last executing test programs: 51.332721933s ago: executing program 3 (id=19): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r1, 0x7f}, &(0x7f0000000100)=0x8) (fail_nth: 1) 51.298229507s ago: executing program 3 (id=20): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000a00)={{0xffffffffffffffff, 0x0, 0x5eb001, 0x0, 0x3, 0x0, 0x0}, {[0x8, 0x3, 0x8, 0x8]}, 0x7ff, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffff, 0x280) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@canfd={0xd, {{0x3, 0x1}, 0x1e, 0x3, 0x0, 0x0, "73c2189a7bffc42075ba16dd42b015f03f7ed2047471f048ab5487f38c565097d37d57353c87e3994b36f2d9bcb8dbfa9dc3ae95585a708bd6660b9b1fa3dfbe"}}}}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u16=0x0}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$VIDIOC_LOG_STATUS(r2, 0x3fffffff, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x38, r7, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x2, 0x2}}], 0x1, 0x0, 0x0) ioctl(r8, 0x40104d04, &(0x7f0000000a00)) 50.081840307s ago: executing program 3 (id=34): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) 49.981841243s ago: executing program 3 (id=36): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) sigaltstack(&(0x7f0000000240)={&(0x7f0000001c00)=""/4095, 0x80000000, 0xfff}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRESDEC=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 49.980400071s ago: executing program 3 (id=37): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=r3, @ANYBLOB="080004006401010408000200ac1414aa080002ecdf0000020800090006000000080009000300000008000900"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="0203000911000000000000000000000003000800800000007800000000000000000002000000000005000600000000000a00000000000000fc02000000b5d900000000000000000000000000000000000200010000000000000009000000006005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000000)) 49.302497742s ago: executing program 3 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 49.180433867s ago: executing program 32 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) 4.222551546s ago: executing program 2 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/hpet_acpi\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000500)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='PNP0103:00\n\x00', 0xb) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/devices/PNP0103:00\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000800)='driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='vmclock\n\x00', 0x8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/platform/drivers/vmclock\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000b00)='bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000c00)='PNP0103:00\n\x00', 0xb) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/platform\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000e00)='drivers_probe\x00', 0x1, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000040)) write(r7, &(0x7f0000000f00)='PNP0103:00\n\x00', 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x60) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="5400000030000106010000000000000000000000400001803c0001800f00010074756e6e656c5f6b65790000280002801c000200000000000000000000000000000000000000000001"], 0x54}], 0x1}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r14], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write(r11, &(0x7f0000000000)='3', 0x4e) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) 4.113039225s ago: executing program 2 (id=792): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/255, 0xff}, {&(0x7f0000001540)=""/62, 0x3e}, {&(0x7f0000001580)=""/155, 0x9b}], 0x4, &(0x7f0000001780)=[{&(0x7f0000001680)=""/41, 