last executing test programs: 1m51.04925642s ago: executing program 2 (id=739): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x2, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000ec0)={0xa, 0x4e22, 0x9c062915, @loopback, 0x6}, 0x1c) sendmsg(r1, &(0x7f0000000f00)={0x0, 0x9533, &(0x7f0000000f40)=[{&(0x7f0000000f80)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m51.045940747s ago: executing program 2 (id=740): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000980)={'#! ', './file0', [{}, {0x20, '\x00'}, {0x20, 'syzkaller\x00'}], 0xa, "afc21a6446f75c442359d2fec1d3f26ee6499db61ddc7d8abe79f1ab8a29233954a1bb5d143cecd7ec0b8c2a78a0c71ba2bae6795053c7a49005479b69355c0bc5dc3ea2360eaf367229c5cb443ac18af81916109ecf0f681cb2096051821ff6528514d522b36e43f2b1c01e1f53e8bf10b3f0b54abcb1a5a34a6fd49e6c52c2d3934677ce8e7c76170c4ec8f6a81641d4eca6280dea371c7b88ca91f5eb569df29cf65141d57e9fcfaefdb9404fe0f5f4ee30929eb17ed930e3243d0c5091e1f5b170b8da80ba62dfdb7c27e39b9f01584c361a53b97d9f1be756a418748ff8f3"}, 0xfa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 1m51.023372121s ago: executing program 2 (id=741): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="64000000410001000000000000000010030100000f0000004200010000112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3c0005bc5c867495000004000280040003"], 0x64}}, 0x0) 1m50.968370569s ago: executing program 2 (id=744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x3d}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) timerfd_create(0x7, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000600)='.\x00', &(0x7f0000000640)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000680)='./file0/file0\x00', &(0x7f00000006c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x200) (async, rerun: 64) bind$bt_sco(r3, &(0x7f00000001c0)={0x1f, @none}, 0x8) (async, rerun: 64) listen(r3, 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) mkdir(&(0x7f0000000280)='local_sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x395) mount(0x0, &(0x7f0000000480)='local_sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) (async) openat(r2, &(0x7f0000000500)='local_sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x1055c0, 0xf8) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00') syz_open_dev$I2C(&(0x7f0000000580), 0x5, 0x80400) (async) sendfile(r7, r7, 0x0, 0x0) (async) sendto$packet(r5, &(0x7f00000002c0)="05178100", 0x4, 0x50, &(0x7f0000000300)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32=r5, @ANYRESDEC=r0], 0x44}}, 0x840) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r2, 0x7, 0x104, 0xfffffffe}) sendmmsg(r2, &(0x7f0000000300), 0x40000000000009f, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="58000000150000082cbd70f11071dc2757ce8fd300fcdbffd32ee325c8f28625818cefd187e6d3a4021fda2d96e6a31bd743b53363ce489b7ab81f63d61abbd7b601044e2fbd94c0301c0f5e6ac3c39bf6322590e029f3ecdffe8776ca649f7f372475641e22920e647b206b4856b6cc50be00"/129, @ANYBLOB="459053179b63a41a95e1fa40f0af6a7460cb1075718a0460ee08b8914549176eb2b0c721e7c47ee14f421f920455ad05b30212192f683237dd98eb421b388ba395", @ANYBLOB="080009000300000014000100ff010000000f000000000a000100dfb57359aa4e6d6309a11fdd2c98aaea000014000600"], 0x58}, 0x1, 0x0, 0x0, 0x24008804}, 0x44040) 1m50.028820004s ago: executing program 2 (id=762): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(0x0, 0xa) 1m49.907656332s ago: executing program 2 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0xf5ffffffffffffff) 1m49.764039222s ago: executing program 32 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0xf5ffffffffffffff) 1m40.29102392s ago: executing program 0 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="64000000410001000000000000030000030100000f0000004200010000112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3c0005bc5c867495000004000280040003"], 0x64}}, 0x0) 1m40.288169805s ago: executing program 0 (id=943): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000008c0)={0x1, @pix_mp={0x2, 0x8, 0x50565559, 0x0, 0x9, [{0x80000001, 0xffffff94}, {0x7, 0xffffa132}, {0x7f}, {0x2, 0x6}, {0xfffffffb, 0x2}, {0xffffff81, 0x10}, {0x80000080, 0x2}, {0x9da9, 0x3}], 0x1, 0x40, 0x6}}) 1m40.247332839s ago: executing program 0 (id=944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000200000000000000000000000000be3412020032007f0000020000000000000000000000007f00002a00000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1m40.160359825s ago: executing program 0 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001500010325bd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r1, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000140)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./sys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000a80)='ccgx-ucsi 0', 0xb) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, 0x4, 0x8, 0xffffffff, 0x1, 0x3}, &(0x7f00000002c0)=0x98) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f00000007c0), 0x8, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)={0x10b141, 0x2, 0x10}, 0x18) chdir(&(0x7f00000008c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x2001) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000440)='3', 0x4e) close(0x3) syz_clone3(&(0x7f0000000080)={0xb690b000, &(0x7f0000000100), 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 1m40.159905791s ago: executing program 0 (id=946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000080004000300000008000500ea8c8c8c2200070073797374656d5f753a6f626a6563745f723a756e6c6162656c65645f74"], 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:lost_found_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x35, 0x7, 'system_u:object_r:systemd_passwd_agent_exec_t:s0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x10000}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_emit_ethernet(0x77, &(0x7f00000001c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x41, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {0x0, 0x4, "1e797cfad402c49710830d4a7103008f038b40599406db16b251e8000000000000"}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r6, 0x4, 0x2, 0x9, 0x2, 0x1a, @remote, @local, 0x7, 0x10, 0x1, 0x9}}) 1m39.799978112s ago: executing program 0 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a0101000000000000000001e5ff030900030073797a32000000000900010073797a300000000074000000060a010400000000000000000100000008000b40000000000900010073797a30000000004c000480240001800b000100736f636b6574000014000280080002400000000c080001400000000124000180090001006d61737100000000140002800800024000000002080003"], 0xe8}, 0x1, 0x1300000000000000}, 0x0) 1m39.792847828s ago: executing program 33 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a0101000000000000000001e5ff030900030073797a32000000000900010073797a300000000074000000060a010400000000000000000100000008000b40000000000900010073797a30000000004c000480240001800b000100736f636b6574000014000280080002400000000c080001400000000124000180090001006d61737100000000140002800800024000000002080003"], 0xe8}, 0x1, 0x1300000000000000}, 0x0) 25.116544529s ago: executing program 5 (id=1730): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x3800000}, {0x8, 0x717a}]}, 0x14, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xa8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0xa8}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x25cfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8840) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x387) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f0000000400)='./file0/file1\x00', 0xe2) 25.11619983s ago: executing program 5 (id=1731): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x15, 0x4, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000001b00)='GPL\x00', 0x2, 0xc3, &(0x7f0000001b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) 25.116117192s ago: executing program 5 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="64000000410001000000000000000000030100000f0000004200010000112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b0005bc5c867495000004000280040003"], 0x64}, 0x1, 0x7000000}, 0x0) 25.1147008s ago: executing program 5 (id=1734): clock_gettime(0x2, &(0x7f00000000c0)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000100)=0x200, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffe, 0x0, 0xf5, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x21, 0x0, {0x15, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@generic={0x82, 0x9, "0658633d10b523"}, @timestamp={0x44, 0x8, 0x48, 0x0, 0x0, [0x5]}, @timestamp_prespec={0x44, 0x2c, 0xee, 0x3, 0x7, [{@multicast1, 0x3}, {@multicast1, 0x7fffffff}, {@multicast1, 0x5}, {@private=0xa010102, 0xffff}, {@empty, 0x1}]}]}}}}}}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0x58, 0x5) 23.948057453s ago: executing program 5 (id=1756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x1, 0x4) write(r2, &(0x7f0000000200)='7', 0x1) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0xc0ed0000, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000140012800900010076657468000000000400028408041343", @ANYRES32=r3, @ANYBLOB="8b83e17962c296e7052c2813690bd0e03c9591df21b33b547f15278b894390249e34bf915d59ff2dbcd3e8b014154cfcb0f85d"], 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) 23.810644879s ago: executing program 5 (id=1757): connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)='\x06\x00\x00\x00\a\x00\x00\x00\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\'\x00\xaf\r\x15\xa0\xd7\xd7\xb6\x9bz\xb2\xaf\xfd\x87fn\x82\x90\xf9\xb4A\xdf\xabB\xdda\x7f\xb8\x96\x1a\xe7\xc1\xabV\x02r\xdd\x9cD\x90\xce\xfa\xff\xff\xff\\!\x1c\xbf\xfa\xe8\x97\x8cD\"\xa3w\x00\x00N\xe6\xeca)\xbc\x97)X\xf6\xa7\xf1S\x11\x8b\x93{\xc2\xfd$\x15Q\xde\x9fJ\xe4\xa5\xb7\xa7\xcb\xbd\x12$EI\x15O\x14\xbfZ\xb5yQ\x9e7d#Jj\x1cPG\a\xaa\x81\xac\x1d\xed1\xebG\x93\x8c>R\xba\xbd9\xde\xc1vd\x9d\xcd\xbfCx)W \xc8\xdee\x06e\xca\x17\'r\xb8m\xe0\xe66\xbc\xe1P\xaa\xa9M\xbc\xc7\x84\xe9\x01H{\xa89\x9a\xc1\xaa\x0f\xed/*\xa5\xf1\xce\\\xd5\x7f\x15\xa5\x80\xba\xc8\xf55\x9ac\x0e\xd6\xa3\xac\x91\xb5\xc5\x1a\x14_U\xc7\xc8V\xa1\xc0\xc7\x8d\xd0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83@*\xd2\xfb\xa4\x85\xdc\xca\xe2\xd6\xaeL(\xe5\xf3\xa9o\x80\xfaGDi\xb32\x924\xd0\xb35\xf0i\x06\x18\xef\xaa\xcf\xb8:l^\xe5\x9b\xb4\x01-\xe5;\x1b\xcf\x1b\xd6\xa2\xf0\xe9cg\x858\xbdJZ\xfd\xb4\x1atH\xfb\x87\xd3I\xa0Y\xab\x84\xdbGWc\xc4\x18\xb0X7\xa5\xd6\x06\x89\xea\b\xa2z ') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 19.290707515s ago: executing program 4 (id=1792): r0 = fsopen(&(0x7f0000000000)='overlay\x00', 0x1) setns(0xc9, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) 19.240734987s ago: executing program 4 (id=1794): socket$inet_udp(0x2, 0x2, 0x0) 19.238634393s ago: executing program 4 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="64000000410001000000000000000000030100000f0000004200010000112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3c0005bc5c867495000004000280040003"], 0x64}, 0x1, 0x300000000000000}, 0x0) 19.156965587s ago: executing program 4 (id=1798): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1}, 0x28) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./tracing\x00', &(0x7f0000000780)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='!:my', 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000640)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x2, 0x0) mount(&(0x7f0000000440)=@filename='./dev/sda1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000500)='./mnt\x00') r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write(r5, &(0x7f0000000580)='dir .', 0x5) write(r5, &(0x7f00000005c0)='bind', 0x4) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0xcb}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe6, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) r7 = syz_clone(0xc8200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x22140000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r7], 0x1}, 0x58) 19.089503045s ago: executing program 4 (id=1799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000004000000000000000004018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000020c5000b001a000000bf0900000000000026090600000003e70400000006000000180100002020642500000000002020207d9af8ff00000000ad91f9ff0000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200010000008500000084000000b70000000000000295"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.859386803s ago: executing program 4 (id=1805): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='7', 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="3f0000000100000ee03c99f5334749b9a6a674499dcae5c2380b9501ae2ea5a3774388e95b348ad88c730b301cbcbca889", 0x31) 18.787723361s ago: executing program 34 (id=1805): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='7', 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="3f0000000100000ee03c99f5334749b9a6a674499dcae5c2380b9501ae2ea5a3774388e95b348ad88c730b301cbcbca889", 0x31) 14.790465466s ago: executing program 6 (id=1840): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="64000000410001000000000000000000030100000f0000004200010000112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3c0005bc5c867495000004000280040003"], 0x64}, 0x1, 0x4000000000000000}, 0x0) 14.729253702s ago: executing program 6 (id=1842): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x28, r0, 0x527, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x35, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000814) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='new default user:syz 000000000000000040'], 0x2a, 0x0) add_key(&(0x7f00000005c0)='encrypted\x00', &(0x7f0000000600), &(0x7f0000000640), 0xca, 0xfffffffffffffffe) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11) (async) ioctl$KDSETLED(r2, 0x4b32, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000480)={0x2, 0x1, 0x0, 0x3, 0x189, &(0x7f0000000080)="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"}) 14.680371325s ago: executing program 6 (id=1844): r0 = socket(0xb, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x800}, 0x94) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4408c0, 0x0) (async, rerun: 64) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000014c0)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000001500)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) (async) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000001540)=""/222, &(0x7f0000001640)=0x88fe) (async, rerun: 32) close(r2) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000001680)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000016c0)='sys\x00', &(0x7f0000001700)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000001740)='sys/class/net/bridge0/bridge/multicast_querier\x00', 0x20081, 0x0) write(r4, &(0x7f0000001780)='1', 0x1) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000001440)=0x7, 0x4) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/4099, 0x1003}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x0) (async, rerun: 64) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000001480)=0xfffffffe) (async, rerun: 64) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={0xffffffffffffffff, r1, 0x4, r1}, 0x10) 14.530767035s ago: executing program 6 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="64000000410001000000000000000000030100000f0000004200010000112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e000005bc5c867495000004000280040003"], 0x64}}, 0xc00000000000000) 14.5306108s ago: executing program 6 (id=1847): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc_mnt\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc_mnt/kcore\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000368000/0x4000)=nil, 0x4000) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000180)) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000001800)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) r3 = fsopen(&(0x7f0000001880)='befs\x00', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000008f700000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) write(r2, &(0x7f00000018c0)='27', 0x2) mount(&(0x7f0000001900)=@nullb, &(0x7f0000001940)='./cgroup\x00', &(0x7f0000001980)='jfs\x00', 0x2200010, 0x0) r5 = fsmount$ext4(r3, 0x0, 0x1) mknodat$null(r5, &(0x7f00000019c0)='./proc\x00', 0x4, 0x103) write(r2, &(0x7f0000001a00)="31ee46cdad35189951a70ef80c114db06d22d787f6", 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) r6 = socket(0x10, 0x3, 0x7) sendmsg$nl_route(r6, 0x0, 0x20000150) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, 0x0, 0x0) 14.454265689s ago: executing program 6 (id=1849): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2c, 0x25dfdbed, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040050) recvfrom(r0, &(0x7f0000000000)=""/65, 0x41, 0x10000, &(0x7f0000000080)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) 8.70283822s ago: executing program 35 (id=1757): connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)='\x06\x00\x00\x00\a\x00\x00\x00\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\'\x00\xaf\r\x15\xa0\xd7\xd7\xb6\x9bz\xb2\xaf\xfd\x87fn\x82\x90\xf9\xb4A\xdf\xabB\xdda\x7f\xb8\x96\x1a\xe7\xc1\xabV\x02r\xdd\x9cD\x90\xce\xfa\xff\xff\xff\\!