ 73.977065][ T6828] active_anon:9412 inactive_anon:0 isolated_anon:0 [ 73.977065][ T6828] active_file:8810 inactive_file:12416 isolated_file:0 [ 73.977065][ T6828] unevictable:1768 dirty:56 writeback:0 [ 73.977065][ T6828] slab_reclaimable:7185 slab_unreclaimable:66763 [ 73.977065][ T6828] mapped:24715 shmem:2395 pagetables:1914 [ 73.977065][ T6828] sec_pagetables:307 bounce:0 [ 73.977065][ T6828] kernel_misc_reclaimable:0 [ 73.977065][ T6828] free:491850 free_pcp:17208 free_cma:0 [ 73.993181][ T6828] Node 0 active_anon:37648kB inactive_anon:0kB active_file:35124kB inactive_file:49640kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98860kB dirty:224kB writeback:0kB shmem:5896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13184kB pagetables:7224kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 74.003414][ T6828] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:24kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:432kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 74.012875][ T6828] Node 0 DMA free:15160kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:188kB local_pcp:44kB free_cma:0kB [ 74.022468][ T6828] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 74.024492][ T6828] Node 0 DMA32 free:352800kB boost:16384kB min:43932kB low:50816kB high:57700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37648kB inactive_anon:0kB active_file:35124kB inactive_file:49640kB unevictable:3536kB writepending:224kB zspages:0kB present:2080628kB managed:1265152kB mlocked:0kB bounce:0kB free_pcp:62832kB local_pcp:21240kB free_cma:0kB [ 74.035593][ T6828] lowmem_reserve[]: 0 0 0 0 0 [ 74.037621][ T6828] Node 1 Normal free:1599440kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:24kB unevictable:3536kB writepending:0kB zspages:40kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:6436kB local_pcp:640kB free_cma:0kB [ 74.048361][ T6828] lowmem_reserve[]: 0 0 0 0 0 [ 74.049874][ T6828] Node 0 DMA: 10*4kB (UME) 10*8kB (UME) 10*16kB (UME) 1*32kB (E) 4*64kB (UE) 4*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 1*4096kB (U) = 15160kB [ 74.055312][ T6828] Node 0 DMA32: 437*4kB (UME) 1211*8kB (UME) 827*16kB (UME) 128*32kB (UME) 337*64kB (UME) 186*128kB (UME) 122*256kB (UME) 103*512kB (UM) 88*1024kB (UM) 15*2048kB (UM) 18*4096kB (UM) = 352668kB [ 74.061598][ T6828] Node 1 Normal: 152*4kB (UME) 116*8kB (UME) 125*16kB (UME) 254*32kB (UME) 159*64kB (UME) 115*128kB (UME) 95*256kB (UME) 57*512kB (UM) 68*1024kB (UM) 15*2048kB (UM) 344*4096kB (U) = 1599440kB [ 74.067556][ T6828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.070579][ T6828] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.073618][ T6828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.076759][ T6828] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.079695][ T6828] 23619 total pagecache pages [ 74.081315][ T6828] 2 pages in swap cache [ 74.083048][ T6828] Free swap = 124968kB [ 74.084788][ T6828] Total swap = 124996kB [ 74.086533][ T6828] 1048443 pages RAM [ 74.088171][ T6828] 0 pages HighMem/MovableOnly [ 74.090149][ T6828] 282844 pages reserved [ 74.092223][ T6828] 0 pages cma reserved [ 74.160205][ T6830] __nla_validate_parse: 5 callbacks suppressed [ 74.160222][ T6830] netlink: 88 bytes leftover after parsing attributes in process `syz.3.252'. [ 74.227122][ T839] usb 5-1: USB