0x29}, {&(0x7f00000016c0)=""/133, 0x85}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1e, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000017c0)="eb3b6188de83b45282589b9adf4a103ef15d112515645b945dacb62c0000e6bbaa3a3600cb3586891f7247b4f4620607639d28476a59d3a3852318b733a3a71201255920a76169254212087443b35ffb4d63c2a272d7f9e120a9ba113a4e6fd2e731e1391f5134cadc9060607a145d7acd035c7901d9a09ab29a7199f6dfdd85098eaf422b1d6fb174f4622fc5933ff76d79ca2bac1e0e88292c", 0x9a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 4.012040558s ago: executing program 2 (id=795): socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0x5, 0x8, &(0x7f0000000000)) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="da32e692f9dd6b9793c16f1a890b5f8fe8322d57ba5e13e61ab2adaa819a4d8afc76a3d388a539e892d21ad735ee6c2f98ef8c655f6a17f3d8b7f2edc7b1ca2a5baffe", 0x2e) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x84080, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000280)={0x1, 0x7, 0x7}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.112806974s ago: executing program 2 (id=804): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_adj\x00') lseek(r0, 0xfffffffffffffffe, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x80}, 0x7}}}, 0x7) 2.622069543s ago: executing program 2 (id=811): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r1, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c20007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0x1000, 0x3, 0xfffffffd, 0x9, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x4000], [0x6, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000008, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0xd0f, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x2, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new defaul'], 0x2a, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000200)=' ') r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x20}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x30) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 2.542493155s ago: executing program 1 (id=812): socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0x5, 0x8, &(0x7f0000000000)) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="da32e692f9dd6b9793c16f1a890b5f8fe8322d57ba5e13e61ab2adaa819a4d8afc76a3d388a539e892d21ad735ee6c2f98ef8c655f6a17f3d8b7f2edc7b1ca2a5baffe", 0x2e) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x84080, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000280)={0x1, 0x7, 0x7}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.222419743s ago: executing program 2 (id=817): r0 = socket(0x3c, 0x800, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x76, 0x2, {{0x28, 0x4, 0x1, 0x1, 0xa0, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0x7c, 0x3, 0x3}, @generic={0x88, 0xf, "9c696bc65584d8e0c1dedc3663"}, @cipso={0x86, 0x6b, 0x1, [{0x6, 0xc, "00000000000000000100"}, {0x6, 0xa, "2f614f24bc8838c6"}, {0x7, 0xd, "8d41bd4d40849dcb659b29"}, {0x7, 0xf, "6b346f6d11b8192655731f0308"}, {0x5, 0x4, 'l$'}, {0x5, 0xd, "0ad791b9d528ea70ea4462"}, {0x7, 0x10, "0d4e6eab19badb6de3fc67ee5003"}, {0x5, 0x12, "77f1643eac40adf7b5f6c882d61dcaa8"}]}, @ssrr={0x89, 0xb, 0x12, [@multicast2, @broadcast]}]}}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) listns(0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES16], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="c7f0b79e", 0x4}], 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r3) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2, &(0x7f00000001c0)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}], [{@uid_lt}]}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000540)={0xffffffffffffffff, 0x1, 0x8, r1, 0x5}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) execveat(r6, &(0x7f0000000200)='./upper\x00', &(0x7f00000004c0)={[&(0x7f0000000240)='release_agent', &(0x7f0000000280)='release_agent', &(0x7f00000002c0)='release_agent', &(0x7f0000000340)='#-!