\x1c\xbf\xfa\xe8\x97\x8cD\"\xa3w\x00\x00N\xe6\xeca)\xbc\x97)X\xf6\xa7\xf1S\x11\x8b\x93{\xc2\xfd$\x15Q\xde\x9fJ\xe4\xa5\xb7\xa7\xcb\xbd\x12$EI\x15O\x14\xbfZ\xb5yQ\x9e7d#Jj\x1cPG\a\xaa\x81\xac\x1d\xed1\xebG\x93\x8c>R\xba\xbd9\xde\xc1vd\x9d\xcd\xbfCx)W \xc8\xdee\x06e\xca\x17\'r\xb8m\xe0\xe66\xbc\xe1P\xaa\xa9M\xbc\xc7\x84\xe9\x01H{\xa89\x9a\xc1\xaa\x0f\xed/*\xa5\xf1\xce\\\xd5\x7f\x15\xa5\x80\xba\xc8\xf55\x9ac\x0e\xd6\xa3\xac\x91\xb5\xc5\x1a\x14_U\xc7\xc8V\xa1\xc0\xc7\x8d\xd0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83@*\xd2\xfb\xa4\x85\xdc\xca\xe2\xd6\xaeL(\xe5\xf3\xa9o\x80\xfaGDi\xb32\x924\xd0\xb35\xf0i\x06\x18\xef\xaa\xcf\xb8:l^\xe5\x9b\xb4\x01-\xe5;\x1b\xcf\x1b\xd6\xa2\xf0\xe9cg\x858\xbdJZ\xfd\xb4\x1atH\xfb\x87\xd3I\xa0Y\xab\x84\xdbGWc\xc4\x18\xb0X7\xa5\xd6\x06\x89\xea\b\xa2z ') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 5.535592483s ago: executing program 7 (id=1886): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x25dfdbfd, {{@in6=@local, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@rand_addr=0x64010100, {0x3, 0x0, 0x2, 0x0, 0x10000000, 0x200}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x53}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4090) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r3, 0x40104d04, &(0x7f0000000680)) 5.457778402s ago: executing program 7 (id=1907): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000240)={0x15}) (async) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000240)={0x15}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000002780)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f0000000100)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r2, &(0x7f0000000180)=@generic={0x8, "ffff0000feff00"}, 0xc) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyACM0\x00', 0x0, 0x14) 1.144297065s ago: executing program 1 (id=1941): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000540)={0x200, 0x7, 0x4, 0x200, 0xc4, {0x77359400}, {0x1, 0x0, 0x9, 0x60, 0x4, 0xc, "ffa9cb72"}, 0x9, 0x4, {}, 0x1ff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (fail_nth: 1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.080308041s ago: executing program 1 (id=1943): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x100000000) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000540)={0x200, 0x7, 0x4, 0x200, 0xc4, {0x77359400}, {0x1, 0x0, 0x9, 0x60, 0x4, 0xc, "ffa9cb72"}, 0x9, 0x4, {}, 0x1ff}) inotify_init1(0x80000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xffff}, {0x0, 0x1}, {0x1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x63fb, 0x7, {}, {0x0}, 0xaad6, 0x7}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x4e21, 0x4, 0x4e21, 0x9, 0xa, 0x100, 0x10, 0x6, r1, r2}, {0x4, 0xfffffffffffffff8, 0x1, 0x3, 0x93c, 0x60000, 0x7fffffff, 0x2}, {0x7fffffff, 0xd2, 0x101, 0x8000000000000001}, 0x7, 0x6e6bb9, 0x0, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x4d6, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x3501, 0x4, 0x3, 0x1, 0x5, 0x7, 0x80000000}}, 0xe8) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x1a2}, {0x0}, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4099, 0x1003}], 0x1, 0xff01, 0xc}}], 0x48}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.080121915s ago: executing program 1 (id=1944): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="64000000410001000000000000000000030100000f0000004200010000112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3c0005bc5c867495000004000280040003"], 0x64}, 0x1, 0x0, 0x40000000}, 0x0) 989.269772ms ago: executing program 1 (id=1945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x3, 0x4e22, 0xfc02, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x401, 0x0, 0x81, 0x40002, 0x9, 0xfffffffffffffffd, 0x83a, 0x4}, {0x8, 0x6, 0x5, 0x7}, 0xfd, 0x6e6bb2, 0x2, 0x1}, {{@in=@remote, 0x4d6, 0x33}, 0x0, @in=@local, 0x2000000, 0x5, 0x3, 0x9, 0x9, 0x478, 0x1}}, 0xe8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x8a0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x90, 0x2c, 0x601, 0xfffffffe, 0x2, {0x0, 0x0, 0x0, r3, {0x1b, 0x7ff9}, {0xb, 0xffff}, {0x300, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x107, 0x0, 0x0, 0xffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) setns(0xc9, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x1001}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c2589c00", @ANYRES16=r14, @ANYBLOB="010029bd7040fbdbdf254400000008000300", @ANYRES32=r15, @ANYBLOB="2c00238005001e000000000005000f000200000008001c002ca0000005001f000100000005001d0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r11) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100000000000000000017000000500006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000000102030405060708090a0b0c0d0e0f101112130800010001000000080006"], 0x64}}, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r5, 0xc0285628, &(0x7f00000006c0)={0x0, 0x80000000, 0x4, '\x00', &(0x7f0000000680)=0x5}) 838.982139ms ago: executing program 1 (id=1947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0xc, 0x0, 0xfec00000}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x29, {0x0, "48b80000c0fe00000000488b18488b18f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x71}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000008c00000000000000005f"], 0x0, 0x2a}, 0x20) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) 670.370717ms ago: executing program 1 (id=1950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001880), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000019c0)=[@text32={0x20, &(0x7f0000001a00)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001a80)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001ac0)={[0x80, 0x3, 0x13, 0x1, 0x7fe, 0x0, 0xfffffffffffffffd, 0x1000000000007, 0xfffffffffffffe00, 0x40006, 0x40000000000, 0x1, 0x9ab2, 0x20000007, 0x100080000004, 0xeede], 0x2}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$KVM_RUN(r2, 0xae80, 0x0) 620.263624ms ago: executing program 3 (id=1951): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000540)={0x200, 0x7, 0x4, 0x200, 0xc4, {0x77359400}, {0x1, 0x0, 0x9, 0x60, 0x4, 0xc, "ffa9cb72"}, 0x9, 0x4, {}, 0x1ff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 469.018239ms ago: executing program 3 (id=1952): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000540)={0x200, 0x7, 0x4, 0x200, 0xc4, {0x77359400}, {0x1, 0x0, 0x9, 0x60, 0x4, 0xc, "ffa9cb72"}, 0x9, 0x4, {}, 0x1ff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (fail_nth: 2) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 380.181491ms ago: executing program 3 (id=1953): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a80), 0xb, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x5, 0xc, &(0x7f0000001280)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000001380)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r1}, &(0x7f0000001400), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x4, 0xc, &(0x7f0000001500)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000001600)="df33c9f7b9862300000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000ac0)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0x7}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0xa, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x4}, {0x7fffffc, 0x8f96}, {}, {}, {0x0, 0xffffffff}, {0x8000}], '\x00', 0x80000001}) (async) r3 = semget$private(0x0, 0x207, 0x200) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000001080)=0x7f, 0x4) (async) sendmsg$nl_route(r4, &(0x7f00000010c0)={0x0, 0x20, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x24}}, 0x0) (async, rerun: 32) semop(r3, &(0x7f0000000dc0)=[{0x3, 0x4, 0x800}, {0x3, 0xf, 0x1800}, {0x4, 0x0, 0x1000}], 0x3) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) (async) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vxlan={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VXLAN_L3MISS={0x5, 0xe, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) keyctl$search(0xa, 0x0, &(0x7f0000000d40)='keyring\x00', &(0x7f0000000d80)={'syz', 0x2}, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async, rerun: 64) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001180), 0x40000, 0x0) ioctl$CDROMCLOSETRAY(r7, 0x5319) (async) sendto$inet(r6, 0x0, 0x0, 0x20004ffd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x3) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r8, 0x702, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x101}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x4840) sendmmsg$inet(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc2493", 0xd3}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="32d33a47d96cea09000000f837ae05b96c2dc595b8a5423ec7526e7d80ccfa4ea8a931ead2a18c44af9cb0baf3675ab63acd86e4aa50366b0ad9811098fa5c6edafe2e8d5c0ead1973cec4ebf941c403fab2e86ebeb88f757f46eb94fa8891a1b3dca90148c7265f92a032bddccbd35eafbd010aef5602148284aef7eb72", 0x7e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="b3035b3b704cc7a0a9aa43641ef1afc35003e993a3405fbc2841c0b4220fec80f8eb988730ba45ebfbe3155abef20b70a107fa107f831f2686ab27aea55667c08ced4f9c91b5a5ab604c8e7e88e1984f2ef7fe8d68796d368ae185c694e910acb204", 0x62}, {&(0x7f0000000680)="14ebe6bc32c95e206b9e61801ba9b8d81909ca8d430629c69143bb8fe3335b6cbe27d8e9f56a07e06543bdebdc36826c3d44e858302e7191aa3c663f8fb8ff4c243479713091126d4258db98801f9c472ca47fc7cef2070a595b6e77c334a172a2a645935cd9624b99af5de7610457014d9abe4257284e89449ae669457a895a738650073b62dfa8929522911421710f1b22f8d8cb5efed8893423e30408b97624bf8052a490b6a2e4", 0xa9}, {&(0x7f0000000740)="01b75949454b5c897491bcb2dbba1a8e9875381b5076218c2354448c7baac46d3e5e68cc38e96f2648612fa3447850783747a2580b5e23a7d7b25b9d8c09899a86960fe187a427d93f76e5723edb66ffecc32d038f8c86933db3fed6ea89e6cbade6898664f7b38f075c9ff6963ee14debaedc902c9dd27bab52", 0x7a}], 0x3}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000800)="ac997d1742886c5b901ec86ebbee9aa3dcf38eb4cf2d51acfa54262e53d496c4dfd208c4288c12c792a3872e13cbec9a848d4855c3c44a1b9204e2dbe8064b2397f0660e2311595b43de0a5a8091178d202b99f1685fba688495d2a978c4c618", 0x60}], 0x2}}], 0x4, 0x2090) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000880)=0xdf8, 0x4) (async) writev(r6, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x161}], 0x1) 156.745349ms ago: executing program 3 (id=1954): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x1000000007c, 0x20800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x0) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000680)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, '-[-'}, {}]}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000740)=ANY=[]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [{0x20, '\xcdE\x00\x00\xbc)\x8d\xbb'}, {0x20, '%]-\x8f'}], 0xa, "c472af598f58b835e308b452ec44d6aa3beacda511c8e974757dc6d86bea01ca4d17ee02a16dff120bef01144d795986a8d823c644436787d620775dc31a2c057cb9efce0d488a3c232ebd5bd60609e96231b257681b3ded2e"}, 0x72) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r4, @ANYBLOB="140001800800010003000100050003"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup(0x75ec, &(0x7f00000007c0)={0x0, 0x3172, 0x8, 0x3, 0x1f0, 0x0, r2}) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@my=0x0}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r6, 0xc004510e, &(0x7f00000003c0)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f00000001c0)={0x0, 0x9, 0x7ff, 0x51a3, 0x4, 0x9}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000540)={0x200, 0x7, 0x4, 0x200, 0xc4, {0x77359400}, {0x1, 0x0, 0x9, 0x60, 0x4, 0xc, "ffa9cb72"}, 0x9, 0x4, {}, 0x1ff}) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 188.594µs ago: executing program 3 (id=1955): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="64000000410001000000000000000000030100000f0000004200010000112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3c0005bc5c867495000004000280040003"], 0x64}, 0x1, 0x0, 0x100000000000000}, 0x0) 0s ago: executing program 3 (id=1956): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000200)=@arm64={0x7, 0x8, 0x7d, '\x00', 0x6}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x101, 0x5, 0x6, 0x4015, 0x2, 0x10000004, 0xefffffffffffffff, 0x80000000, 0x0, 0x2000000, 0x20000, 0x2, 0x0, 0x5, 0x1], 0x2ffc, 0xd1b00}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mq_open(&(0x7f0000000400)='\xb8\x88\xf5\xdb\xb4\xeb\xa5\xe7a\xd98\xd9\x96R\xe0Na%D\xf9x\xba\xc6[\xcb`\x14]\xfe\x8e\xb8\x1a\x83\xd3w\xbf7xdD\x8b\x9b\xb6\xc9\x8f\x7f\xe6\xe4r}-\xfe9\x8c5E\xf5\xdc\x14\r\x1b_\x0fs0\xaa>\xeae\xdeZ0WYfr\xe7\x9a\xa7\xa8\x9ac\xf9\x05\x96-\x9b\xf6\xf0\x18\x88\t\b\x9c\xf5\xa1\xda\xeb\x99\xcbP^q\x8afa\xa7U\xb3C\am\xd9\x7f\xa7\xa3P3a\xb2\xafbI\xc5\xa9\x80\xa8\xf6\x9b$d|g]\x13A*Rn\xf9\xaf\x98i\xa2B\a\x83\xfc\xf5\xcf\xafb\xe8\x98kU\xa9;\xc6}\xa6~\x86\xf4\'\xed\xc5>0x0, 0x0}) pselect6(0x40, &(0x7f0000000380)={0x0, 0x0, 0x7, 0xa99, 0x8690, 0xa8, 0x5}, &(0x7f00000003c0)={0x100000000, 0xcfff, 0xb4, 0x0, 0x7ff, 0x8, 0x2, 0x5}, &(0x7f0000000400)={0x140000000000000, 0x5, 0x5, 0x8, 0x49be, 0x3, 0xd, 0x100}, &(0x7f0000000480)={r4, r5+60000000}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x9]}, 0x8}) close_range(r0, r2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/anycast6\x00') sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f2, 0x10, 0x70bd2b, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000680)=0x2, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd4, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xae}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c085}, 0x4004804) readv(r0, &(0x7f0000000e40)=[{&(0x7f00000008c0)=""/251, 0xfb}, {&(0x7f00000009c0)=""/139, 0x8b}, {&(0x7f0000000a80)=""/252, 0xfc}, {&(0x7f0000000b80)=""/219, 0xdb}, {&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000d80)=""/103, 0x67}, {&(0x7f0000000e00)=""/13, 0xd}], 0x7) syslog(0x9, &(0x7f0000000ec0)=""/54, 0x36) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) write$khugepaged_scan(r6, &(0x7f0000000f00), 0x8) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000f40), 0x372b497ace77c30d) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000f80)={r2, 0x0, 0xfffffffffffffff9, 0x7}) fanotify_init(0x1, 0x8000) ioctl$KVM_GET_XSAVE2(r8, 0x9000aecf, &(0x7f0000e5a000/0x2000)=nil) openat$audio1(0xffffffffffffff9c, &(0x7f0000000fc0), 0x4800, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r8) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, r9, 0x8, 0x401, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x88}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x20004891) kernel console output (not intermixed with test programs): =0-1 [ 138.828231][ T9457] CPU: 1 UID: 0 PID: 9457 Comm: syz.4.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.828254][ T9457] Tainted: [L]=SOFTLOCKUP [ 138.828261][ T9457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.828270][ T9457] Call Trace: [ 138.828276][ T9457] [ 138.828282][ T9457] dump_stack_lvl+0x100/0x190 [ 138.828313][ T9457] warn_alloc.cold+0x9e/0xb2 [ 138.828331][ T9457] ? __pfx_warn_alloc+0x10/0x10 [ 138.828354][ T9457] ? __kasan_kmalloc+0x8a/0xb0 [ 138.828377][ T9457] ? __get_vm_area_node+0x22b/0x350 [ 138.828396][ T9457] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 138.828418][ T9457] ? find_check_entry.isra.0+0x576/0xa00 [ 138.828446][ T9457] ? xt_counters_alloc+0x4c/0x70 [ 138.828471][ T9457] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 138.828493][ T9457] ? kasan_quarantine_put+0x104/0x240 [ 138.828514][ T9457] ? xt_counters_alloc+0x4c/0x70 [ 138.828532][ T9457] __vmalloc_node_noprof+0xad/0xf0 [ 138.828551][ T9457] ? xt_counters_alloc+0x4c/0x70 [ 138.828573][ T9457] xt_counters_alloc+0x4c/0x70 [ 138.828618][ T9457] __do_replace+0x97/0x990 [ 138.828643][ T9457] ? __pfx___do_replace+0x10/0x10 [ 138.828668][ T9457] do_ip6t_set_ctl+0xa5f/0xd00 [ 138.828687][ T9457] ? nf_sockopt_find.isra.0+0x222/0x290 [ 138.828713][ T9457] ? nf_sockopt_find.isra.0+0x222/0x290 [ 138.828743][ T9457] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 138.828763][ T9457] ? __mutex_unlock_slowpath+0x35d/0x930 [ 138.828796][ T9457] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.828827][ T9457] ? nf_sockopt_find.isra.0+0x222/0x290 [ 138.828849][ T9457] nf_setsockopt+0x8d/0xf0 [ 138.828868][ T9457] ipv6_setsockopt+0x135/0x170 [ 138.828893][ T9457] rawv6_setsockopt+0xee/0x5a0 [ 138.828913][ T9457] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 138.828932][ T9457] ? selinux_socket_setsockopt+0x6a/0x80 [ 138.828949][ T9457] ? sock_common_setsockopt+0x2e/0xf0 [ 138.828974][ T9457] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 138.829001][ T9457] do_sock_setsockopt+0xf3/0x1d0 [ 138.829028][ T9457] __sys_setsockopt+0x195/0x220 [ 138.829053][ T9457] __x64_sys_setsockopt+0xbd/0x160 [ 138.829072][ T9457] ? do_syscall_64+0xae/0x7b0 [ 138.829089][ T9457] ? lockdep_hardirqs_on+0x7d/0x110 [ 138.829115][ T9457] do_syscall_64+0x123/0x7b0 [ 138.829139][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.829157][ T9457] RIP: 0033:0x7f5642da94d9 [ 138.829173][ T9457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.829187][ T9457] RSP: 002b:00007f5640fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 138.829200][ T9457] RAX: ffffffffffffffda RBX: 00007f5643025fa0 RCX: 00007f5642da94d9 [ 138.829208][ T9457] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 138.829217][ T9457] RBP: 00007f5640fee090 R08: 00000000000003a0 R09: 0000000000000000 [ 138.829228][ T9457] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 138.829239][ T9457] R13: 00007f5643026038 R14: 00007f5643025fa0 R15: 00007ffef15f2888 [ 138.829262][ T9457] [ 138.829269][ T9457] Mem-Info: [ 138.829278][ T9457] active_anon:11441 inactive_anon:0 isolated_anon:0 [ 138.829278][ T9457] active_file:1001 inactive_file:63130 isolated_file:0 [ 138.829278][ T9457] unevictable:1000 dirty:175 writeback:0 [ 138.829278][ T9457] slab_reclaimable:8492 slab_unreclaimable:91419 [ 138.829278][ T9457] mapped:27801 shmem:4381 pagetables:1395 [ 138.829278][ T9457] sec_pagetables:299 bounce:0 [ 138.829278][ T9457] kernel_misc_reclaimable:0 [ 138.829278][ T9457] free:419198 free_pcp:14206 free_cma:0 [ 138.829317][ T9457] Node 0 active_anon:45764kB inactive_anon:0kB active_file:4004kB inactive_file:252320kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:111204kB dirty:700kB writeback:0kB shmem:15524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14592kB pagetables:5372kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 138.829358][ T9457] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:256kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 138.829396][ T9457] Node 0 DMA free:15144kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:208kB