disconnect, device number 3 [ 74.308815][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 74.308832][ T40] audit: type=1400 audit(1768575032.015:454): avc: denied { block_suspend } for pid=6836 comm="syz.1.254" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.338640][ T40] audit: type=1400 audit(1768575032.045:455): avc: denied { name_bind } for pid=6829 comm="syz.3.252" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 74.347110][ T40] audit: type=1400 audit(1768575032.045:456): avc: denied { write } for pid=6829 comm="syz.3.252" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 74.680756][ T6843] xt_socket: unknown flags 0x48 [ 74.799712][ T40] audit: type=1400 audit(1768575032.505:457): avc: denied { accept } for pid=6850 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.802991][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 74.806004][ T40] audit: type=1400 audit(1768575032.505:458): avc: denied { append } for pid=6850 comm="syz.3.256" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.810766][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.256'. [ 74.850201][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 74.854246][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.256'. [ 74.987808][ T6863] netlink: 64 bytes leftover after parsing attributes in process `syz.3.258'. [ 75.061833][ T40] audit: type=1400 audit(1768575032.775:459): avc: denied { setopt } for pid=6864 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.141550][ T6870] FAULT_INJECTION: forcing a failure. [ 75.141550][ T6870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 75.147052][ T6870] CPU: 3 UID: 0 PID: 6870 Comm: syz.0.261 Tainted: G L syzkaller #0 PREEMPT(full) [ 75.147079][ T6870] Tainted: [L]=SOFTLOCKUP [ 75.147084][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.147094][ T6870] Call Trace: [ 75.147100][ T6870] [ 75.147107][ T6870] dump_stack_lvl+0x16c/0x1f0 [ 75.147135][ T6870] should_fail_ex+0x512/0x640 [ 75.147155][ T6870] should_fail_alloc_page+0xe7/0x130 [ 75.147179][ T6870] prepare_alloc_pages+0x401/0x670 [ 75.147205][ T6870] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 75.147222][ T6870] ? should_fail_alloc_page+0xee/0x130 [ 75.147245][ T6870] ? rcu_is_watching+0x12/0xc0 [ 75.147261][ T6870] ? trace_mm_page_alloc+0x11b/0x180 [ 75.147283][ T6870] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 75.147299][ T6870] ? stack_trace_save+0x8e/0xc0 [ 75.147316][ T6870] ? __pfx_stack_trace_save+0x10/0x10 [ 75.147335][ T6870] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 75.147352][ T6870] ? find_held_lock+0x2b/0x80 [ 75.147380][ T6870] ? kasan_save_stack+0x42/0x60 [ 75.147401][ T6870] ? __get_vm_area_node+0x1ca/0x330 [ 75.147429][ T6870] ? __kvmalloc_node_noprof+0x42c/0xa40 [ 75.147447][ T6870] ? drm_mode_createblob_ioctl+0x10d/0x450 [ 75.147469][ T6870] ? drm_ioctl_kernel+0x1f4/0x3e0 [ 75.147491][ T6870] ? drm_ioctl+0x5c9/0xc30 [ 75.147512][ T6870] ? __x64_sys_ioctl+0x18e/0x210 [ 75.147530][ T6870] ? do_syscall_64+0xcd/0xf80 [ 75.147551][ T6870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.147577][ T6870] alloc_pages_bulk_noprof+0x77a/0x1410 [ 75.147594][ T6870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.147614][ T6870] ? policy_nodemask+0xea/0x4e0 [ 75.147638][ T6870] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 75.147656][ T6870] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 75.147688][ T6870] __kasan_populate_vmalloc+0xfb/0x220 [ 75.147712][ T6870] alloc_vmap_area+0x98d/0x2a50 [ 75.147742][ T6870] ? __pfx_alloc_vmap_area+0x10/0x10 [ 75.147770][ T6870] __get_vm_area_node+0x1ca/0x330 [ 75.147797][ T6870] __vmalloc_node_range_noprof+0x247/0x16b0 [ 75.147821][ T6870] ? drm_property_create_blob+0x79/0x330 [ 75.147841][ T6870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.147860][ T6870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.147879][ T6870] ? policy_nodemask+0xea/0x4e0 [ 75.147899][ T6870] ? drm_property_create_blob+0x79/0x330 [ 75.147922][ T6870] ? alloc_pages_mpol+0x25a/0x550 [ 75.147944][ T6870] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 75.147965][ T6870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 75.147995][ T6870] ? ___kmalloc_large_node+0x10c/0x150 [ 75.148022][ T6870] __kvmalloc_node_noprof+0x42c/0xa40 [ 75.148042][ T6870] ? drm_property_create_blob+0x79/0x330 [ 75.148062][ T6870] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.148085][ T6870] ? drm_property_create_blob+0x79/0x330 [ 75.148111][ T6870] ? drm_property_create_blob+0x79/0x330 [ 75.148132][ T6870] drm_property_create_blob+0x79/0x330 [ 75.148152][ T6870] ? find_held_lock+0x2b/0x80 [ 75.148179][ T6870] drm_mode_createblob_ioctl+0x10d/0x450 [ 75.148204][ T6870] drm_ioctl_kernel+0x1f4/0x3e0 [ 75.148226][ T6870] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 75.148250][ T6870] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 75.148280][ T6870] drm_ioctl+0x5c9/0xc30 [ 75.148307][ T6870] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 75.148331][ T6870] ? __pfx_drm_ioctl+0x10/0x10 [ 75.148364][ T6870] ? selinux_file_ioctl+0x180/0x270 [ 75.148386][ T6870] ? selinux_file_ioctl+0xb4/0x270 [ 75.148414][ T6870] ? __pfx_drm_ioctl+0x10/0x10 [ 75.148438][ T6870] __x64_sys_ioctl+0x18e/0x210 [ 75.148460][ T6870] do_syscall_64+0xcd/0xf80 [ 75.148484][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.148500][ T6870] RIP: 0033:0x7f85afb8f7c9 [ 75.148514][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.148529][ T6870] RSP: 002b:00007f85b09d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.148546][ T6870] RAX: ffffffffffffffda RBX: 00007f85afde5fa0 RCX: 00007f85afb8f7c9 [ 75.148556][ T6870] RDX: 00002000000001c0 RSI: 00000000c01064bd RDI: 0000000000000003 [ 75.148565][ T6870] RBP: 00007f85b09d3090 R08: 0000000000000000 R09: 0000000000000000 [ 75.148574][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.148583][ T6870] R13: 00007f85afde6038 R14: 00007f85afde5fa0 R15: 00007fff35be4448 [ 75.148606][ T6870] [ 75.385121][ T6872] 9p: p9: multiple sources not supported [ 75.450954][ T61] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.499402][ T6880] process 'syz.3.265' launched './file1' with NULL argv: empty string added [ 75.508926][ T40] audit: type=1400 audit(1768575033.215:460): avc: denied { execute_no_trans } for pid=6879 comm="syz.3.265" path="/99/file1" dev="tmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.510349][ T6878] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.530131][ T6880] macsec1: entered promiscuous mode [ 75.532336][ T6880] macsec1: entered allmulticast mode [ 75.574938][ T40] audit: type=1400 audit(1768575033.285:461): avc: denied { getopt } for pid=6883 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.582259][ T40] audit: type=1400 audit(1768575033.285:462): avc: denied { write } for pid=6883 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.600904][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 75.604250][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.609924][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.613452][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 75.618130][ T61] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 75.621676][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.630775][ T40] audit: type=1400 audit(1768575033.335:463): avc: denied { kexec_image_load } for pid=6886 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 75.631251][ T61] usb 6-1: config 0 descriptor?? [ 75.692234][ T6893] netlink: 'syz.3.270': attribute type 64 has an invalid length. [ 75.695740][ T6893] netlink: 'syz.3.270': attribute type 4 has an invalid length. [ 75.698739][ T6893] netlink: 152 bytes leftover after parsing attributes in process `syz.3.270'. [ 75.794895][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 75.817261][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 75.823139][ T6901] macvlan2: entered promiscuous mode [ 75.824874][ T6901] macvlan2: entered allmulticast mode [ 75.848630][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 76.060255][ T61] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 76.095109][ T61] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 76.097731][ T61] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 76.195307][ T6913] vivid-000: ================= START STATUS ================= [ 76.197964][ T6913] vivid-000: Test Pattern: 75% Colorbar [ 76.199998][ T6913] vivid-000: Fill Percentage of Frame: 100 [ 76.203000][ T6913] vivid-000: Horizontal Movement: No Movement [ 76.205295][ T6913] vivid-000: Vertical Movement: No Movement [ 76.207347][ T6913] vivid-000: OSD Text Mode: All [ 76.209012][ T6913] vivid-000: Show Border: false [ 76.211224][ T6913] vivid-000: Show Square: false [ 76.212878][ T6913] vivid-000: Sensor Flipped Horizontally: false [ 76.215094][ T6913] vivid-000: Sensor Flipped Vertically: false [ 76.217187][ T6913] vivid-000: Insert SAV Code in Image: false [ 76.219339][ T6913] vivid-000: Insert EAV Code in Image: false [ 76.223076][ T6913] vivid-000: Insert Video Guard Band: false [ 76.225138][ T6913] vivid-000: Reduced Framerate: false [ 76.226936][ T6913] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 76.229661][ T6913] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 76.233787][ T6913] vivid-000: Enable Capture Cropping: true [ 76.235788][ T6913] vivid-000: Enable Capture Composing: true [ 76.237482][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.237860][ T6913] vivid-000: Enable Capture Scaler: true [ 76.237887][ T6913] vivid-000: Timestamp Source: [ 76.240698][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.242879][ T6913] End of Frame [ 76.247788][ T6913] vivid-000: Colorspace: sRGB [ 76.249389][ T6913] vivid-000: Transfer Function: Default [ 76.251431][ T6913] vivid-000: Y'CbCr Encoding: Default [ 76.253142][ T6913] vivid-000: HSV Encoding: Hue 0-179 [ 76.254889][ T6913] vivid-000: Quantization: Default [ 76.256602][ T6913] vivid-000: Apply Alpha To Red Only: false [ 76.258149][ T6867] random: crng reseeded on system resumption [ 76.258522][ T6913] vivid-000: Standard Aspect Ratio: 4x3 [ 76.258537][ T6913] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 76.258552][ T6913] vivid-000: DV Timings: 640x480p59 inactive [ 76.258566][ T6913] vivid-000: DV Timings Aspect Ratio: [ 76.267282][ T6913] Source Width x Height [ 76.267294][ T6913] vivid-000: Maximum EDID Blocks: 2 [ 76.267305][ T6913] vivid-000: Limited RGB Range (16-235): false [ 76.267316][ T6913] vivid-000: Rx RGB Quantization Range: Automatic [ 76.267326][ T6913] vivid-000: Power Present: 0x00000001 [ 76.267338][ T6913] tpg source WxH: 320x240 (Y'CbCr) [ 76.270548][ T6913] tpg field: 1 [ 76.270556][ T6913] tpg crop: (0,0)/320x240 [ 76.270563][ T6913] tpg compose: (0,0)/320x240 [ 76.270569][ T6913] tpg colorspace: 8 [ 76.270574][ T6913] tpg transfer function: 0/0 [ 76.270580][ T6913] tpg Y'CbCr encoding: 0/0 [ 76.270585][ T6913] tpg quantization: 0/0 [ 76.270590][ T6913] tpg RGB range: 0/2 [ 76.270595][ T6913] vivid-000: ================== END STATUS ================== [ 76.309111][ T6082] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 76.320994][ T61] usb 6-1: USB disconnect, device number 5 [ 76.326726][ T6082] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 76.332310][ T61] ------------[ cut here ]------------ [ 76.334548][ T61] workqueue: work disable count underflowed [ 76.336820][ T61] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#3: kworker/3:1/61 [ 76.340578][ T61] Modules linked in: [ 76.342541][ T61] CPU: 3 UID: 0 PID: 61 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.346363][ T61] Tainted: [L]=SOFTLOCKUP [ 76.348140][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.351912][ T61] Workqueue: usb_hub_wq hub_event [ 76.353417][ T61] RIP: 0010:enable_work+0x2ca/0x310 [ 76.355405][ T61] Code: ff e8 aa 12 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 9c 12 3a 00 e8 87 a8 f3 09 e9 49 ff ff ff e8 8d 12 3a 00 48 8d 3d b6 d6 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 b4 ee a3 00 e9 f7 fd ff [ 76.363081][ T61] RSP: 0018:ffffc90000aef348 EFLAGS: 00010093 [ 76.365433][ T61] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184e773 [ 76.368244][ T61] RDX: ffff888022580000 RSI: ffffffff8184e943 RDI: ffffffff908bc000 [ 76.371166][ T61] RBP: ffff888036b92738 R08: 0000000000000005 R09: 0000000000000000 [ 76.374451][ T61] R10: 0000000000000000 R11: ffff888022580b30 R12: 1ffff9200015de6a [ 76.377481][ T61] R13: ffffffff8fc4f13f R14: ffff888036b92698 R15: ffff888036b92730 [ 76.380637][ T61] FS: 0000000000000000(0000) GS:ffff8880d6bf2000(0000) knlGS:0000000000000000 [ 76.384226][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.386956][ T61] CR2: 000000110c2e49f9 CR3: 00000000257de000 CR4: 0000000000352ef0 [ 76.390248][ T61] Call Trace: [ 76.391673][ T61] [ 76.392867][ T61] ? __pfx_enable_work+0x10/0x10 [ 76.394835][ T61] cancel_delayed_work_sync+0x96/0xf0 [ 76.396729][ T61] thermal_zone_device_unregister+0x28e/0x4d0 [ 76.399295][ T61] ? __pfx_shield_remove+0x10/0x10 [ 76.401416][ T61] power_supply_unregister+0x10a/0x150 [ 76.403719][ T61] shield_remove+0x75/0x130 [ 76.405648][ T61] ? __pfx_shield_remove+0x10/0x10 [ 76.407777][ T61] hid_device_remove+0xd1/0x260 [ 76.409841][ T61] ? __pfx_hid_device_remove+0x10/0x10 [ 76.412262][ T61] device_remove+0xcb/0x170 [ 