\':-\x00', &(0x7f0000000380)=',&\x00', &(0x7f00000003c0)='}-\x00']}, &(0x7f0000000840)={[&(0x7f0000000580)='}\x00', &(0x7f00000005c0)='.{:!%\x00', &(0x7f0000000680)='\x00', &(0x7f0000000700)='&%[(:\x00', &(0x7f0000000740)='\\--},/[&%$@.^:]@%\x11)@@@^$\'++!\x00', &(0x7f0000000780)=')-$[!$^%\x00', &(0x7f00000007c0)='syztnl2\x00', &(0x7f0000000800)='-\x00']}, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 1.612083009s ago: executing program 1 (id=828): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0xd, 0x7, 0x9}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x1, &(0x7f0000000040)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x2dcbba4bd026b036, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120110038e4b0ba494060100107f0904e405cbd9cac940a0d80d00b956da02", @ANYRES8=r2], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1007}}, {0xb6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}]}) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000700000000000002020000130200000005000000000000000000000005000000000000000000000000000000002e00"], 0x0, 0x43}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x20102, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xa08, 0x7, 0x3, 0x20004, 0xe8c0, 0x20000000000080, 0x2, 0x400, 0xb, 0x20040000004, 0x2, 0x7f, 0x40, 0x3, 0x4], 0x70000, 0x160a55}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2204a0, 0x0) ioctl$TCGETA(r7, 0x5405, &(0x7f00000003c0)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) 1.610264998s ago: executing program 4 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"fc399059429f41c88f296da1344951f21a435e19d5073401010000000000002052873e0026ba12320a8492197085aa330e9316fb7603b15e454c8518763baeac308191e250e15a58aabf5b3ecd13f87a62de7b04000000693a4b21639331bee6cbf30563b863d82034aee0bef82ba3b85db024ba1cac050657f2579dcb891cee731766753a258801a5f767d6797981ce206eadbbef536bd8772a48f1833e360e1050cab4bf10d003258d679e49d70239b04adcfdccf1ea5ede82d17891e08a895bd6bd93b87ea8fd1f2a29894ecda469cd461defa657ee9eb2551ad7c53c9f0d52a049bf000000000000000085916168d61d3580daf26ecd3be14f55b0e513f3c3c955b06a7c197d562c2a855b44ee58bac8ed58400d42e085c9b1a839bad2f9b66ea5b7581ac715debda61a8007f39363f1c699922c05f3b35b08f1771370844b2a8a13b578141465fd38d1a7545a2a9ed8ca76956ca01b32fee4b86643bb26173c6b75e9ceb5c4fb2b23a19ec2e26860f474d73c60c6dee9c4eeb4d4a54cb0f8353aa2656df3d1cfb03df8a54de9cba19ce44a8df989a687bb46b30b3bad901b4c2d95767fd47436d7041c93bc41c67487ac434b3881ac8caba2f42c587edce816b1fbcf68a5d03504f5ef00fea3632c8e21bb90a9a7b032b3f7c2952b49770bc5a335327b5c79f13d78e8278fdcd7f63cf4e9d1b5e27f8adb0f8ef70990c32fed25c361a67d501bc9afbbd48e248affbd1a1c901cfeb769eea352bbb215ac145c9098fa0240fc188cfc2640854f159aab147fe1455294d4faab8112f0af30a8089cab96b3edccccfb837d2d4a57632e320d16d6353045a0a01902b736d66a7556407c1daa875ae9e539ac45e235f09ef59a924e92d0637cdd5f3a7fd85a440e30b1a616cb391e54c9b43453fa1a4c337f3431ff05fc70cdbd5fc704b50f6f96bf0d67c2e90fbf583a974d51a30db97aea64a62358b65a6c699a20cf11db8d0dd1cda8d56efdc38da1c0791ded177b93035be018ab4ca7998a713c16f96ae6b88192899d53ffd3f14dfdccb99ea6fbe2d52a0a428de9b9cc908750ea613f26b3f409e5d430936550036cef1980646780c3a5c76b5fc5a77aa5187d5f3e5b6aa8ee63720a2ece54d241b3dff1c904b5f5d40790d4a7689464fc118d88a95b6d4a1b8606eeaf8134e329ab9194f4b37986597218c5130a1af65157ab6b8505205087731a58b7bbfaf648d9d3d4b1ed6641a0d94526b63887c79842452c6c6d5472ab032485cf22e62abb2b3137572670088f7e98f317aa14a1d21a38fa558624a3832bcd4bda0ba8dc1d87e53ae2f9d95930ba03022e5127c46d02427a49213e406c800a11c8b0373b9ca73eae0085460e62e88eb35fe3a80832ca1dcc3a4d95aceaa71400"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30308fe818cf5c490049272d9d53bf0000c4b9e16dc30101220f01c3", 