local_pcp:104kB free_cma:0kB [ 138.829438][ T9457] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 138.829465][ T9457] Node 0 DMA32 free:54060kB boost:6144kB min:33208kB low:39972kB high:46736kB reserved_highatomic:0kB free_highatomic:0kB active_anon:45764kB inactive_anon:0kB active_file:4004kB inactive_file:252320kB unevictable:2000kB writepending:700kB zspages:0kB present:2080628kB managed:1230552kB mlocked:0kB bounce:0kB free_pcp:36108kB local_pcp:10276kB free_cma:0kB [ 138.829512][ T9457] lowmem_reserve[]: 0 0 0 0 0 [ 138.829541][ T9457] Node 1 Normal free:1607588kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:2000kB writepending:0kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:20476kB local_pcp:4552kB free_cma:0kB [ 138.829587][ T9457] lowmem_reserve[]: 0 0 0 0 0 [ 138.829614][ T9457] Node 0 DMA: 8*4kB (UM) 13*8kB (UM) 10*16kB (UME) 8*32kB (UME) 8*64kB (UME) 8*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 1*4096kB (U) = 15144kB [ 138.829743][ T9457] Node 0 DMA32: 1135*4kB (UME) 768*8kB (UE) 31*16kB (UME) 44*32kB (UME) 87*64kB (UME) 51*128kB (ME) 36*256kB (ME) 19*512kB (M) 10*1024kB (UM) 0*2048kB 0*4096kB = 53868kB [ 138.829867][ T9457] Node 1 Normal: 2*4kB (UM) 3*8kB (UME) 10*16kB (UE) 43*32kB (UME) 64*64kB (UME) 45*128kB (UME) 33*256kB (M) 25*512kB (UME) 12*1024kB (UM) 5*2048kB (ME) 379*4096kB (UM) = 1607584kB [ 138.829995][ T9457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.830008][ T9457] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.830022][ T9457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.830035][ T9457] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.830048][ T9457] 68508 total pagecache pages [ 138.830068][ T9457] 0 pages in swap cache [ 138.830075][ T9457] Free swap = 124996kB [ 138.830081][ T9457] Total swap = 124996kB [ 138.830086][ T9457] 1048443 pages RAM [ 138.830091][ T9457] 0 pages HighMem/MovableOnly [ 138.830096][ T9457] 291495 pages reserved [ 138.830102][ T9457] 0 pages cma reserved [ 139.001732][ T9467] program syz.4.1216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.012364][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 139.108100][ T5789] Bluetooth: Wrong link type (-22) [ 139.201603][ T30] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 139.202972][ T30] usb 6-1: config 2 has an invalid descriptor of length 46, skipping remainder of the config [ 139.203011][ T30] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.203032][ T30] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.203052][ T30] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.204009][ T30] usb 6-1: config 2 has an invalid descriptor of length 46, skipping remainder of the config [ 139.204046][ T30] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.204065][ T30] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.204083][ T30] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.209734][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.209755][ T30] usb 6-1: Product: syz [ 139.209768][ T30] usb 6-1: Manufacturer: syz [ 139.209781][ T30] usb 6-1: SerialNumber: syz [ 139.220415][ T30] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 139.236496][ T30] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 139.243877][ T30] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 139.424921][ T5887] usb 6-1: USB disconnect, device number 9 [ 139.434118][ T5887] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 139.438401][ T5887] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 139.440803][ T5887] ti_usb_3410_5052 6-1:2.0: device disconnected [ 139.694699][ T9476] device-mapper: ioctl: Unable to rename non-existent device, to syzd2 [ 140.157680][ T9417] md: md3: recover done. [ 141.001881][ T9476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.002095][ T9476] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.013555][ T9476] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.016993][ T9476] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.017026][ T9476] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.022455][ T9476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.022936][ T9476] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.029197][ T9476] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.671132][ T9532] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 141.676222][ T9532] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.710434][ T9543] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1245'. [ 141.817160][ T5789] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 141.878980][ T9556] Unknown options in mask 6 [ 142.267339][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 142.267406][ T43] audit: type=1400 audit(1794580768.196:695): avc: denied { cmd } for pid=9566 comm="syz.4.1256" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 142.291607][ T43] audit: type=1400 audit(1794580768.216:696): avc: denied { map } for pid=9566 comm="syz.4.1256" path="/dev/video3" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 142.492963][ T9572] syzkaller0: entered promiscuous mode [ 142.492984][ T9572] syzkaller0: entered allmulticast mode [ 142.507617][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 142.542154][ T43] audit: type=1400 audit(1794580768.466:697): avc: denied { ioctl } for pid=9587 comm="syz.4.1261" path="socket:[30046]" dev="sockfs" ino=30046 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.546995][ T43] audit: type=1400 audit(1794580768.476:698): avc: denied { getopt } for pid=9587 comm="syz.4.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.588842][ T9599] syzkaller0: entered promiscuous mode [ 142.588867][ T9599] syzkaller0: entered allmulticast mode [ 142.754226][ T9575] cgroup: fork rejected by pids controller in /syz3 [ 142.825914][ T43] audit: type=1400 audit(1794580768.746:699): avc: denied { listen } for pid=9617 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 143.044852][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 144.094136][ T5873] usb 10-1: USB disconnect, device number 2 [ 144.223575][ T5789] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 144.238002][ T9659] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1270'. [ 144.338996][ T5837] nci: nci_ntf_packet: unsupported ntf opcode 0xf1c [ 144.340190][ T9669] ip_tables: iptables: counters copy to user failed while replacing table [ 144.498391][ T43] audit: type=1326 audit(1794580770.426:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.3.1277" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c065a94d9 code=0x0 [ 144.498468][ T43] audit: type=1326 audit(1794580770.426:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.3.1277" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c065a94d9 code=0x0 [ 144.654636][ T43] audit: type=1400 audit(1794580770.586:702): avc: denied { setopt } for pid=9679 comm="syz.3.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.655321][ T9686] x_tables: duplicate underflow at hook 1 [ 144.657240][ T9685] x_tables: duplicate underflow at hook 1 [ 145.094736][ T43] audit: type=1400 audit(1794580771.026:703): avc: denied { read write } for pid=9700 comm="syz.1.1284" name="usbmon8" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 145.095108][ T43] audit: type=1400 audit(1794580771.026:704): avc: denied { open } for pid=9700 comm="syz.1.1284" path="/dev/usbmon8" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 147.281016][ T9663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.414300][ T9712] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1289'. [ 147.414932][ T5789] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 147.460855][ T9718] syzkaller0: entered promiscuous mode [ 147.460871][ T9718] syzkaller0: entered allmulticast mode [ 147.466590][ T9718] tipc: Started in network mode [ 147.466606][ T9718] tipc: Node identity 26c753183752, cluster identity 4711 [ 147.467834][ T9718] tipc: Enabled bearer , priority 0 [ 147.469255][ T9717] tipc: Resetting bearer [ 147.490038][ T9717] tipc: Disabling bearer [ 147.530890][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 147.530907][ T43] audit: type=1400 audit(1794580773.456:706): avc: denied { map } for pid=9723 comm="syz.4.1294" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 147.531247][ T43] audit: type=1400 audit(1794580773.456:707): avc: denied { execute } for pid=9723 comm="syz.4.1294" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 147.584000][ T9727] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1295'. [ 148.020385][ T43] audit: type=1400 audit(1794580773.946:708): avc: denied { read } for pid=9747 comm="syz.1.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.023059][ T43] audit: type=1400 audit(1794580773.956:709): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=40384 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 148.179199][ T43] audit: type=1400 audit(1794580774.106:710): avc: denied { write } for pid=9745 comm="syz.5.1304" name="/" dev="9p" ino=71827785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.179455][ T43] audit: type=1400 audit(1794580774.106:711): avc: denied { create } for pid=9745 comm="syz.5.1304" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.179670][ T43] audit: type=1400 audit(1794580774.106:712): avc: denied { associate } for pid=9745 comm="syz.5.1304" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 148.186665][ T43] audit: type=1400 audit(1794580774.116:713): avc: denied { read append } for pid=9745 comm="syz.5.1304" path="/83/file0/cpuset.effective_cpus" dev="9p" ino=71827857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.190157][ T43] audit: type=1400 audit(1794580774.116:714): avc: denied { lock } for pid=9745 comm="syz.5.1304" path="/83/file0/cpuset.effective_cpus" dev="9p" ino=71827857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.234235][ T9754] syzkaller0: entered promiscuous mode [ 148.234250][ T9754] syzkaller0: entered allmulticast mode [ 148.237157][ T9754] tipc: Enabled bearer , priority 0 [ 148.239841][ T9753] tipc: Resetting bearer [ 148.249505][ T9753] tipc: Disabling bearer [ 148.302337][ T43] audit: type=1400 audit(1794580774.226:715): avc: denied { create } for pid=9757 comm="syz.4.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 148.546681][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 148.556200][ T9763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.598074][ T9763] bond1: (slave veth3): Enslaving as an active interface with an up link [ 148.618871][ T9763] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 149.319828][ T9779] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1317'. [ 149.560593][ T9805] syzkaller0: entered promiscuous mode [ 149.560612][ T9805] syzkaller0: entered allmulticast mode [ 149.564764][ T9805] tipc: Enabled bearer , priority 0 [ 149.567181][ T9804] tipc: Resetting bearer [ 149.582058][ T9804] tipc: Disabling bearer [ 149.694626][ T5789] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 149.698441][ T9816] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 149.705485][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1334'. [ 150.160067][ T9847] bond2 (unregistering): Released all slaves [ 150.264924][ T9855] --map-set only usable from mangle table [ 150.278752][ T9855] exFAT-fs (nullb0): invalid boot record signature [ 150.278767][ T9855] exFAT-fs (nullb0): failed to read boot sector [ 150.278775][ T9855] exFAT-fs (nullb0): failed to recognize exfat type [ 150.342893][ T9862] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 150.350631][ T9862] gadgetfs: bound to dummy_udc driver [ 150.483928][ T9876] Value of "id" is too big. [ 150.484139][ T9876] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 150.536901][ T9878] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.665881][ T9882] sctp: [Deprecated]: syz.1.1359 (pid 9882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.665881][ T9882] Use struct sctp_sack_info instead [ 151.098691][ T9921] FAULT_INJECTION: forcing a failure. [ 151.098691][ T9921] name failslab, interval 1, probability 0, space 0, times 0 [ 151.098720][ T9921] CPU: 1 UID: 0 PID: 9921 Comm: syz.5.1373 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.098751][ T9921] Tainted: [L]=SOFTLOCKUP [ 151.098758][ T9921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.098770][ T9921] Call Trace: [ 151.098777][ T9921] [ 151.098786][ T9921] dump_stack_lvl+0x100/0x190 [ 151.098823][ T9921] should_fail_ex.cold+0x5/0xa [ 151.098852][ T9921] should_failslab+0xc2/0x120 [ 151.098874][ T9921] __kmalloc_cache_noprof+0x91/0x6d0 [ 151.098898][ T9921] ? cap_capable+0x107/0x430 [ 151.098922][ T9921] ? __x64_sys_futex+0x358/0x4d0 [ 151.098942][ T9921] ? fsnotify_alloc_group+0x8d/0x320 [ 151.098965][ T9921] fsnotify_alloc_group+0x8d/0x320 [ 151.098985][ T9921] __do_sys_fanotify_init+0x26c/0xe10 [ 151.099014][ T9921] do_syscall_64+0x123/0x7b0 [ 151.099057][ T9921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.099078][ T9921] RIP: 0033:0x7fef017a94d9 [ 151.099095][ T9921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.099113][ T9921] RSP: 002b:00007fef026ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 151.099133][ T9921] RAX: ffffffffffffffda RBX: 00007fef01a25fa0 RCX: 00007fef017a94d9 [ 151.099144][ T9921] RDX: 0000000000000000 RSI: 0000000000040000 RDI: 0000000000000040 [ 151.099154][ T9921] RBP: 00007fef0183804e R08: 0000000000000000 R09: 0000000000000000 [ 151.099165][ T9921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.099176][ T9921] R13: 00007fef01a26038 R14: 00007fef01a25fa0 R15: 00007fff362e75a8 [ 151.099204][ T9921] [ 151.101544][ T9921] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.277115][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1381'. [ 151.323262][ T9955] bond0: (slave bond_slave_0): Releasing backup interface [ 151.375631][ T9967] device-mapper: raid: Choosing default region size of 4MiB [ 151.376507][ T9967] device-mapper: table: 248:6: raid: Invalid flags combination (-EINVAL) [ 151.376528][ T9967] device-mapper: ioctl: error adding target to table [ 151.388697][ T9967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1387'. [ 151.423653][ T9967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=9967 comm=syz.4.1387 [ 151.986062][T10025] Cannot find add_set index 1 as target [ 152.116624][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 152.432582][T10058] FAULT_INJECTION: forcing a failure. [ 152.432582][T10058] name failslab, interval 1, probability 0, space 0, times 0 [ 152.432604][T10058] CPU: 0 UID: 0 PID: 10058 Comm: syz.4.1411 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.432619][T10058] Tainted: [L]=SOFTLOCKUP [ 152.432624][T10058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.432630][T10058] Call Trace: [ 152.432634][T10058] [ 152.432639][T10058] dump_stack_lvl+0x100/0x190 [ 152.432660][T10058] should_fail_ex.cold+0x5/0xa [ 152.432677][T10058] should_failslab+0xc2/0x120 [ 152.432690][T10058] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 152.432700][T10058] ? __alloc_skb+0x5b7/0x710 [ 152.432712][T10058] ? __alloc_skb+0x140/0x710 [ 152.432726][T10058] __alloc_skb+0x140/0x710 [ 152.432736][T10058] ? __alloc_skb+0x5b7/0x710 [ 152.432749][T10058] ? __pfx___alloc_skb+0x10/0x10 [ 152.432765][T10058] netlink_ack+0x117/0xba0 [ 152.432779][T10058] ? __lock_acquire+0x5c0/0x1f40 [ 152.432797][T10058] netlink_rcv_skb+0x333/0x420 [ 152.432811][T10058] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.432832][T10058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.432857][T10058] ? netlink_deliver_tap+0x1ae/0xb50 [ 152.432877][T10058] netlink_unicast+0x668/0x950 [ 152.432901][T10058] ? __pfx_netlink_unicast+0x10/0x10 [ 152.432924][T10058] netlink_sendmsg+0x9ac/0x10c0 [ 152.432940][T10058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.432957][T10058] ? selinux_socket_sendmsg+0x198/0x2f0 [ 152.432973][T10058] ? sock_write_iter+0x560/0x5d0 [ 152.432987][T10058] sock_write_iter+0x560/0x5d0 [ 152.433002][T10058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.433016][T10058] ? __pfx_sock_write_iter+0x10/0x10 [ 152.433035][T10058] ? bpf_lsm_file_permission+0x9/0x10 [ 152.433050][T10058] ? security_file_permission+0x76/0x210 [ 152.433061][T10058] ? rw_verify_area+0xce/0x6d0 [ 152.433078][T10058] vfs_write+0x6af/0x1040 [ 152.433089][T10058] ? __pfx_sock_write_iter+0x10/0x10 [ 152.433105][T10058] ? __pfx_vfs_write+0x10/0x10 [ 152.433115][T10058] ? find_held_lock+0x2b/0x80 [ 152.433134][T10058] ksys_write+0x1f8/0x250 [ 152.433145][T10058] ? __pfx_ksys_write+0x10/0x10 [ 152.433168][T10058] do_syscall_64+0x123/0x7b0 [ 152.433184][T10058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.433195][T10058] RIP: 0033:0x7f5642da94d9 [ 152.433205][T10058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.433215][T10058] RSP: 002b:00007f5640fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.433227][T10058] RAX: ffffffffffffffda RBX: 00007f5643025fa0 RCX: 00007f5642da94d9 [ 152.433233][T10058] RDX: 00000000000000a0 RSI: 0000200000000280 RDI: 0000000000000003 [ 152.433239][T10058] RBP: 00007f5642e3804e R08: 0000000000000000 R09: 0000000000000000 [ 152.433245][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.433263][T10058] R13: 00007f5643026038 R14: 00007f5643025fa0 R15: 00007ffef15f2888 [ 152.433278][T10058] [ 152.621599][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 152.621612][ T43] audit: type=1400 audit(1794580778.546:736): avc: denied { write } for pid=10066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.682319][ T43] audit: type=1400 audit(1794580778.606:737): avc: denied { write } for pid=10069 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.775311][ T43] audit: type=1400 audit(1794580778.706:738): avc: denied { write } for pid=10073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.826220][ T43] audit: type=1400 audit(1794580778.756:739): avc: denied { write } for pid=10078 