76.414217][ T61] device_release_driver_internal+0x44b/0x620 [ 76.416696][ T61] bus_remove_device+0x22f/0x450 [ 76.418804][ T61] device_del+0x396/0x9f0 [ 76.420683][ T61] ? __pfx_device_del+0x10/0x10 [ 76.422746][ T61] ? do_raw_spin_lock+0x12c/0x2b0 [ 76.424865][ T61] hid_destroy_device+0x19c/0x240 [ 76.426853][ T61] usbhid_disconnect+0xa0/0xe0 [ 76.428808][ T61] usb_unbind_interface+0x1dd/0x9e0 [ 76.431012][ T61] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 76.433224][ T61] ? __pfx_usb_unbind_interface+0x10/0x10 [ 76.435512][ T61] device_remove+0x125/0x170 [ 76.437393][ T61] device_release_driver_internal+0x44b/0x620 [ 76.439855][ T61] bus_remove_device+0x22f/0x450 [ 76.441901][ T61] device_del+0x396/0x9f0 [ 76.443648][ T61] ? __pfx_device_del+0x10/0x10 [ 76.445584][ T61] ? kobject_put+0x218/0x6f0 [ 76.447330][ T61] usb_disable_device+0x355/0x820 [ 76.448929][ T61] usb_disconnect+0x2e1/0x9e0 [ 76.450401][ T61] hub_event+0x1d84/0x52f0 [ 76.451898][ T61] ? __lock_acquire+0x436/0x2890 [ 76.453568][ T61] ? do_raw_spin_unlock+0x172/0x230 [ 76.455688][ T61] ? __pfx_hub_event+0x10/0x10 [ 76.457586][ T61] ? assoc_array_insert+0x2d50/0x3970 [ 76.459814][ T61] ? finish_task_switch.isra.0+0x202/0xbd0 [ 76.462145][ T61] ? rcu_is_watching+0x12/0xc0 [ 76.463706][ T61] process_one_work+0x9ba/0x1b20 [ 76.465314][ T61] ? __pfx_process_one_work+0x10/0x10 [ 76.466988][ T61] ? assign_work+0x1a0/0x250 [ 76.468446][ T61] worker_thread+0x6c8/0xf10 [ 76.470318][ T61] ? __pfx_worker_thread+0x10/0x10 [ 76.472382][ T61] kthread+0x3c5/0x780 [ 76.473990][ T61] ? __pfx_kthread+0x10/0x10 [ 76.475734][ T61] ? rcu_is_watching+0x12/0xc0 [ 76.477420][ T61] ? __pfx_kthread+0x10/0x10 [ 76.479383][ T61] ret_from_fork+0x983/0xb10 [ 76.481157][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 76.482703][ T61] ? __switch_to+0x7af/0x10d0 [ 76.484157][ T61] ? __pfx_kthread+0x10/0x10 [ 76.485586][ T61] ret_from_fork_asm+0x1a/0x30 [ 76.487116][ T61] [ 76.488099][ T61] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.490339][ T61] CPU: 3 UID: 0 PID: 61 Comm: kworker/3:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 76.493784][ T61] Tainted: [L]=SOFTLOCKUP [ 76.495546][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.499821][ T61] Workqueue: usb_hub_wq hub_event [ 76.501832][ T61] Call Trace: [ 76.503115][ T61] [ 76.504054][ T61] dump_stack_lvl+0x3d/0x1f0 [ 76.505503][ T61] vpanic+0x640/0x6f0 [ 76.506783][ T61] ? enable_work+0x2ca/0x310 [ 76.508235][ T61] panic+0xca/0xd0 [ 76.509444][ T61] ? __pfx_panic+0x10/0x10 [ 76.510877][ T61] ? check_panic_on_warn+0x1f/0xb0 [ 76.512466][ T61] check_panic_on_warn+0xab/0xb0 [ 76.514169][ T61] __warn+0x108/0x3c0 [ 76.515816][ T61] __report_bug+0x2a0/0x520 [ 76.517633][ T61] ? enable_work+0x2ca/0x310 [ 76.519326][ T61] ? __pfx___report_bug+0x10/0x10 [ 76.521250][ T61] ? __wait_for_common+0x1e0/0x4e0 [ 76.523209][ T61] ? enable_work+0x2c3/0x310 [ 76.524869][ T61] ? enable_work+0xf3/0x310 [ 76.526699][ T61] ? find_held_lock+0x2b/0x80 [ 76.528675][ T61] report_bug_entry+0xe1/0x290 [ 76.530603][ T61] ? enable_work+0x2ca/0x310 [ 76.532473][ T61] handle_bug+0x18a/0x260 [ 76.534150][ T61] exc_invalid_op+0x17/0x50 [ 76.535579][ T61] asm_exc_invalid_op+0x1a/0x20 [ 76.537112][ T61] RIP: 0010:enable_work+0x2ca/0x310 [ 76.538761][ T61] Code: ff e8 aa 12 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 