0x69}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.462909237s ago: executing program 4 (id=831): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x200, 0x5, 0x9, 0x4, 0x7, 0xffffffffffffffff}) ptrace(0x10, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffffff, 0x0, 0x440002, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r1 = io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7c62, 0x3201, 0x3, 0x969}) io_uring_enter(r1, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2ff, 0x4, 0x6, 0x547}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) 1.363016293s ago: executing program 4 (id=833): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c) 1.042492203s ago: executing program 1 (id=835): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b07, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f00000009c0)={0xffffffff00000000, 0xa6}) 681.784085ms ago: executing program 0 (id=843): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 632.764549ms ago: executing program 0 (id=844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2000, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 522.527598ms ago: executing program 0 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x3, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0f22e30f3566b842000f00d8b805000000f9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 522.172386ms ago: executing program 1 (id=846): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 440.222772ms ago: executing program 1 (id=847): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 404.529209ms ago: executing program 1 (id=848): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x7, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000400)={@loopback, @rand_addr=0x64010100, r9}, 0xc) r10 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xff03, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 356.907897ms ago: executing program 4 (id=849): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='timers\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3ff, {0x3, 0x6, "dbdc1c", 0x5, 0x84, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}}, 0x0) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) r5 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() rt_tgsigqueueinfo(r5, r6, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'batadv_slave_0\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @eth={@random="163e79baae36", @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e22, 0x17c1, 0xf, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x0, @void}, "245ac1"}}}}}}}, 0x35) 290.71237ms ago: executing program 0 (id=850): getcwd(&(0x7f0000000200)=""/197, 0xc5) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) (async) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) (async) r2 = gettid() tkill(r2, 0x16) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}}}}}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x04'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f00008aa000/0x400000)=nil) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r7, &(0x7f00000002c0)=""/254, 0xfe) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000180)) (async) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000200)={0x8, 0x10, 0x13d2, 0x22}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0x2, r10, &(0x7f0000000480)='.