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.871490][T10083] cgroup: noprefix used incorrectly [ 152.872515][T10083] 9p: Invalid gid '0x00000000ffffffff' [ 152.874941][T10082] sctp: Trying to GSO but underlying device doesn't support it. [ 152.913811][ T43] audit: type=1400 audit(1794580778.846:740): avc: denied { write } for pid=10087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.983775][ T43] audit: type=1400 audit(1794580778.906:741): avc: denied { write } for pid=10093 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.117940][ T43] audit: type=1400 audit(1794580779.046:742): avc: denied { relabelfrom } for pid=10113 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 153.118179][ T43] audit: type=1400 audit(1794580779.046:743): avc: denied { relabelto } for pid=10113 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 153.363745][T10128] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups) [ 153.373581][ T5858] nci: nci_rsp_packet: unknown rsp opcode 0xd01 [ 153.377811][T10134] netlink: 'syz.5.1429': attribute type 1 has an invalid length. [ 153.395547][T10134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.431355][T10134] bond2: (slave veth5): Enslaving as an active interface with a down link [ 153.454778][T10134] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 153.457869][T10134] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 155.356048][T10156] random: crng reseeded on system resumption [ 155.371843][ T43] audit: type=1400 audit(1794580781.296:744): avc: denied { ioctl } for pid=10155 comm="syz.3.1438" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x400c330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 155.376379][ T43] audit: type=1400 audit(1794580781.306:745): avc: denied { write } for pid=10155 comm="syz.3.1438" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 156.309882][T10130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.454891][T10173] openvswitch: netlink: IP tunnel dst address not specified [ 156.456140][T10181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.457168][T10173] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.515869][T10189] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1450'. [ 156.536304][T10194] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1451'. [ 156.554056][T10190] md: couldn't update array info. -22 [ 156.600002][T10201] netlink: 'syz.5.1454': attribute type 12 has an invalid length. [ 156.608593][T10189] md3: detected capacity change from 5884 to 0 [ 156.608609][T10189] md: md3 stopped. [ 156.644256][ T5872] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 156.677233][T10206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 156.794016][ T5872] usb 9-1: unable to get BOS descriptor or descriptor too short [ 156.794044][ T5872] usb 9-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 156.794839][ T5872] usb 9-1: config 142 has an invalid interface number: 251 but max is 0 [ 156.794858][ T5872] usb 9-1: config 142 descriptor has 1 excess byte, ignoring [ 156.794869][ T5872] usb 9-1: config 142 has no interface number 0 [ 156.794887][ T5872] usb 9-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 156.794898][ T5872] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 156.794909][ T5872] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 156.794919][ T5872] usb 9-1: config 142 interface 251 has no altsetting 0 [ 156.797085][ T5872] usb 9-1: string descriptor 0 read error: -22 [ 156.797144][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.801549][T10175] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.801574][T10175] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.803299][ T5872] cypress_m8 9-1:142.251: HID->COM RS232 Adapter converter detected [ 156.805595][ T5872] usb 9-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 156.981713][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1463'. [ 156.996149][T10231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.017949][T10230] bond3: (slave veth7): Enslaving as an active interface with an up link [ 157.128078][T10230] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 157.135624][T10230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=10230 comm=syz.5.1463 [ 157.255320][T10244] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 157.291146][T10246] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 157.343261][T10248] syzkaller0: entered promiscuous mode [ 157.343290][T10248] syzkaller0: entered allmulticast mode [ 157.346313][T10248] tipc: Enabled bearer , priority 0 [ 157.347480][T10247] tipc: Resetting bearer [ 157.359294][T10247] tipc: Disabling bearer [ 157.449010][T10256] random: crng reseeded on system resumption [ 157.760115][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 157.760164][ T43] audit: type=1400 audit(1794580783.686:751): avc: denied { listen } for pid=10273 comm="syz.3.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.768078][ T43] audit: type=1400 audit(1794580783.696:752): avc: denied { connect } for pid=10273 comm="syz.3.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.922857][T10276] device-mapper: table: 248:7: crypt: Error decoding and setting key (-EINVAL) [ 157.922880][T10276] device-mapper: ioctl: error adding target to table [ 157.933285][T10251] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 157.933310][T10251] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 157.933552][ C2] usb 9-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 158.220192][ T43] audit: type=1400 audit(1794580784.146:753): avc: denied { mounton } for pid=10285 comm="syz.5.1481" path="/134/file0" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.245440][ T2425] usb 9-1: USB disconnect, device number 3 [ 158.251538][ T2425] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 158.252010][ T2425] cypress_m8 9-1:142.251: device disconnected [ 158.645087][ T43] audit: type=1400 audit(1794580784.576:754): avc: denied { write } for pid=10299 comm="syz.3.1485" name="/" dev="9p" ino=71827785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.647436][ T43] audit: type=1400 audit(1794580784.576:755): avc: denied { remove_name } for pid=10299 comm="syz.3.1485" name="file2" dev="9p" ino=71827801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.647834][ T43] audit: type=1400 audit(1794580784.576:756): avc: denied { rmdir } for pid=10299 comm="syz.3.1485" name="file2" dev="9p" ino=71827801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.795027][T10305] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.888257][ T5789] Bluetooth: hci0: Zero size dump init pkt [ 158.918084][T10316] fuse: Invalid rootmode [ 158.918613][T10316] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 158.918623][T10316] Unsupported pkey algo: 106 [ 158.919601][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1491'. [ 158.924822][T10316] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 158.953170][T10318] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.953199][T10318] overlayfs: missing 'lowerdir' [ 159.001594][ T43] audit: type=1400 audit(1794580784.926:757): avc: denied { write } for pid=10323 comm="syz.3.1494" name="functions" dev="configfs" ino=19953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.004594][ T43] audit: type=1400 audit(1794580784.936:758): avc: denied { write } for pid=10323 comm="syz.3.1494" name="configs" dev="configfs" ino=19954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.008635][ T43] audit: type=1400 audit(1794580784.936:759): avc: denied { write } for pid=10323 comm="syz.3.1494" name="c.1" dev="configfs" ino=32555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.008691][ T43] audit: type=1400 audit(1794580784.936:760): avc: denied { create } for pid=10323 comm="syz.3.1494" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 159.068603][T10330] syzkaller0: entered promiscuous mode [ 159.068625][T10330] syzkaller0: entered allmulticast mode [ 159.073358][T10330] tipc: Enabled bearer , priority 0 [ 159.075016][T10329] tipc: Resetting bearer [ 159.093439][T10329] tipc: Disabling bearer [ 159.162481][T10334] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.1498'. [ 159.194706][T10338] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1500'. [ 159.239085][T10343] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 159.239103][T10344] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 159.350241][T10361] syzkaller0: entered promiscuous mode [ 159.350254][T10361] syzkaller0: entered allmulticast mode [ 159.355530][T10361] tipc: Enabled bearer , priority 0 [ 159.356820][T10359] tipc: Resetting bearer [ 159.366669][T10359] tipc: Disabling bearer [ 159.417890][T10365] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.1509'. [ 159.448912][T10369] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 159.623088][T10392] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1519'. [ 159.655071][T10400] syzkaller0: entered promiscuous mode [ 159.655086][T10400] syzkaller0: entered allmulticast mode [ 159.660593][T10400] tipc: Enabled bearer , priority 0 [ 159.661550][T10399] tipc: Resetting bearer [ 159.677836][T10399] tipc: Disabling bearer [ 159.970994][T10432] syzkaller0: entered promiscuous mode [ 159.971023][T10432] syzkaller0: entered allmulticast mode [ 159.977136][T10432] tipc: Enabled bearer , priority 0 [ 159.978584][T10431] tipc: Resetting bearer [ 159.994990][T10431] tipc: Disabling bearer [ 160.069241][T10441] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 160.098635][T10446] overlay: Unknown parameter 'uid<00000000000000000000' [ 160.100875][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1541'. [ 160.153289][T10446] ip_tables: iptables: counters copy to user failed while replacing table [ 160.232098][T10451] FAULT_INJECTION: forcing a failure. [ 160.232098][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 160.232149][T10451] CPU: 0 UID: 0 PID: 10451 Comm: syz.5.1543 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.232174][T10451] Tainted: [L]=SOFTLOCKUP [ 160.232181][T10451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.232193][T10451] Call Trace: [ 160.232201][T10451] [ 160.232228][T10451] dump_stack_lvl+0x100/0x190 [ 160.232267][T10451] should_fail_ex.cold+0x5/0xa [ 160.232299][T10451] should_failslab+0xc2/0x120 [ 160.232323][T10451] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 160.232343][T10451] ? __do_sys_fsconfig+0x834/0xcb0 [ 160.232365][T10451] ? smb3_parse_devname+0xfd/0x500 [ 160.232398][T10451] kstrndup+0x64/0x120 [ 160.232422][T10451] smb3_parse_devname+0xfd/0x500 [ 160.232453][T10451] smb3_fs_context_parse_param+0x3f02/0x7740 [ 160.232486][T10451] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 160.232545][T10451] ? __pfx_selinux_fs_context_parse_param+0x10/0x10 [ 160.232582][T10451] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 160.232612][T10451] ? vfs_parse_fs_param+0x200/0x3b0 [ 160.232645][T10451] vfs_parse_fs_param+0x200/0x3b0 [ 160.232676][T10451] __do_sys_fsconfig+0x617/0xcb0 [ 160.232699][T10451] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 160.232735][T10451] do_syscall_64+0x123/0x7b0 [ 160.232778][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.232800][T10451] RIP: 0033:0x7fef017a94d9 [ 160.232818][T10451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.232838][T10451] RSP: 002b:00007fef026ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 160.232859][T10451] RAX: ffffffffffffffda RBX: 00007fef01a25fa0 RCX: 00007fef017a94d9 [ 160.232873][T10451] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 0000000000000004 [ 160.232886][T10451] RBP: 00007fef0183804e R08: 0000000000000000 R09: 0000000000000000 [ 160.232899][T10451] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 160.232912][T10451] R13: 00007fef01a26038 R14: 00007fef01a25fa0 R15: 00007fff362e75a8 [ 160.232941][T10451] [ 160.237960][T10451] CIFS: VFS: Unable to allocate memory for devname [ 160.372351][ T5872] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 160.399176][T10455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10455 comm=syz.5.1545 [ 160.399242][T10455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10455 comm=syz.5.1545 [ 160.399254][T10455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=10455 comm=syz.5.1545 [ 160.525121][ T5872] usb 6-1: New USB device found: idVendor=28de, idProduct=1205, bcdDevice=0.00 [ 160.526034][ T5872] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 160.526055][ T5872] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.526072][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.530369][ T5872] usb 6-1: config 0 descriptor?? [ 160.531070][T10447] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.618476][T10460] syzkaller0: entered promiscuous mode [ 160.618490][T10460] syzkaller0: entered allmulticast mode [ 160.624581][T10460] tipc: Enabled bearer , priority 0 [ 160.627293][T10459] tipc: Resetting bearer [ 160.645553][T10459] tipc: Disabling bearer [ 160.786128][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1551'. [ 160.827874][ T5872] usbhid 6-1:0.0: can't add hid device: -71 [ 160.827979][ T5872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 160.832823][ T5872] usb 6-1: USB disconnect, device number 10 [ 160.844885][T10475] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 160.850097][T10475] VFS: Can't find a romfs filesystem on dev nullb0. [ 160.850097][T10475] [ 160.898491][T10475] loop2: detected capacity change from 0 to 7 [ 160.904352][T10475] Dev loop2: unable to read RDB block 7 [ 160.904382][T10475] loop2: unable to read partition table [ 160.904594][T10475] loop2: partition table beyond EOD, truncated [ 160.904638][T10475] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.944663][T10480] random: crng reseeded on system resumption [ 161.054300][T10494] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.056875][T10491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.061681][T10491] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.316583][T10525] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.333352][T10522] exFAT-fs (nbd3): unable to read boot sector [ 161.333361][T10522] exFAT-fs (nbd3): failed to read boot sector [ 161.333366][T10522] exFAT-fs (nbd3): failed to recognize exfat type [ 161.870761][T10554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.980941][T10558] loop5: detected capacity change from 0 to 7 [ 162.018684][T10558] Dev loop5: unable to read RDB block 7 [ 162.018725][T10558] loop5: unable to read partition table [ 162.018866][T10558] loop5: partition table beyond EOD, truncated [ 162.018902][T10558] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.554487][T10534] dvmrp6: entered allmulticast mode [ 162.575790][ T5858] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 162.576074][ T5858] bond2: (slave veth5): making interface the new active one [ 162.582179][ T5858] bond2: active interface up! [ 162.642753][T10565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1587'. [ 162.687492][T10571] FAULT_INJECTION: forcing a failure. [ 162.687492][T10571] name failslab, interval 1, probability 0, space 0, times 0 [ 162.687513][T10571] CPU: 0 UID: 0 PID: 10571 Comm: syz.3.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.687556][T10571] Tainted: [L]=SOFTLOCKUP [ 162.687560][T10571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.687591][T10571] Call Trace: [ 162.687595][T10571] [ 162.687600][T10571] dump_stack_lvl+0x100/0x190 [ 162.687624][T10571] should_fail_ex.cold+0x5/0xa [ 162.687642][T10571] should_failslab+0xc2/0x120 [ 162.687655][T10571] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 162.687668][T10571] ? nfs_get_tree+0x76c/0x1440 [ 162.687684][T10571] kmemdup_nul+0x49/0xd0 [ 162.687696][T10571] nfs_get_tree+0x76c/0x1440 [ 162.687713][T10571] vfs_get_tree+0x92/0x320 [ 162.687744][T10571] vfs_cmd_create+0xd7/0x2a0 [ 162.687759][T10571] __do_sys_fsconfig+0x55a/0xcb0 [ 162.687771][T10571] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 162.687788][T10571] do_syscall_64+0x123/0x7b0 [ 162.691653][T10571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.691688][T10571] RIP: 0033:0x7f0c065a94d9 [ 162.691740][T10571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.691751][T10571] RSP: 002b:00007f0c073e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 162.691763][T10571] RAX: ffffffffffffffda RBX: 00007f0c06825fa0 RCX: 00007f0c065a94d9 [ 162.691770][T10571] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 162.691777][T10571] RBP: 00007f0c0663804e R08: 0000000000000000 R09: 0000000000000000 [ 162.691783][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.691789][T10571] R13: 00007f0c06826038 R14: 00007f0c06825fa0 R15: 00007fffd1efd608 [ 162.691824][T10571] [ 162.836721][T10591] netlink: 'syz.5.1596': attribute type 10 has an invalid length. [ 162.846261][T10591] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 162.974448][ T43] kauditd_printk_skb: 134 callbacks suppressed [ 162.974466][ T43] audit: type=1400 audit(1794580788.906:895): avc: denied { write } for pid=10596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.991903][T10601] syzkaller0: entered promiscuous mode [ 162.991924][T10601] syzkaller0: entered allmulticast mode [ 162.997481][T10601] tipc: Enabled bearer , priority 0 [ 163.000733][T10599] tipc: Resetting bearer [ 163.018378][T10599] tipc: Disabling bearer [ 163.049178][ T43] audit: type=1400 audit(1794580788.976:896): avc: denied { write } for pid=10603 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.149036][ T43] audit: type=1400 audit(1794580789.076:897): avc: denied { write } for pid=10607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.213404][ T43] audit: type=1400 audit(1794580789.146:898): avc: denied { write } for pid=10614 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.281708][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1603'. [ 163.292739][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1604'. [ 