9c 12 3a 00 e8 87 a8 f3 09 e9 49 ff ff ff e8 8d 12 3a 00 48 8d 3d b6 d6 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 b4 ee a3 00 e9 f7 fd ff [ 76.544497][ T61] RSP: 0018:ffffc90000aef348 EFLAGS: 00010093 [ 76.546390][ T61] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8184e773 [ 76.549131][ T61] RDX: ffff888022580000 RSI: ffffffff8184e943 RDI: ffffffff908bc000 [ 76.551993][ T61] RBP: ffff888036b92738 R08: 0000000000000005 R09: 0000000000000000 [ 76.554737][ T61] R10: 0000000000000000 R11: ffff888022580b30 R12: 1ffff9200015de6a [ 76.557307][ T61] R13: ffffffff8fc4f13f R14: ffff888036b92698 R15: ffff888036b92730 [ 76.559764][ T61] ? enable_work+0xf3/0x310 [ 76.561115][ T61] ? enable_work+0x2c3/0x310 [ 76.562551][ T61] ? enable_work+0x2c3/0x310 [ 76.564119][ T61] ? __pfx_enable_work+0x10/0x10 [ 76.565668][ T61] cancel_delayed_work_sync+0x96/0xf0 [ 76.567349][ T61] thermal_zone_device_unregister+0x28e/0x4d0 [ 76.569277][ T61] ? __pfx_shield_remove+0x10/0x10 [ 76.570870][ T61] power_supply_unregister+0x10a/0x150 [ 76.572814][ T61] shield_remove+0x75/0x130 [ 76.574583][ T61] ? __pfx_shield_remove+0x10/0x10 [ 76.576639][ T61] hid_device_remove+0xd1/0x260 [ 76.578501][ T61] ? __pfx_hid_device_remove+0x10/0x10 [ 76.580669][ T61] device_remove+0xcb/0x170 [ 76.582516][ T61] device_release_driver_internal+0x44b/0x620 [ 76.584941][ T61] bus_remove_device+0x22f/0x450 [ 76.586675][ T61] device_del+0x396/0x9f0 [ 76.588033][ T61] ? __pfx_device_del+0x10/0x10 [ 76.589639][ T61] ? do_raw_spin_lock+0x12c/0x2b0 [ 76.591224][ T61] hid_destroy_device+0x19c/0x240 [ 76.592771][ T61] usbhid_disconnect+0xa0/0xe0 [ 76.594467][ T61] usb_unbind_interface+0x1dd/0x9e0 [ 76.596202][ T61] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 76.598530][ T61] ? __pfx_usb_unbind_interface+0x10/0x10 [ 76.600831][ T61] device_remove+0x125/0x170 [ 76.602728][ T61] device_release_driver_internal+0x44b/0x620 [ 76.605155][ T61] bus_remove_device+0x22f/0x450 [ 76.607190][ T61] device_del+0x396/0x9f0 [ 76.608553][ T61] ? __pfx_device_del+0x10/0x10 [ 76.610057][ T61] ? kobject_put+0x218/0x6f0 [ 76.611526][ T61] usb_disable_device+0x355/0x820 [ 76.613079][ T61] usb_disconnect+0x2e1/0x9e0 [ 76.614740][ T61] hub_event+0x1d84/0x52f0 [ 76.616095][ T61] ? __lock_acquire+0x436/0x2890 [ 76.617556][ T61] ? do_raw_spin_unlock+0x172/0x230 [ 76.619284][ T61] ? __pfx_hub_event+0x10/0x10 [ 76.621194][ T61] ? assoc_array_insert+0x2d50/0x3970 [ 76.623453][ T61] ? finish_task_switch.isra.0+0x202/0xbd0 [ 76.625888][ T61] ? rcu_is_watching+0x12/0xc0 [ 76.627921][ T61] process_one_work+0x9ba/0x1b20 [ 76.629967][ T61] ? __pfx_process_one_work+0x10/0x10 [ 76.632214][ T61] ? assign_work+0x1a0/0x250 [ 76.634138][ T61] worker_thread+0x6c8/0xf10 [ 76.636064][ T61] ? __pfx_worker_thread+0x10/0x10 [ 76.638141][ T61] kthread+0x3c5/0x780 [ 76.639844][ T61] ? __pfx_kthread+0x10/0x10 [ 76.641509][ T61] ? rcu_is_watching+0x12/0xc0 [ 76.643095][ T61] ? __pfx_kthread+0x10/0x10 [ 76.644675][ T61] ret_from_fork+0x983/0xb10 [ 76.646074][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 76.647650][ T61] ? __switch_to+0x7af/0x10d0 [ 76.649124][ T61] ? __pfx_kthread+0x10/0x10 [ 76.650705][ T61] ret_from_fork_asm+0x1a/0x30 [ 76.652739][ T61] [ 76.654798][ T61] Kernel Offset: disabled [ 76.656510][ T61] Rebooting in 86400 seconds..