\x00') getsockopt$inet6_int(r9, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000040)={[0x1, 0x0, 0xffffffffffffffff, 0x7, 0x80000001000, 0x79, 0x8000000001002, 0x9, 0x6, 0x6, 0xfffffffffffffffa, 0x4000002373, 0x80000000008bd9, 0xfffffffffffffefd, 0x7f, 0x800000000001f], 0x60000, 0x386343}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) 171.652881ms ago: executing program 4 (id=851): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) mq_notify(r1, 0x0) landlock_restrict_self(r0, 0x8) (async) landlock_restrict_self(r0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 171.383674ms ago: executing program 0 (id=852): ioprio_set$uid(0x3, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x40, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8c40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x63}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x98) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) semget$private(0x0, 0x1, 0x42) fsetxattr$security_capability(r5, &(0x7f00000000c0), &(0x7f0000000200)=@v2={0x2000000, [{0x9}, {0xa, 0xd}]}, 0x14, 0x1) setns(0xc9, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x3) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r1) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)="6f6ec6564281bdcb83fe76ee13669821561956d3e4ed48440a58993e262e69c0ff5a3f00300628171399fe7d2e9efd6e2665f99292c1159f0150d34c3d769caf2f3fe9a2d25ef7e121e4e31202c39ca7459a09bea34ae5e0066e3396c182ff38bea4fee7da4b67f353f7f9763bb7525a233bf8a9f8a3b64c1421d4c2672551a0ae5397e1d6227a748b97fd01d5323512e95a7120bb7e739b08ca9732d4e5ba6555432bfc106521469ba289974de295799fde468570212df18fc7007e07115581cb860200c558", 0x2) sendfile(r5, r0, 0x0, 0x3ffff) 1.447448ms ago: executing program 0 (id=853): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000)=0x2, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{0x1}, {0x0, 0x400, 0x0, 0xa}}}}, 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='rd_pages=6', 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3608}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xae5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="0f20d835080000000f21c936f30fc737430f01cb66b84d000f00d866baf80cb8b268308aef66bafc0ced450f06b93a020000b80d000000ba000000000f30d9b70000008067660f388018b9f60900000f32", 0x51}], 0x1, 0x4, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r9, r11, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000001900)={@broadcast, @random="67e6bf2fc415", @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "9f941b", 0x14, 0x6, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x5, 0x0, 0x4008}}}}}}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 4 (id=854): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1c1001, &(0x7f00000001c0)={@align=0x3ff, {0x101, 0x2, 0x100, 0x8}}, 0xffffffff, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x9}, {[0x10, 0x0, 0x40, 0xa]}, 0x6, 0x6, &(0x7f0000000280)=""/6}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000540)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6a0240, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="3ea787d49c9bcdd1e2a1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000001dc0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x100, @empty, 0x3}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x5a0}], 0x1, &(0x7f0000001d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}, 0x40000) ppoll(&(0x7f00000003c0)=[{r4, 0x4242}, {r7, 0x30}, {r5}, {r1, 0x4000}, {r3, 0x4062}], 0x5, &(0x7f0000000580), &(0x7f00000005c0)={[0x1]}, 0x8) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000002780)=@vmx={0x2, 0x0, 0x2080, {0xeeee8000, 0x2000, {0x2}, 0x1, 