163.319188][ T43] audit: type=1400 audit(1794580789.246:899): avc: denied { write } for pid=10624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.350781][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 163.357320][T10632] bond0: option slaves: interface -bond_slave_0 does not exist! [ 163.370020][ T43] audit: type=1400 audit(1794580789.286:900): avc: denied { load_policy } for pid=10631 comm="syz.5.1605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 163.376579][T10633] SELinux: policydb magic number 0x1c47ff8c does not match expected magic number 0xf97cff8c [ 163.376620][T10633] SELinux: failed to load policy [ 163.398869][ T43] audit: type=1400 audit(1794580789.326:901): avc: denied { write } for pid=10635 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.411099][T10638] random: crng reseeded on system resumption [ 163.487959][T10642] syzkaller0: entered promiscuous mode [ 163.487983][T10642] syzkaller0: entered allmulticast mode [ 163.491404][T10642] tipc: Enabled bearer , priority 0 [ 163.495211][T10640] tipc: Resetting bearer [ 163.499340][ T43] audit: type=1400 audit(1794580789.426:902): avc: denied { write } for pid=10639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.530845][ T43] audit: type=1400 audit(1794580789.456:903): avc: denied { prog_run } for pid=10645 comm="syz.4.1609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=bpf permissive=1 [ 163.540206][T10640] tipc: Disabling bearer [ 163.552000][T10647] FAULT_INJECTION: forcing a failure. [ 163.552000][T10647] name failslab, interval 1, probability 0, space 0, times 0 [ 163.552021][T10647] CPU: 2 UID: 0 PID: 10647 Comm: syz.4.1609 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.552036][T10647] Tainted: [L]=SOFTLOCKUP [ 163.552040][T10647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.552046][T10647] Call Trace: [ 163.552051][T10647] [ 163.552055][T10647] dump_stack_lvl+0x100/0x190 [ 163.552077][T10647] should_fail_ex.cold+0x5/0xa [ 163.552093][T10647] should_failslab+0xc2/0x120 [ 163.552112][T10647] __kmalloc_cache_noprof+0x91/0x6d0 [ 163.552126][T10647] ? lockdep_init_map_type+0x5c/0x250 [ 163.552146][T10647] ? fib6_net_init+0x165/0xb20 [ 163.552163][T10647] ? __pfx_fib6_net_init+0x10/0x10 [ 163.552179][T10647] fib6_net_init+0x165/0xb20 [ 163.552190][T10647] ? __pfx_fib6_net_init+0x10/0x10 [ 163.552224][T10647] ops_init+0x1e2/0x5f0 [ 163.552243][T10647] setup_net+0x117/0x3a0 [ 163.552259][T10647] ? __pfx_setup_net+0x10/0x10 [ 163.552274][T10647] ? bpf_lsm_namespace_init+0x9/0x10 [ 163.552290][T10647] copy_net_ns+0x343/0x7a0 [ 163.552308][T10647] create_new_namespaces+0x3ea/0xac0 [ 163.552328][T10647] unshare_nsproxy_namespaces+0xf6/0x210 [ 163.552345][T10647] ksys_unshare+0x44f/0x980 [ 163.552359][T10647] ? __pfx_ksys_unshare+0x10/0x10 [ 163.552379][T10647] __x64_sys_unshare+0x31/0x40 [ 163.552392][T10647] do_syscall_64+0x123/0x7b0 [ 163.552407][T10647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.552418][T10647] RIP: 0033:0x7f5642da94d9 [ 163.552427][T10647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.552437][T10647] RSP: 002b:00007f5640fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 163.552448][T10647] RAX: ffffffffffffffda RBX: 00007f5643025fa0 RCX: 00007f5642da94d9 [ 163.552454][T10647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 163.552460][T10647] RBP: 00007f5642e3804e R08: 0000000000000000 R09: 0000000000000000 [ 163.552466][T10647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.552472][T10647] R13: 00007f5643026038 R14: 00007f5643025fa0 R15: 00007ffef15f2888 [ 163.552513][T10647] [ 163.583903][ T43] audit: type=1400 audit(1794580789.516:904): avc: denied { write } for pid=10648 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.597417][T10652] FAULT_INJECTION: forcing a failure. [ 163.597417][T10652] name failslab, interval 1, probability 0, space 0, times 0 [ 163.597437][T10652] CPU: 2 UID: 0 PID: 10652 Comm: syz.4.1609 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.597453][T10652] Tainted: [L]=SOFTLOCKUP [ 163.597457][T10652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.597463][T10652] Call Trace: [ 163.597468][T10652] [ 163.597472][T10652] dump_stack_lvl+0x100/0x190 [ 163.597493][T10652] should_fail_ex.cold+0x5/0xa [ 163.597511][T10652] should_failslab+0xc2/0x120 [ 163.597525][T10652] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 163.597537][T10652] ? lock_acquire+0x1d1/0x380 [ 163.597552][T10652] ? kstrdup_const+0x63/0x80 [ 163.597566][T10652] kstrdup+0x51/0xe0 [ 163.597578][T10652] kstrdup_const+0x63/0x80 [ 163.597589][T10652] alloc_vfsmnt+0x19e/0x840 [ 163.597601][T10652] ? copy_tree+0x550/0xc50 [ 163.597616][T10652] clone_mnt+0x4b/0x9c0 [ 163.597628][T10652] copy_tree+0x327/0xc50 [ 163.597645][T10652] copy_mnt_ns+0x3e8/0x1180 [ 163.597677][T10652] ? __pfx_copy_mnt_ns+0x10/0x10 [ 163.597696][T10652] ? create_new_namespaces+0x30/0xac0 [ 163.597712][T10652] create_new_namespaces+0xd3/0xac0 [ 163.597726][T10652] ? bpf_lsm_capable+0x9/0x10 [ 163.597737][T10652] ? security_capable+0x80/0x260 [ 163.597755][T10652] unshare_nsproxy_namespaces+0xf6/0x210 [ 163.597771][T10652] ksys_unshare+0x44f/0x980 [ 163.597786][T10652] ? __pfx_ksys_unshare+0x10/0x10 [ 163.597805][T10652] __x64_sys_unshare+0x31/0x40 [ 163.597818][T10652] do_syscall_64+0x123/0x7b0 [ 163.597832][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.597843][T10652] RIP: 0033:0x7f5642da94d9 [ 163.597852][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.597862][T10652] RSP: 002b:00007f5640fcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 163.597873][T10652] RAX: ffffffffffffffda RBX: 00007f5643026090 RCX: 00007f5642da94d9 [ 163.597879][T10652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024060400 [ 163.597885][T10652] RBP: 00007f5642e3804e R08: 0000000000000000 R09: 0000000000000000 [ 163.597891][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.597897][T10652] R13: 00007f5643026128 R14: 00007f5643026090 R15: 00007ffef15f2888 [ 163.597911][T10652] [ 164.003638][T10674] random: crng reseeded on system resumption [ 164.134932][T10677] syzkaller0: entered promiscuous mode [ 164.135000][T10677] syzkaller0: entered allmulticast mode [ 164.143256][T10677] tipc: Enabled bearer , priority 0 [ 164.152509][T10676] tipc: Resetting bearer [ 164.170938][T10676] tipc: Disabling bearer [ 164.282717][T10682] xt_hashlimit: size too large, truncated to 1048576 [ 164.598565][T10702] random: crng reseeded on system resumption [ 164.799143][T10710] netlink: 'syz.1.1629': attribute type 72 has an invalid length. [ 164.885680][T10723] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.915639][T10725] random: crng reseeded on system resumption [ 165.324906][T10740] netlink: 'syz.1.1638': attribute type 4 has an invalid length. [ 165.324922][T10740] netlink: 'syz.1.1638': attribute type 10 has an invalid length. [ 165.324929][T10740] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1638'. [ 165.325446][T10740] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 165.360940][T10742] netlink: 'syz.1.1639': attribute type 72 has an invalid length. [ 165.539874][T10750] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.558141][T10751] bond1: entered allmulticast mode [ 165.558344][T10751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.568706][T10751] macvlan0: entered allmulticast mode [ 165.568719][T10751] virt_wifi0: entered allmulticast mode [ 165.569389][T10751] bond1: (slave macvlan0): Enslaving as a backup interface with a down link [ 165.575969][T10751] ip6gretap1: entered allmulticast mode [ 165.576221][T10751] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 165.580387][T10754] random: crng reseeded on system resumption [ 165.673350][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.696428][T10759] CIFS: Witness protocol support is experimental [ 165.696492][T10759] CIFS mount error: No usable UNC path provided in device string! [ 165.696492][T10759] [ 165.696713][T10759] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 165.786383][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.883937][T10777] random: crng reseeded on system resumption [ 165.931992][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1655'. [ 165.941583][T10788] ext3: Unknown parameter 'V3Ã"«_' [ 166.024883][T10797] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.039012][ T5789] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 166.177185][T10807] XFS (nullb0): Invalid device [./loop0], error=-15 [ 166.425114][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1666'. [ 166.529941][T10824] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1668'. [ 166.564846][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 166.598509][ T5789] Bluetooth: hci3: unexpected event 0x2f length: 509 > 255 [ 166.613246][T10828] syzkaller0: left promiscuous mode [ 166.613260][T10828] syzkaller0: left allmulticast mode [ 166.900074][T10834] /dev/sr0: Can't open blockdev [ 167.152825][T10845] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1677'. [ 167.228274][T10851] syzkaller0: entered promiscuous mode [ 167.228293][T10851] syzkaller0: entered allmulticast mode [ 167.230900][T10851] tipc: Enabling of bearer rejected, already enabled [ 167.245011][T10853] random: crng reseeded on system resumption [ 167.373156][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.435658][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.483094][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.540803][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.581570][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.631947][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.694969][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.728206][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.752685][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.787332][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.824796][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.864613][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.906403][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.931863][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.962644][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 167.987822][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 168.023027][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 168.058640][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 168.090157][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 168.127869][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 168.161792][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 168.177758][T10860] nvme nvme0: rdma connection establishment failed (-512) [ 168.235105][T10903] random: crng reseeded on system resumption [ 168.294461][T10910] input: syz1 as /devices/virtual/input/input8 [ 168.330300][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 168.330318][ T43] audit: type=1400 audit(1794580794.256:918): avc: denied { write } for pid=10909 comm="syz.1.1692" path="socket:[37028]" dev="sockfs" ino=37028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 168.476348][ T43] audit: type=1400 audit(1794580794.396:919): avc: denied { append } for pid=10927 comm="syz.5.1697" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 168.677577][T10936] i2c i2c-0: new_device: Can't parse I2C address [ 168.896749][ T43] audit: type=1400 audit(1794580794.826:920): avc: denied { read } for pid=10939 comm="syz.5.1701" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 168.897018][ T43] audit: type=1400 audit(1794580794.826:921): avc: denied { open } for pid=10939 comm="syz.5.1701" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 168.899023][ T43] audit: type=1400 audit(1794580794.826:922): avc: denied { ioctl } for pid=10939 comm="syz.5.1701" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 169.261104][T10951] __nla_validate_parse: 1 callbacks suppressed [ 169.261117][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 169.486755][ T43] audit: type=1400 audit(1794580795.416:923): avc: denied { write } for pid=10960 comm="syz.1.1703" name="/" dev="9p" ino=71827785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.496000][ T43] audit: type=1804 audit(1794580795.426:924): pid=10961 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1703" name="/newroot/446/file0/file0" dev="9p" ino=71827795 res=1 errno=0 [ 169.742604][T10968] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 169.947185][T10982] Bluetooth: MGMT ver 1.23 [ 170.310403][ T43] audit: type=1400 audit(1794580796.236:925): avc: denied { connect } for pid=10992 comm="syz.5.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 170.881945][ T43] audit: type=1400 audit(1794580796.806:926): avc: denied { map } for pid=11012 comm="syz.3.1723" path="socket:[37149]" dev="sockfs" ino=37149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.882137][ T43] audit: type=1400 audit(1794580796.806:927): avc: denied { read } for pid=11012 comm="syz.3.1723" path="socket:[37149]" dev="sockfs" ino=37149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.897325][T11016] openvswitch: netlink: Flow actions attr not present in new flow. [ 171.182321][ T5874] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 171.332875][ T5874] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 171.333889][ T5874] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.333913][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.333931][ T5874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.333968][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.335627][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 171.335647][ T5874] usb 6-1: Product: syz [ 171.335661][ T5874] usb 6-1: Manufacturer: syz [ 171.341143][ T5874] cdc_wdm 6-1:1.0: skipping garbage [ 171.341159][ T5874] cdc_wdm 6-1:1.0: skipping garbage [ 171.343043][ T5874] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 171.343058][ T5874] cdc_wdm 6-1:1.0: Unknown control protocol [ 171.522793][ T1321] e1000 0000:00:07.0 eth0: Reset adapter [ 171.542177][ T5874] usb 6-1: USB disconnect, device number 11 [ 171.645230][T11023] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 171.780243][T11039] netlink: 'syz.5.1730': attribute type 1 has an invalid length. [ 171.801815][ T30] wlan1 speed is unknown, defaulting to 1000 [ 171.816433][T11039] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.828683][T11039] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.828837][T11039] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 171.829037][T11039] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 171.874851][T11046] evm: overlay not supported [ 171.978212][T11053] FAULT_INJECTION: forcing a failure. [ 171.978212][T11053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.978240][T11053] CPU: 1 UID: 0 PID: 11053 Comm: syz.3.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.978264][T11053] Tainted: [L]=SOFTLOCKUP [ 171.978271][T11053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.978281][T11053] Call Trace: [ 171.978296][T11053] [ 171.978304][T11053] dump_stack_lvl+0x100/0x190 [ 171.978342][T11053] should_fail_ex.cold+0x5/0xa [ 171.978369][T11053] _copy_from_user+0x2e/0xd0 [ 171.978393][T11053] copy_msghdr_from_user+0x9f/0x4c0 [ 171.978419][T11053] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 171.978459][T11053] ___sys_sendmsg+0x17c/0x270 [ 171.978480][T11053] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.978500][T11053] ? futex_wait+0x11e/0x370 [ 171.978534][T11053] ? find_held_lock+0x2b/0x80 [ 171.978568][T11053] __sys_sendmsg+0x160/0x210 [ 171.978588][T11053] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.978621][T11053] do_syscall_64+0x123/0x7b0 [ 171.978677][T11053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.978692][T11053] RIP: 0033:0x7f0c065a94d9 [ 171.978707][T11053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.978723][T11053] RSP: 002b:00007f0c073e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.978742][T11053] RAX: ffffffffffffffda RBX: 00007f0c06825fa0 RCX: 00007f0c065a94d9 [ 171.978751][T11053] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 171.978759][T11053] RBP: 00007f0c0663804e R08: 0000000000000000 R09: 0000000000000000 [ 171.978767][T11053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.978776][T11053] R13: 00007f0c06826038 R14: 00007f0c06825fa0 R15: 00007fffd1efd608 [ 171.978801][T11053] [ 171.982499][ T5874] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 172.119452][ T5872] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 172.142885][ T5874] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 172.143879][ T5874] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.143898][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.143913][ T5874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.143951][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.145560][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.145581][ T5874] usb 6-1: Product: syz [ 172.145594][ T5874] usb 6-1: Manufacturer: syz [ 172.151791][ T5874] cdc_wdm 6-1:1.0: skipping garbage [ 172.151805][ T5874] cdc_wdm 6-1:1.0: skipping garbage [ 172.153939][ T5874] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 172.153955][ T5874] cdc_wdm 6-1:1.0: Unknown control protocol [ 172.912872][ T5887] usb 6-1: USB disconnect, device number 12 [ 173.845469][ T1321] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 174.880198][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 174.880212][ T43] audit: type=1400 audit(1794580800.806:943): avc: denied { recv } for pid=0 comm="swapper/2" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 177.883145][ T43] audit: type=1400 audit(1794580803.806:944): avc: denied { write } for pid=11082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.942153][ T43] audit: type=1400 audit(1794580803.866:945): avc: denied { write } for pid=11085 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.782712][ T43] audit: type=1400 audit(1794580805.716:946): avc: denied { write } for pid=11089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.835974][ T43] audit: type=1400 audit(1794580805.766:947): avc: denied { write } for pid=11092 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.644547][ T43] audit: type=1400 audit(1794580809.576:948): avc: denied { write } for pid=11096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.686444][ T43] audit: type=1400 audit(1794580809.616:949): avc: denied { write } for pid=11099 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.471439][ T43] audit: type=1400 audit(1794580811.396:950): avc: denied { ioctl } for pid=11104 comm="syz.1.1735" path="socket:[35679]" dev="sockfs" ino=35679 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.485599][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1735'. [ 185.485690][T11107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.501744][T11107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.808203][T11124] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 185.809619][T11124] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 185.810706][T11124] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 185.832149][T11126] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 185.865240][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.865338][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.865408][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.865485][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.865556][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.865625][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.865726][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.865796][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866299][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866372][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866447][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866516][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866584][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866664][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866733][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866801][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866869][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.866938][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867007][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867076][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867152][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867239][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867350][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867425][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867494][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867562][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867630][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867710][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867779][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867847][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.867932][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.868002][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.868073][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.954461][T11118] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 186.115157][T11140] ./dev/sda1: Can't lookup blockdev [ 186.587453][T11110] syz.5.1734 (11110): drop_caches: 1 [ 186.626950][T11160] netlink: 'syz.4.1755': attribute type 39 has an invalid length. [ 186.653618][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1756'. [ 186.680268][T11163] FAULT_INJECTION: forcing a failure. [ 186.680268][T11163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.680299][T11163] CPU: 1 UID: 0 PID: 11163 Comm: syz.5.1756 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.680319][T11163] Tainted: [L]=SOFTLOCKUP [ 186.680327][T11163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.680336][T11163] Call Trace: [ 186.680343][T11163] [ 186.680350][T11163] dump_stack_lvl+0x100/0x190 [ 186.680433][T11163] should_fail_ex.cold+0x5/0xa [ 186.680461][T11163] should_fail_alloc_page+0xeb/0x140 [ 186.680485][T11163] prepare_alloc_pages+0x1f0/0x5b0 [ 186.680506][T11163] ? kvm_set_irq_routing+0x6bb/0x960 [ 186.680528][T11163] __alloc_frozen_pages_noprof+0x1b9/0x31e0 [ 186.680553][T11163] ? __pfx___css_rstat_updated+0x10/0x10 [ 186.680581][T11163] ? __lock_acquire+0x5c0/0x1f40 [ 186.680608][T11163] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.680638][T11163] ? update_se+0x98/0x1260 [ 186.680660][T11163] ? rcu_is_watching+0x13/0xc0 [ 186.680680][T11163] ? trace_sched_set_need_resched_tp+0x133/0x170 [ 186.680702][T11163] ? __resched_curr+0x345/0x3c0 [ 186.680731][T11163] ? find_held_lock+0x2b/0x80 [ 186.680750][T11163] ? sched_balance_rq+0x1a6e/0x4c70 [ 186.680766][T11163] ? sched_balance_rq+0x1a6e/0x4c70 [ 186.680784][T11163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.680815][T11163] ? policy_nodemask+0xed/0x5e0 [ 186.680840][T11163] alloc_pages_mpol+0x201/0x560 [ 186.680863][T11163] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 186.680892][T11163] folio_alloc_mpol_noprof+0x36/0x260 [ 186.680919][T11163] vma_alloc_folio_noprof+0xed/0x1d0 [ 186.680950][T11163] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 186.680982][T11163] do_wp_page+0x1c19/0x46c0 [ 186.681007][T11163] ? __pfx___pte_offset_map+0x10/0x10 [ 186.681034][T11163] ? __pfx_do_wp_page+0x10/0x10 [ 186.681054][T11163] ? do_raw_spin_lock+0x128/0x260 [ 186.681072][T11163] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 186.681090][T11163] ? __pfx_pgd_none+0x10/0x10 [ 186.681115][T11163] __handle_mm_fault+0x1d72/0x2f40 [ 186.681143][T11163] ? __pfx___handle_mm_fault+0x10/0x10 [ 186.681164][T11163] ? __pfx_mt_find+0x10/0x10 [ 186.681206][T11163] ? find_vma+0xbf/0x140 [ 186.681231][T11163] ? __pfx_find_vma+0x10/0x10 [ 186.681259][T11163] handle_mm_fault+0x363/0xa30 [ 186.681286][T11163] do_user_addr_fault+0x745/0x12f0 [ 186.681321][T11163] exc_page_fault+0x6f/0xd0 [ 186.681343][T11163] asm_exc_page_fault+0x26/0x30 [ 186.681362][T11163] RIP: 0010:__put_user_4+0xd/0x30 [ 186.681383][T11163] Code: 01 ca e9 c6 f8 03 00 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 f8 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 186.681399][T11163] RSP: 0018:ffffc90004457b50 EFLAGS: 00050206 [ 186.681415][T11163] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fef0268a990 [ 186.681427][T11163] RDX: 1ffff11006e71592 RSI: ffffffff8269f911 RDI: 00007fef0268a990 [ 186.681437][T11163] RBP: ffff88803738a580 R08: 000000000006c541 R09: 00000000000001e2 [ 186.681448][T11163] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88803738ac90 [ 186.681458][T11163] R13: ffff88802e8f9944 R14: 0000000000000000 R15: 0000000000000002 [ 186.681477][T11163] ? __might_fault+0x111/0x140 [ 186.681502][T11163] mm_exit_exec_release+0x23d/0x2f0 [ 186.681525][T11163] do_exit+0x6d8/0x2a00 [ 186.681547][T11163] ? __pfx_futex_wake_mark+0x10/0x10 [ 186.681576][T11163] ? __pfx_do_exit+0x10/0x10 [ 186.681600][T11163] ? do_raw_spin_lock+0x128/0x260 [ 186.681616][T11163] ? find_held_lock+0x2b/0x80 [ 186.681632][T11163] ? get_signal+0xa28/0x22e0 [ 186.681654][T11163] do_group_exit+0xd5/0x2a0 [ 186.681681][T11163] get_signal+0x1f58/0x22e0 [ 186.681701][T11163] ? __pfx_futex_wait+0x10/0x10 [ 186.681730][T11163] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.681761][T11163] ? __pfx_get_signal+0x10/0x10 [ 186.681784][T11163] ? do_futex+0x190/0x440 [ 186.681805][T11163] arch_do_signal_or_restart+0x91/0x7e0 [ 186.681827][T11163] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 186.681861][T11163] exit_to_user_mode_loop+0x139/0x700 [ 186.681880][T11163] ? rcu_is_watching+0x13/0xc0 [ 186.681903][T11163] do_syscall_64+0x661/0x7b0 [ 186.681927][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.681964][T11163] RIP: 0033:0x7fef017a94d9 [ 186.681980][T11163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.681995][T11163] RSP: 002b:00007fef0268a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 186.682011][T11163] RAX: fffffffffffffe00 RBX: 00007fef01a26098 RCX: 00007fef017a94d9 [ 186.682022][T11163] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fef01a26098 [ 186.682032][T11163] RBP: 00007fef01a26090 R08: 0000000000000000 R09: 0000000000000000 [ 186.682042][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.682053][T11163] R13: 00007fef01a26128 R14: 00007fff362e74c0 R15: 00007fff362e75a8 [ 186.682078][T11163] [ 186.692419][T11171] netlink: 'syz.4.1755': attribute type 39 has an invalid length. [ 187.031193][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'. [ 187.031218][T11173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1759'. [ 187.272328][ T5872] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 187.433510][ T5872] usb 9-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 187.434771][ T5872] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 187.434789][ T5872] usb 9-1: config 1 has no interface number 0 [ 187.434819][ T5872] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 187.434839][ T5872] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 187.434860][ T5872] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.436975][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.436994][ T5872] usb 9-1: Product: syz [ 187.437005][ T5872] usb 9-1: Manufacturer: syz [ 187.437016][ T5872] usb 9-1: SerialNumber: syz [ 187.441859][T11173] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.645555][T11173] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.693291][ T43] audit: type=1326 audit(1794580813.626:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11193 comm="syz.3.1764" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c065a94d9 code=0x0 [ 187.760689][T11196] IPv6: sit1: Disabled Multicast RS [ 187.854861][ T5872] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 188.141614][ T43] audit: type=1400 audit(1794580814.066:952): avc: denied { connect } for pid=11209 comm="syz.1.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.426264][T11217] CIFS: Attempting to mount //127.0.0.1/share [ 188.607846][T11220] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1771'. [ 188.609775][T11222] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1771'. [ 188.670545][ T43] audit: type=1400 audit(1794580814.596:953): avc: denied { getopt } for pid=11223 comm="syz.3.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.671186][T11224] x_tables: duplicate underflow at hook 2 [ 189.256345][T11217] CIFS: VFS: cifs_mount failed w/return code = -512 [ 189.332506][T11230] overlayfs: workdir and upperdir must be separate subtrees [ 189.338060][ T43] audit: type=1400 audit(1794580815.266:954): avc: denied { remount } for pid=11229 comm="syz.1.1775" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 189.348666][ T43] audit: type=1400 audit(1794580815.276:955): avc: denied { module_load } for pid=11229 comm="syz.1.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 189.348915][T11230] Invalid ELF header type: 3 != 1 [ 189.422026][ T5789] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 189.861946][ T43] audit: type=1400 audit(1794580815.786:956): avc: denied { read } for pid=11245 comm="syz.3.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.056539][ T43] audit: type=1400 audit(1794580815.986:957): avc: denied { write } for pid=11255 comm="syz.3.1783" name="nullb" dev="configfs" ino=5813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.096729][T11256] null_blk: disk nullb1 created [ 190.174278][ T5872] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 190.174295][ T5872] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 190.177091][ T5872] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 190.177104][ T5872] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 190.186869][ T5872] usb 9-1: USB disconnect, device number 4 [ 190.188188][ T5872] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 190.253767][ T5872] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 190.716713][ T43] audit: type=1400 audit(1794580816.646:958): avc: denied { bind } for pid=11265 comm="syz.1.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.717871][ T43] audit: type=1400 audit(1794580816.646:959): avc: denied { write } for pid=11265 comm="syz.1.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.720833][ T43] audit: type=1400 audit(1794580816.646:960): avc: denied { read } for pid=11265 comm="syz.1.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 190.725638][T11267] bond0: entered promiscuous mode [ 190.725655][T11267] bond_slave_1: entered promiscuous mode [ 191.257900][T11292] overlayfs: missing 'lowerdir' [ 191.399795][T11304] CacheFiles: Failed to register: -95 [ 191.435740][ T43] audit: type=1400 audit(1794580817.366:961): avc: denied { write } for pid=8189 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 191.436194][ T43] audit: type=1400 audit(1794580817.366:962): avc: denied { setattr } for pid=8189 comm="syz-executor" path="/234/tracing/instances" dev="tracefs" ino=6159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 191.671820][T11320] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 191.718619][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1804'. [ 191.720820][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1804'. [ 191.792282][T11327] device-mapper: ioctl: Unable to rename non-existent device, to uuid syzb2 [ 191.837979][ T5789] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 191.914643][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.918411][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.919240][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.920177][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.921252][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.152189][T11331] rxe_eth0 speed is unknown, defaulting to 1000 [ 192.254996][T11331] wlan1 speed is unknown, defaulting to 1000 [ 192.425754][T11331] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.425870][T11331] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.425948][T11331] bridge_slave_0: entered allmulticast mode [ 192.427256][T11331] bridge_slave_0: entered promiscuous mode [ 192.433010][T11331] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.433056][T11331] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.433106][T11331] bridge_slave_1: entered allmulticast mode [ 192.433724][T11331] bridge_slave_1: entered promiscuous mode [ 192.446342][T11331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.447658][T11331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.467855][T11331] team0: Port device team_slave_0 added [ 192.469990][T11331] team0: Port device team_slave_1 added [ 192.490736][T11331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.490752][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.490772][T11331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.492394][T11331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.492408][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.492428][T11331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.518236][T11331] hsr_slave_0: entered promiscuous mode [ 192.518904][T11331] hsr_slave_1: entered promiscuous mode [ 192.519371][T11331] debugfs: 'hsr0' already exists in 'hsr' [ 192.519383][T11331] Cannot create hsr debugfs directory [ 192.655550][T11331] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.658034][T11331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.658413][T11331] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 192.660400][T11331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.660744][T11331] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 192.662485][T11331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.662813][T11331] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.664985][T11331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.680004][T11331] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.680053][T11331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.680157][T11331] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.680200][T11331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.705915][T11331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.715050][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.715417][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.719339][T11331] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.723429][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.723507][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.737015][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.737061][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.012821][T11331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.132641][T11331] veth0_vlan: entered promiscuous mode [ 193.135850][T11331] veth1_vlan: entered promiscuous mode [ 193.152866][T11331] veth0_macvtap: entered promiscuous mode [ 193.156005][T11331] veth1_macvtap: entered promiscuous mode [ 193.164146][T11331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.169887][T11331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.202436][ T5858] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.202470][ T5858] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.202492][ T5858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.202513][ T5858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.234736][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.234750][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.261763][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.261783][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.379319][T11376] vxlan0: entered allmulticast mode [ 193.608216][T11388] netlink: 'syz.6.1813': attribute type 13 has an invalid length. [ 193.608239][T11388] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1813'. [ 193.613317][T11390] netlink: 'syz.6.1813': attribute type 13 has an invalid length. [ 193.613333][T11390] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1813'. [ 194.004149][ T5145] Bluetooth: hci0: command tx timeout [ 194.181079][ T43] kauditd_printk_skb: 108 callbacks suppressed [ 194.181097][ T43] audit: type=1400 audit(1794580820.106:1071): avc: denied { read write } for pid=11395 comm="syz.1.1815" name="vhost-vsock" dev="devtmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 194.181133][ T43] audit: type=1400 audit(1794580820.106:1072): avc: denied { open } for pid=11395 comm="syz.1.1815" path="/dev/vhost-vsock" dev="devtmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 194.181553][ T43] audit: type=1400 audit(1794580820.106:1073): avc: denied { ioctl } for pid=11395 comm="syz.1.1815" path="/dev/vhost-vsock" dev="devtmpfs" ino=1308 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 194.258340][T11399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=11399 comm=syz.1.1816 [ 194.258923][T11399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11399 comm=syz.1.1816 [ 194.413177][ T1450] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.413226][ T1450] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.536021][T11412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.757065][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1826'. [ 194.757918][T11427] sg_write: data in/out 197376/16 bytes for SCSI command 0x8-- guessing data in; [ 194.757918][T11427] program syz.6.1826 not setting count and/or reply_len properly [ 194.785604][ T43] audit: type=1400 audit(1794580820.716:1074): avc: granted { setsecparam } for pid=11430 comm="syz.1.1828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 194.881206][ T43] audit: type=1400 audit(1794580820.806:1075): avc: denied { mount } for pid=11445 comm="syz.6.1833" name="/" dev="autofs" ino=41169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 195.803975][T11482] trusted_key: encrypted_key: insufficient parameters specified [ 195.863430][ T43] audit: type=1400 audit(1794580821.796:1076): avc: denied { create } for pid=11487 comm="syz.6.