0x8}, {"b7657a2d24591ade402b61516ace47ad62f39b04d15deae9e2cf949ec8a6d7ede7ed03b4ff55f5141e43273e28ab367b0cbf37be0b2a9cc97cc90dc5fc4d1b1bb3c0a7c0a707dab035314406ab727b3cc781b6542fbb5646093cce18f7ee1f4188008892e2f272e6b39353252c4b2f35409f716956153dd1cfb8831f20d27c0c67ac61c935ad6c8f8db5d8751c930c64c89ee721655719a65940b6a914004dc284a142d93aa28f1ec4c885d527ea60d5b48466cc6c57c0a1376ac3a3024ede43348c81a043d95d47b303ce26cb033eb71e4f8df4546720aaeccc8ee636dc19d4290ed6c60d46cc1051357635071e040aa075df61b96ef92410a4f10bf31dc9d7e3f1ff6d1d8651a5acf2d84fa99b8283c0f9b4ed21c3930f40236d27c529915a14ed3cd5ef2e2e959a4fd72c12c77a29dbf3d3583011d0c34c6d32293c937e547d18186f6ad11493fefaf26807fd2900d7d691688f3a3697fcf1b3b6b66f62b0b827a1a88b47d04db4d5af5750a8bb4036d3817f80cee2c511cf92235854c49841b7785d8c628cc8d88760ef9f650e3859271ec2c84c0e103d08b4ab4ff8723aed6bb2c404cb9cb16551922eaf87d400a082f7f98c60a64747bff37dac41d40cf58a9e14c4eb59c6c0b65bba7db960ff78c463ddbfb5b8917e0b5b96d8df18b45174eea6e164cb2b1be63886cba4302c1305451115729432547a8b18cc4b47c3e2f93ecc1b31c2f72549c0488bff83997e74c12a3a2c27174deeacc20002e1b589bf9147f0655b63d162b67108725a2e6084b7d34eb658f3a6d8ed17d0322897eee66081faaba6d1e292da5396dad9bd80ed5ed917468e0767b4b2e6b626b2e1665204b5c2aa1976c35e421e84fe1dc5a4542b72067531b31c497477fe2896a32e3a8780d476e20108390dbacf8fcfd05778758388292c0991e54c5d3dbb81c1f800e8c5caa3fd4441820f601ecb3539bca3c0e27f5a12a5ed3469891ccec95c012915daebff465ada9ae51fc8dc7614ab66f3f42a01bc297e43d57b8cfac6c8abd98e998b2b4446475680782ae543e053399553fdfa0b246cd28f4c871967b5ce55df80b3a59058fbd94fb2032d21fb4848c5ab23dcd3f962e9edc2966a42b725001505049773da1a1b1477c63fbaff0516b3e5af1010472f5f49ec4e2147833c374ac4191ac6a9291d0df535d43cc80cce4819f0f3cfb676d49ece7060b2bcaf805a7c6069ec3bfa40035b8238aa72db1a3f257856b9599a30860747155831b2e0291ba1350bcc02f476863f785171960292b892a5392e6e3b624a4d4ee44ce86fe7e0559dbc2a03844e545b66bc589789697800003af935f539c5d0817ced615d4c4b2a4fa7c67b9d8bb931d80fff3082a896a8cec558296cbd3d738d74b7cc24c48057b7ca94b0df3375e19b321ff0c99c57e59a3b824ffc02d0719c1f304c06fd991f9aac7076ff003ed45b190738c64f6be05aecd818ee57fcf3d7391685e75d89967da293b0bda46b7cf769bb7c89ddd4babd29f1e575b2ed56def30c73f3bd954a7a3c2c2d68e614917e4e5a8882486037ae4d1a23b535d9407c981ec14b9a634bb2ebf500371c2acdf4f9303171aa94a887803929a603045e63ee33316c612f8ad3b98abc50a18e79a243b9b56ab377d1f929b1a4f00c46b8670f4057f7838c6438771bc0488ef924260b65394749ff26e4a524deb56a047b0d4722ab9b3f2b221a77fd577713bdc3ee4620418cd052c15b02c410ef148ae1c87b3e39b8037d0c8acfcd9237278ccd425dcc2f42a84da983c05b7afd3c7031625c2b20d88f66fae2de7d055e5c209ba6d6dcd40de87cf4313f9aa5df891d0d9db81a304da03b6b27b4c673fd0d20d86aece47d79db888b52a621d68638316542c015950b226900ff04704766eedcd29abf47450947ba90559fa9febdb46d2df8331cb06702fc05c80748f4736738066278e16787f6be401eac4ddeedfab39410ac1f304776af2c1c619b553d1eca431862f34ae55111409b1be9ea053defb0c12680f0002ecd9298a252ceb2e6411bf5301c0e9f10748034eeeeef5f16fe59d7e3bbe594c3a969121f9f64e211ec3d2580223deac1b781dc74122ddd7e5bd31c1ff8016aa87188cc2805b88676530232391240cc71952345b93d08f58274dab18f463c1722fdea66aec4e0c85197d6edbbf4b48a518f6734db13723e242da118933739205812cc9bf8bb373199bbf51d9ce89dd9e448093080de33313b80ad4d21b90842fa334055e7560009fc19cc9862b0df316208033b81536c4a365f79f2ca0c4d42a366553cc615a9fefc88c847006be200d3e357f1a11f374c6f5b103f78fec8c5118c3be2b25d0a835876abfecb29a90e1b306c550e4711082b74a93724d6e7077a9c8b7dc74951d01acf6eff1caf023960667be0b3c508048b27beb314f167a9035c266b29ef250c89e4f35307142c90296c31ea4c484668e66f502b58b28e9f1a4c8b3b673062ce6cf8fd17d5d562b5e27a6ab17ecdf6c4cd2fba12739009c459d5ce9a61798697eea79be617c98e861749e28f8a8c794bcccca51e106690f3b574aadf32338b86fce71be838d5c409731a6ecf5f08ab4bbb7a83715bd6a1a057f0d3d8fe12165abd08c30b1a51fcb08fa3b700b161533d7a2e7c28c382896e985debe1b986b2c96ad2064fce9f1935bf979895d76bf4321b0a25806131b9833b3f0b0cb8141c446c48c6fc24f678a44e9cdfe20388e442b4beb96b146034cc771b2f71c556adffe5fd0f687e69e02ec20bf22a27c506063d47c8a11bcc170536652f8229a738703c928937957c795e67437bd3b808dc1fbf1df49f73375