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 195.909343][T11497] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1845'. [ 195.953756][ T43] audit: type=1400 audit(1794580821.886:1077): avc: denied { sqpoll } for pid=11494 comm="syz.3.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 196.049172][ T43] audit: type=1400 audit(1794580821.976:1078): avc: denied { read } for pid=11529 comm="syz.6.1847" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 196.049714][ T43] audit: type=1400 audit(1794580821.976:1079): avc: denied { open } for pid=11529 comm="syz.6.1847" path="/20/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 196.083258][ T5145] Bluetooth: hci0: command tx timeout [ 196.085581][T11531] Mount JFS Failure: -22 [ 196.085596][T11531] jfs_mount failed w/return code = -22 [ 196.133977][T11537] netlink: 'syz.3.1848': attribute type 10 has an invalid length. [ 196.145684][T11537] macvlan1: entered promiscuous mode [ 196.145704][T11537] macvlan1: entered allmulticast mode [ 196.150488][T11537] veth1_vlan: entered allmulticast mode [ 196.160793][T11537] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 196.489611][T11558] block nbd1: shutting down sockets [ 196.510258][T11555] dvmrp6: entered allmulticast mode [ 196.510793][T11555] dvmrp6: left allmulticast mode [ 197.478046][T11575] netlink: 'syz.1.1858': attribute type 7 has an invalid length. [ 197.478064][T11575] netlink: 'syz.1.1858': attribute type 8 has an invalid length. [ 197.721291][ T43] audit: type=1400 audit(1794580823.646:1080): avc: denied { associate } for pid=11593 comm="syz.3.1863" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 197.785912][T11594] bridge0: port 3(syz_tun) entered blocking state [ 197.788161][T11594] bridge0: port 3(syz_tun) entered disabled state [ 197.788255][T11594] syz_tun: entered allmulticast mode [ 197.789084][T11594] syz_tun: entered promiscuous mode [ 197.789429][T11594] bridge0: port 3(syz_tun) entered blocking state [ 197.789473][T11594] bridge0: port 3(syz_tun) entered listening state [ 197.793019][T11594] bridge0: port 3 config from 02:00:00:00:00:01 (message_age 8l > max_age 1l) [ 198.162520][ T5145] Bluetooth: hci0: command tx timeout [ 198.472567][T11598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50006 sclass=netlink_route_socket pid=11598 comm=syz.1.1865 [ 198.473075][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1865'. [ 199.196800][T11632] device-mapper: thin metadata: sb_check failed: blocknr 4295233281: wanted 0 [ 199.196957][T11632] device-mapper: block manager: superblock validator check failed for block 0 [ 199.196968][T11632] device-mapper: thin metadata: couldn't read superblock [ 199.248857][T11633] loop2: detected capacity change from 0 to 7 [ 199.260921][T11633] Dev loop2: unable to read RDB block 7 [ 199.260940][T11633] loop2: AHDI p2 [ 199.260951][T11633] loop2: partition table partially beyond EOD, truncated [ 199.366786][T11632] device-mapper: table: 248:1: thin-pool: Error creating metadata object (-ENOTBLK) [ 199.366811][T11632] device-mapper: ioctl: error adding target to table [ 199.473258][T11639] usb usb2: check_ctrlrecip: process 11639 (syz.1.1877) requesting ep 01 but needs 81 [ 199.473278][T11639] usb usb2: usbfs: process 11639 (syz.1.1877) did not claim interface 0 before use [ 199.529829][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 199.529848][ T43] audit: type=1400 audit(1794580825.456:1084): avc: denied { map } for pid=11638 comm="syz.1.1877" path="socket:[40845]" dev="sockfs" ino=40845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 199.530788][ T43] audit: type=1400 audit(1794580825.456:1085): avc: denied { cmd } for pid=11638 comm="iou-wrk-11640" path="socket:[40845]" dev="sockfs" ino=40845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 199.572684][T11640] batman_adv: batadv0: Adding interface: dummy0 [ 199.572701][T11640] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.572727][T11640] batman_adv: batadv0: Interface activated: dummy0 [ 199.586122][T11640] batadv0: mtu less than device minimum [ 199.587280][T11640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 199.588495][T11640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 199.589633][T11640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 199.590704][T11640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 199.591775][T11640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 199.592912][T11640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 199.593959][T11640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 199.595020][T11640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 199.596079][T11640] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (-320) [ 199.609808][T11640] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 199.609827][T11640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1877'. [ 199.609851][T11640] batadv0: entered promiscuous mode [ 199.609866][T11640] batadv0: entered allmulticast mode [ 199.610579][T11640] bridge0: port 3(batadv0) entered blocking state [ 199.610730][T11640] bridge0: port 3(batadv0) entered disabled state [ 199.616649][T11640] batadv0: failed to initialize vlan filtering on this port [ 200.242395][ T5145] Bluetooth: hci0: command tx timeout [ 200.399247][T11650] bond2 (unregistering): Released all slaves [ 201.954087][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.957850][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.958733][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.959527][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.960051][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.005379][ T5160] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 202.152345][ T5160] usb 6-1: Using ep0 maxpacket: 8 [ 202.152802][ T5160] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 202.153600][ T5160] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 202.153613][ T5160] usb 6-1: config 0 has no interface number 0 [ 202.153629][ T5160] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.153640][ T5160] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 202.153652][ T5160] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.153663][ T5160] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.153680][ T5160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.155296][ T5160] usb 6-1: config 0 descriptor?? [ 202.161847][ T5160] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 202.168846][T11675] rxe_eth0 speed is unknown, defaulting to 1000 [ 202.249319][T11675] wlan1 speed is unknown, defaulting to 1000 [ 202.339686][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.339719][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.428556][ T5873] usb 6-1: USB disconnect, device number 14 [ 202.428707][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 202.441936][T11671] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19 [ 202.490267][ T5873] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 202.519398][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.519431][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.556290][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.556449][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.556546][T11675] bridge_slave_0: entered allmulticast mode [ 202.559098][T11675] bridge_slave_0: entered promiscuous mode [ 202.561587][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.561713][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.561800][T11675] bridge_slave_1: entered allmulticast mode [ 202.563346][T11675] bridge_slave_1: entered promiscuous mode [ 202.609215][T11675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.611798][T11675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.621238][T11706] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 202.621252][T11706] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.622146][T11706] vhci_hcd vhci_hcd.0: Device attached [ 202.639851][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.639886][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.673930][T11675] team0: Port device team_slave_0 added [ 202.676188][T11675] team0: Port device team_slave_1 added [ 202.691177][ T43] audit: type=1400 audit(1794580828.616:1086): avc: denied { create } for pid=11705 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.697130][T11675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.697144][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.697164][T11675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.698483][T11675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.698493][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.698509][T11675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.747187][T11675] hsr_slave_0: entered promiscuous mode [ 202.748043][T11675] hsr_slave_1: entered promiscuous mode [ 202.748549][T11675] debugfs: 'hsr0' already exists in 'hsr' [ 202.748561][T11675] Cannot create hsr debugfs directory [ 202.773947][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.773980][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.862367][ T5887] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 202.866102][T11708] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 202.869372][T10646] vhci_hcd vhci_hcd.3: stop threads [ 202.869386][T10646] vhci_hcd vhci_hcd.3: release socket [ 202.870405][T10646] vhci_hcd vhci_hcd.3: disconnect device [ 203.131591][ T43] audit: type=1400 audit(1794580829.056:1087): avc: denied { search } for pid=5500 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.131998][ T43] audit: type=1400 audit(1794580829.056:1088): avc: denied { search } for pid=5500 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.132021][ T43] audit: type=1400 audit(1794580829.056:1089): avc: denied { search } for pid=5500 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.159358][ T13] bridge_slave_1: left allmulticast mode [ 203.159384][ T13] bridge_slave_1: left promiscuous mode [ 203.159522][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.170049][ T13] bridge_slave_0: left allmulticast mode [ 203.170072][ T13] bridge_slave_0: left promiscuous mode [ 203.170936][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.214355][T11261] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 203.281481][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.292955][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.294988][ T13] bond0 (unregistering): Released all slaves [ 203.300518][ T13] bond1 (unregistering): Released all slaves [ 203.317880][ T13] bond2 (unregistering): (slave veth5): Releasing active interface [ 203.319907][ T13] bond2 (unregistering): Released all slaves [ 203.334780][ T13] bond3 (unregistering): (slave veth7): Releasing backup interface [ 203.337572][ T13] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 203.350766][ T13] bond3 (unregistering): Released all slaves [ 203.361351][ T13] bond4 (unregistering): Released all slaves [ 203.375290][ T13] bond5 (unregistering): Released all slaves [ 203.405841][T11261] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 203.425584][T11675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 203.431788][T11675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.432185][T11675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 203.457122][T11675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.457503][T11675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 203.479832][T11675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.481010][T11675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 203.483428][T11675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.525182][ T43] audit: type=1400 audit(1794580829.456:1090): avc: denied { read } for pid=11728 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.525618][ T43] audit: type=1400 audit(1794580829.456:1091): avc: denied { read open } for pid=11728 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.525955][ T43] audit: type=1400 audit(1794580829.456:1092): avc: denied { getattr } for pid=11728 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1859 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.529708][ T13] tipc: Left network mode [ 203.539606][ T43] audit: type=1400 audit(1794580829.466:1093): avc: denied { write } for pid=11720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.574171][T11675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.592018][T11675] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.597471][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.597518][T11534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.628107][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.628183][T11534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.743240][ T5500] 8021q: adding VLAN 0 to HW filter on device eth6 [ 203.749731][T11675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.955660][ T5500] 8021q: adding VLAN 0 to HW filter on device eth7 [ 203.963606][T11748] No source specified [ 203.976236][T11744] rnbd_client L202: map_device: Unknown parameter or missing value 'se' [ 203.977916][T11748] rnbd_client L202: map_device: Unknown parameter or missing value 'se' [ 203.981851][T11744] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 204.009655][ T5145] Bluetooth: hci4: command tx timeout [ 204.106537][T11675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.161352][ T13] hsr_slave_0: left promiscuous mode [ 204.161944][ T13] hsr_slave_1: left promiscuous mode [ 204.163946][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.163959][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.169574][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.169585][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.178727][ T13] veth1_macvtap: left promiscuous mode [ 204.178756][ T13] veth0_macvtap: left promiscuous mode [ 204.178819][ T13] veth1_vlan: left promiscuous mode [ 204.178852][ T13] veth0_vlan: left promiscuous mode [ 204.263499][ T25] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 204.404925][ T13] team0 (unregistering): Port device team_slave_1 removed [ 204.409681][ T13] team0 (unregistering): Port device team_slave_0 removed [ 204.465691][ T5500] 8021q: adding VLAN 0 to HW filter on device eth8 [ 204.588124][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 204.588138][ T43] audit: type=1400 audit(1794580830.516:1101): avc: denied { write } for pid=11766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.608991][T11675] veth0_vlan: entered promiscuous mode [ 204.619959][T11675] veth1_vlan: entered promiscuous mode [ 204.654129][T11675] veth0_macvtap: entered promiscuous mode [ 204.661060][T11675] veth1_macvtap: entered promiscuous mode [ 204.689707][T11675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.697465][T11675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.700881][ T43] audit: type=1400 audit(1794580830.626:1102): avc: denied { write } for pid=11769 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.757512][ T5500] 8021q: adding VLAN 0 to HW filter on device eth9 [ 204.773560][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.773585][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.773601][ T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.773617][ T14] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.829767][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.829779][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.863883][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.863897][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.917067][T11784] net_ratelimit: 12 callbacks suppressed [ 204.917081][T11784] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.918204][ T43] audit: type=1400 audit(1794580830.846:1103): avc: denied { read } for pid=11783 comm="syz.1.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.996860][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1905'. [ 205.019462][T11797] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 205.022830][T11800] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1886'. [ 205.028420][T11797] jffs2: notice: (11797) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 205.031467][ T43] audit: type=1400 audit(1794580830.956:1104): avc: denied { write } for pid=11795 comm="syz.3.1904" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.031803][ T43] audit: type=1400 audit(1794580830.956:1105): avc: denied { create } for pid=11795 comm="syz.3.1904" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 205.039404][T11797] ip_tables: iptables: counters copy to user failed while replacing table [ 205.041420][ T43] audit: type=1400 audit(1794580830.966:1106): avc: denied { write } for pid=11795 comm="syz.3.1904" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.041448][ T43] audit: type=1400 audit(1794580830.966:1107): avc: denied { write } for pid=11795 comm="syz.3.1904" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.041470][ T43] audit: type=1400 audit(1794580830.966:1108): avc: denied { remove_name } for pid=11795 comm="syz.3.1904" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.041497][ T43] audit: type=1400 audit(1794580830.966:1109): avc: denied { rename } for pid=11795 comm="syz.3.1904" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 205.058193][ T43] audit: type=1400 audit(1794580830.986:1110): avc: denied { ioctl } for pid=11799 comm="syz.7.1886" path="/0/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x40104d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 205.058416][T11800] MTRR 0 not used [ 205.362514][T11821] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 205.402377][ T5160] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 205.405035][T11825] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 205.405055][T11825] overlayfs: overlapping lowerdir path [ 205.563639][ T5160] usb 12-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 205.566983][ T5160] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.574123][T11829] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 205.578237][T11829] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 205.687066][T11835] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.797964][ T5160] cdc_acm 12-1:1.0: ttyACM0: USB ACM device [ 205.820964][T11835] wlan1 speed is unknown, defaulting to 1000 [ 206.082438][ T5145] Bluetooth: hci4: command tx timeout [ 206.118460][T11842] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 206.416720][T11851] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.040897][T11857] netlink: 'syz.1.1922': attribute type 2 has an invalid length. [ 207.360814][T11870] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 207.430562][T11872] vim2m vim2m.0: vidioc_s_fmt queue busy [ 207.437673][ T5145] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 207.992424][ T5887] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 208.034959][T11878] netlink: 'syz.1.1928': attribute type 1 has an invalid length. [ 208.172401][ T5145] Bluetooth: hci4: command tx timeout [ 208.175981][T11884] FAULT_INJECTION: forcing a failure. [ 208.175981][T11884] name failslab, interval 1, probability 0, space 0, times 0 [ 208.176008][T11884] CPU: 3 UID: 0 PID: 11884 Comm: syz.1.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.176045][T11884] Tainted: [L]=SOFTLOCKUP [ 208.176051][T11884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 208.176061][T11884] Call Trace: [ 208.176066][T11884] [ 208.176075][T11884] dump_stack_lvl+0x100/0x190 [ 208.176109][T11884] should_fail_ex.cold+0x5/0xa [ 208.176138][T11884] should_failslab+0xc2/0x120 [ 208.176157][T11884] __kmalloc_cache_noprof+0x91/0x6d0 [ 208.176177][T11884] ? snd_seq_oss_writeq_new+0xb5/0x2b0 [ 208.176209][T11884] snd_seq_oss_writeq_new+0xb5/0x2b0 [ 208.176238][T11884] ? __pfx_snd_seq_oss_writeq_new+0x10/0x10 [ 208.176293][T11884] ? mark_held_locks+0x40/0x70 [ 208.176322][T11884] snd_seq_oss_open+0x7ee/0xa40 [ 208.176349][T11884] odev_open+0x6f/0x90 [ 208.176362][T11884] ? __pfx_odev_open+0x10/0x10 [ 208.176375][T11884] soundcore_open+0x2e3/0x5a0 [ 208.176390][T11884] ? __pfx_soundcore_open+0x10/0x10 [ 208.176416][T11884] chrdev_open+0x234/0x6a0 [ 208.176511][T11884] ? __pfx_chrdev_open+0x10/0x10 [ 208.176536][T11884] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 208.176570][T11884] do_dentry_open+0x674/0x1470 [ 208.176591][T11884] ? __pfx_chrdev_open+0x10/0x10 [ 208.176618][T11884] vfs_open_consume+0xcc/0x460 [ 208.176645][T11884] path_openat+0x1547/0x23f0 [ 208.176673][T11884] ? __pfx_path_openat+0x10/0x10 [ 208.176703][T11884] do_file_open+0x20e/0x430 [ 208.176727][T11884] ? __pfx_do_file_open+0x10/0x10 [ 208.176769][T11884] ? _raw_spin_unlock+0x28/0x50 [ 208.176804][T11884] ? alloc_fd+0x471/0x7a0 [ 208.176837][T11884] do_sys_openat2+0x163/0x1d0 [ 208.176863][T11884] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.176900][T11884] __x64_sys_openat+0x12d/0x210 [ 208.176928][T11884] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.176963][T11884] do_syscall_64+0x123/0x7b0 [ 208.176997][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.177014][T11884] RIP: 0033:0x7f39cc3a94d9 [ 208.177030][T11884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.177047][T11884] RSP: 002b:00007f39cd276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.177065][T11884] RAX: ffffffffffffffda RBX: 00007f39cc625fa0 RCX: 00007f39cc3a94d9 [ 208.177077][T11884] RDX: 0000000000040001 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 208.177088][T11884] RBP: 00007f39cc43804e R08: 0000000000000000 R09: 0000000000000000 [ 208.177097][T11884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.177105][T11884] R13: 00007f39cc626038 R14: 00007f39cc625fa0 R15: 00007ffe4b3279d8 [ 208.177132][T11884] [ 208.268123][T11888] ip_tables: iptables: counters copy to user failed while replacing table [ 209.450816][T11918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11918 comm=syz.3.1942 [ 209.705000][T11928] ntfs3(sr0): Primary boot signature is not NTFS. [ 209.705840][T11928] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 209.743815][T11928] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 209.783623][T11934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1948'. [ 210.089745][T11943] FAULT_INJECTION: forcing a failure. [ 210.089745][T11943] name failslab, interval 1, probability 0, space 0, times 0 [ 210.089881][T11943] CPU: 3 UID: 0 PID: 11943 Comm: syz.3.1952 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.089904][T11943] Tainted: [L]=SOFTLOCKUP [ 210.089911][T11943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.089922][T11943] Call Trace: [ 210.089945][T11943] [ 210.089953][T11943] dump_stack_lvl+0x100/0x190 [ 210.090017][T11943] should_fail_ex.cold+0x5/0xa [ 210.090042][T11943] should_failslab+0xc2/0x120 [ 210.090069][T11943] kmem_cache_alloc_noprof+0x92/0x6a0 [ 210.090096][T11943] ? vm_area_dup+0x27/0xb60 [ 210.090116][T11943] vm_area_dup+0x27/0xb60 [ 210.090136][T11943] __split_vma+0x2dd/0xce0 [ 210.090162][T11943] ? __pfx___split_vma+0x10/0x10 [ 210.090181][T11943] ? mas_next_slot+0xc05/0x13a0 [ 210.090233][T11943] vms_gather_munmap_vmas+0x3a5/0x1720 [ 210.090261][T11943] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 210.090281][T11943] ? mtree_range_walk+0x72b/0xb70 [ 210.090313][T11943] ? mas_walk+0x260/0x310 [ 210.090339][T11943] __mmap_region+0x4d4/0x3910 [ 210.090360][T11943] ? kernel_text_address+0x8d/0x100 [ 210.090379][T11943] ? bpf_ksym_find+0x128/0x1c0 [ 210.090404][T11943] ? __kernel_text_address+0xd/0x30 [ 210.090424][T11943] ? unwind_get_return_address+0x59/0xa0 [ 210.090444][T11943] ? __pfx___mmap_region+0x10/0x10 [ 210.090468][T11943] ? look_up_lock_class+0x64/0x120 [ 210.090491][T11943] ? register_lock_class+0x3f/0x7b0 [ 210.090516][T11943] ? find_held_lock+0x2b/0x80 [ 210.090532][T11943] ? ima_match_policy+0x8be/0x23f0 [ 210.090556][T11943] ? ima_match_policy+0x8be/0x23f0 [ 210.090596][T11943] ? process_measurement+0x156d/0x2360 [ 210.090625][T11943] ? down_write+0x141/0x1f0 [ 210.090649][T11943] ? up_write+0x2dc/0x5b0 [ 210.090667][T11943] ? process_measurement+0x1f4/0x2360 [ 210.090690][T11943] ? __lock_acquire+0x5c0/0x1f40 [ 210.090717][T11943] ? __lock_acquire+0x5c0/0x1f40 [ 210.090744][T11943] ? lock_acquire+0x1d1/0x380 [ 210.090810][T11943] mmap_region+0x3db/0x6d0 [ 210.090839][T11943] ? __pfx_mmap_region+0x10/0x10 [ 210.090863][T11943] ? shmem_get_unmapped_area+0x141/0x960 [ 210.090892][T11943] ? selinux_mmap_addr+0x2b/0x100 [ 210.090910][T11943] ? bpf_lsm_mmap_addr+0x9/0x30 [ 210.090933][T11943] ? security_mmap_addr+0x71/0x1e0 [ 210.090951][T11943] ? __get_unmapped_area+0x255/0x3e0 [ 210.090977][T11943] do_mmap+0x12c7/0x1c30 [ 210.090999][T11943] ? lock_acquire+0x1d1/0x380 [ 210.091021][T11943] ? __pfx_do_mmap+0x10/0x10 [ 210.091049][T11943] ? __pfx_down_write_killable+0x10/0x10 [ 210.091074][T11943] ? find_held_lock+0x2b/0x80 [ 210.091096][T11943] vm_mmap_pgoff+0x283/0x490 [ 210.091124][T11943] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 210.091145][T11943] ? lock_acquire+0x1d1/0x380 [ 210.091166][T11943] ? __mutex_unlock_slowpath+0x35d/0x930 [ 210.091195][T11943] ksys_mmap_pgoff+0xe4/0x610 [ 210.091224][T11943] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 210.091249][T11943] ? fput+0x7c/0x100 [ 210.091273][T11943] ? ksys_write+0x1ac/0x250 [ 210.091291][T11943] ? __pfx_ksys_write+0x10/0x10 [ 210.091314][T11943] __x64_sys_mmap+0x125/0x190 [ 210.091340][T11943] do_syscall_64+0x123/0x7b0 [ 210.091365][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.091384][T11943] RIP: 0033:0x7f0c065a94d9 [ 210.091398][T11943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.091414][T11943] RSP: 002b:00007f0c073e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 210.091432][T11943] RAX: ffffffffffffffda RBX: 00007f0c06825fa0 RCX: 00007f0c065a94d9 [ 210.091445][T11943] RDX: fffffffffffffffe RSI: 0000000000e7e000 RDI: 0000200000000000 [ 210.091455][T11943] RBP: 00007f0c073e2090 R08: ffffffffffffffff R09: 000000007542d000 [ 210.091465][T11943] R10: 0000000000004031 R11: 0000000000000246 R12: 0000000000000001 [ 210.091476][T11943] R13: 00007f0c06826038 R14: 00007f0c06825fa0 R15: 00007fffd1efd608 [ 210.091501][T11943] [ 210.252834][ T5145] Bluetooth: hci4: command tx timeout [ 210.280469][T11945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11945 comm=syz.3.1953 [ 210.333228][T11944] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 210.389174][T11953] ./file0: Can't lookup blockdev [ 210.418243][T11938] kvm [11937]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xa800 [ 210.418478][T11938] kvm [11937]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xb200 [ 210.446928][T11938] kvm [11937]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xe400 [ 210.473800][T11938] kvm [11937]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xee00 [ 210.474022][T11938] kvm [11937]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 210.740665][T11968] ------------[ cut here ]------------ [ 210.740692][T11968] !(flags & __GFP_NOWARN) [ 210.740696][T11968] WARNING: mm/slub.c:7144 at __kvmalloc_node_noprof+0x646/0x9b0, CPU#2: syz.1.1957/11968 [ 210.746882][T11968] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 210.749080][T11968] CPU: 2 UID: 0 PID: 11968 Comm: syz.1.1957 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.755136][T11968] Tainted: [L]=SOFTLOCKUP [ 210.757009][T11968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.761318][T11968] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 210.765412][T11968] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 210.773628][T11968] RSP: 0018:ffffc900035afb78 EFLAGS: 00010246 [ 210.776108][T11968] RAX: 0000000000000001 RBX: 0000008000000000 RCX: 0000008000000000 [ 210.780680][T11968] RDX: 0000000000000000 RSI: ffffffff8c834f00 RDI: ffffffff8e8f9930 [ 210.784082][T11968] RBP: 0000000007ffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 210.787360][T11968] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 210.790603][T11968] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 210.794014][T11968] FS: 00007f39cd2766c0(0000) GS:ffff8880d4670000(0000) knlGS:0000000000000000 [ 210.797820][T11968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.800575][T11968] CR2: 0000001b2e723ffc CR3: 0000000037004000 CR4: 0000000000352ef0 [ 210.803991][T11968] Call Trace: [ 210.805429][T11968] [ 210.806655][T11968] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 210.809002][T11968] ? udmabuf_create+0x2e5/0x10c0 [ 210.811135][T11968] udmabuf_create+0x2e5/0x10c0 [ 210.813328][T11968] ? lock_acquire+0x1d1/0x380 [ 210.815332][T11968] ? __pfx_udmabuf_create+0x10/0x10 [ 210.817573][T11968] ? find_held_lock+0x2b/0x80 [ 210.819570][T11968] ? __might_fault+0xc5/0x140 [ 210.821590][T11968] ? __might_fault+0xc5/0x140 [ 210.824169][T11968] udmabuf_ioctl+0x18f/0x300 [ 210.826145][T11968] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 210.828580][T11968] ? selinux_file_ioctl+0x1e0/0x290 [ 210.830824][T11968] ? selinux_file_ioctl+0x1e7/0x290 [ 210.833166][T11968] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 210.835345][T11968] __x64_sys_ioctl+0x18e/0x210 [ 210.837415][T11968] do_syscall_64+0x123/0x7b0 [ 210.839403][T11968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.841917][T11968] RIP: 0033:0x7f39cc3a94d9 [ 210.843963][T11968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.852988][T11968] RSP: 002b:00007f39cd276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.856429][T11968] RAX: ffffffffffffffda RBX: 00007f39cc625fa0 RCX: 00007f39cc3a94d9 [ 210.859361][T11968] RDX: 0000200000000080 RSI: 0000000040187542 RDI: 0000000000000003 [ 210.863144][T11968] RBP: 00007f39cc43804e R08: 0000000000000000 R09: 0000000000000000 [ 210.866100][T11968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.869166][T11968] R13: 00007f39cc626038 R14: 00007f39cc625fa0 R15: 00007ffe4b3279d8 [ 210.872592][T11968] [ 210.873960][T11968] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.877112][T11968] CPU: 2 UID: 0 PID: 11968 Comm: syz.1.1957 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.880924][T11968] Tainted: [L]=SOFTLOCKUP [ 210.882315][T11968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.885424][T11968] Call Trace: [ 210.886484][T11968] [ 210.887435][T11968] dump_stack_lvl+0x100/0x190 [ 210.889014][T11968] vpanic+0x2dc/0x6f8 [ 210.890351][T11968] panic+0xd1/0xe0 [ 210.891534][T11968] ? __pfx_panic+0x10/0x10 [ 210.892949][T11968] check_panic_on_warn.cold+0x19/0x34 [ 210.894616][T11968] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 210.896340][T11968] __warn.cold+0x191/0x321 [ 210.897752][T11968] __report_bug+0x30f/0x440 [ 210.899224][T11968] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 210.900949][T11968] ? __pfx___report_bug+0x10/0x10 [ 210.902524][T11968] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 210.904240][T11968] report_bug+0xb3/0x220 [ 210.905584][T11968] ? __kvmalloc_node_noprof+0x646/0x9b0 [ 210.907313][T11968] handle_bug+0x16a/0x2a0 [ 210.908887][T11968] exc_invalid_op+0x17/0x50 [ 210.910616][T11968] asm_exc_invalid_op+0x1a/0x20 [ 210.912461][T11968] RIP: 0010:__kvmalloc_node_noprof+0x646/0x9b0 [ 210.914728][T11968] Code: c1 e8 de 05 ff ff 4d 85 f6 0f 85 b6 fd ff ff 48 81 fb ff ff ff 7f 0f 86 4d fd ff ff 41 81 e4 00 20 00 00 0f 85 9c fd ff ff 90 <0f> 0b 90 e9 93 fd ff ff 41 be 10 00 00 00 e9 88 fd ff ff be 42 01 [ 210.921967][T11968] RSP: 0018:ffffc900035afb78 EFLAGS: 00010246 [ 210.924126][T11968] RAX: 0000000000000001 RBX: 0000008000000000 RCX: 0000008000000000 [ 210.926577][T11968] RDX: 0000000000000000 RSI: ffffffff8c834f00 RDI: ffffffff8e8f9930 [ 210.929070][T11968] RBP: 0000000007ffffff R08: 00000000000028c0 R09: 00000000ffffffff [ 210.931562][T11968] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 210.934023][T11968] R13: 00000000000028c0 R14: 0000000000000000 R15: 00000000ffffffff [ 210.936584][T11968] ? __kvmalloc_node_noprof+0x622/0x9b0 [ 210.938333][T11968] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 210.940083][T11968] ? udmabuf_create+0x2e5/0x10c0 [ 210.941644][T11968] udmabuf_create+0x2e5/0x10c0 [ 210.943154][T11968] ? lock_acquire+0x1d1/0x380 [ 210.944624][T11968] ? __pfx_udmabuf_create+0x10/0x10 [ 210.946503][T11968] ? find_held_lock+0x2b/0x80 [ 210.948049][T11968] ? __might_fault+0xc5/0x140 [ 210.949555][T11968] ? __might_fault+0xc5/0x140 [ 210.951035][T11968] udmabuf_ioctl+0x18f/0x300 [ 210.952485][T11968] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 210.954085][T11968] ? selinux_file_ioctl+0x1e0/0x290 [ 210.955688][T11968] ? selinux_file_ioctl+0x1e7/0x290 [ 210.957311][T11968] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 210.958930][T11968] __x64_sys_ioctl+0x18e/0x210 [ 210.960432][T11968] do_syscall_64+0x123/0x7b0 [ 210.961871][T11968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.963691][T11968] RIP: 0033:0x7f39cc3a94d9 [ 210.965091][T11968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.971706][T11968] RSP: 002b:00007f39cd276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.975082][T11968] RAX: ffffffffffffffda RBX: 00007f39cc625fa0 RCX: 00007f39cc3a94d9 [ 210.978281][T11968] RDX: 0000200000000080 RSI: 0000000040187542 RDI: 0000000000000003 [ 210.981491][T11968] RBP: 00007f39cc43804e R08: 0000000000000000 R09: 0000000000000000 [ 210.984614][T11968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.987119][T11968] R13: 00007f39cc626038 R14: 00007f39cc625fa0 R15: 00007ffe4b3279d8 [ 210.989694][T11968] [ 210.991431][T11968] Kernel Offset: disabled [ 210.992835][T11968] Rebooting in 86400 seconds..