ba23f55899285a18664322987b31ea397e0b05ae7a6245235a0be1db92498c6d5918275120d044d7fdc06e825ea2f81301a38da0abd8951d99d96487e7ea1fc5d5130815c012fef6e8b3809f125404d5051ab37501ef15f110ae2cf043be13a406c7bfbe797d5188f219ebeadbc849ca312357b368c16070798cf98ba535156691eae7a0a65c49229a5d5511b371d770cdafe0092c6f52cc4d7f60cea998708bf72488c3390500f9c8ded1127c269fe0b9dcc446f8bebec4558c51996e7b62d3872d78ef2c6380492e05c80561b1bf39297d47a57b1c431a0e35f5ef0d974cbac84951747b840d0c3038e068fc80dfecdebe88d57d0a260f3a8cb4cd201355d428aeaa3262d31c38c35966b1cc0c81c4677d3acaa97da96a9b1d9db60ab8a05ab127c3cd8aeef7622506f2c1cd5d39aff35f8fe55c5d30c510b03c59c3adc962a34765f4534acae5d6281899b8593cd8c86be616ca94a765755fa88354ad7cfec6b9e3673b84e532e7e02e0e7d91044ef22e7e6ad6564ccdd5c5159d1204d8d60fde8031697069d9ef6406a7fd11cdfdc8068910a94f23eddf6717a6f2c9ead6bc24ea8dfc4fa80b3c1bf12f4236f4b12338cb75c9399fc5a5808718383990a9e638da01d6e9e014603608924b039b2dec8168e8fa4288c410c0ed9a9199ea5612bf4bf5c103877fa0bb665aebf788e016b1b2ead1f243402df0db486f0fac682082af39a10e5bea560f19149f7f8ad019027ca852ab5150640f34fd63020fce8bd93031d6fee87968fafe844df156a346d1d6f66ff74f67c609838ce37a2ea9f369b28807f6d0b7c8e9d8dfc31b655f49278f132fe3c88cd1d8076280ebdef70ccdb47f4f14bd1da8a7f813b54ed6fb09dc585dd980a84f4ed9bbc047f9fe5d67298f9f3b1b3e3a9e444764400a27ea799d7f2c09fe9df3a343ebee921ce79310c02c5933a8361c91600639faf79efff16fa9fc6d0230c8a9591c34dd65eafb78e2f734e31ab291ef916b62d071f3d1dd4dec42c3475a69a159c1bdc7607a2d18d4320f453365131165d2a10c691aa80602b8686513dfd4ef117a1ff35c838004af74fbffe2ec1c2f0f13577f0ef06644e4d9a7f85fc2a176b79877900243120d81e1a90be2e48f663c14a6bf223b294bc37eab4e2a18e6af5eda0c2b9aac1eeca856527a6cf38fa0b662701db3670d588c4f3f822df61b448db708f328ef8e0df359e1e63c2c9be63889c36f12b0366437986dfce88f582b466e02dc55998822dd99d34cd0e2cd46419b792d71a9f1bce70eebec6be05eeada9e0b02096ccb21ef81c266c4d4642bcbdda447cef5b00f06e6e6eddb0dbb6c39e35ad777f665a9d4c6d571524528a8d75789c5e1a4dd29f74dcd9b3fe88856f53e7d77b94803a05d8f45b33d1139dda801cedf856e423391e4eb4e6911447a391cd57af74fc6dce080a4b80d1f0be0d040cc46e80db6c8d0154e258fa8919cb6174b811fb8e69f1ee6a081d87432e77f49e38b3b203f93667adbeb84a7055043c6a63099785dd887c94fbec5a9c99215a9c603b47ac2d0af832844cdbd11707c0ed17fba2b978ff7c5e03dee185c1a5da256787e08f8907aabbc8d479c809b2b35fcd56ed13c1fa4796f6cd551f84329dabbf43308e06a09c409da8c38b8d6d9ce8ef35c2b9d5b6f6f06d2bd23b948c3aa61267768b5e2a0f2b1b63f51b64c232e6e9026c5f28dc376260b9ae8a663545da899be72f0420232a056199183f25497af83c44f0c06a98688e8c96a76ccae697e779f93c1a11f7989444130c47db99693dbc7287f026ffb18838485b2a4806317dd19e7313676ecfdb6e8d5c854fd052e2221e38699b0050858d82188330828f7bd84e186248b51b9f7dc42158cb93d1153f5584903d575b01f50a7c87b32f4d31f4b418e5090f02e538eaa88eb1c25ad1287448f62559b730b30e9ec2093c37dd07010607c59afce40009f8f03b2d54258cb80068a8223b79f71d6f2bcafc1e51f10982d0f9e4fb79975cc01471d35f646a041f588c05c4e76ce0be96f3949dc426a597429aaaef134d8c87836ffcc9d8a060566b94c92e8fdd2cb47fed5f68d71405d3a3a1621731e9ae313fcc1573a0e334695cddbe57f7138e6e7c58dddc5212db5fbf3059572e4d92855416ab97b87e46ab5a132e1e05e18b56c805b6dde62d1773775f946d8e3814fe1fc97db4a8fc38f8105fd4c5e4ffc117e9fbc76db0fc70f0d7dd78da0384160787d718590a1059891e3b3c114f709061fcd9e781ca6b2379beae8b0c42930a521f188086fca5f121e6ee135b83b728a8b692be87c85203e0d5f7793c0f2b3c286a237df549d8956bf8f630a21a6b433770e5d96507d88fb237d056e0f4c368727467355f28e976e70a4d8ddfe8d334f6e26f0d339bab16312950be8a10c33ef8c556e0ac9966df1e97bff8adcdf5d24e2d5e946450b830e95e154f910308a63666324c2cbfc528c7cdea3858e486083264dc77d5b6d0723b09f81d5b00bb9e1bdb1941cc1114ccb116b621c683018826128fbcbdfe2f0aa5d66a3f4981fbfdf018faeba0e0528d3f4fafc2f5263dc37a3464a30750902c3c18348ad9277e18003d3376c0a9f5ed305b704606679a2b83d26e6effd3034c749a15d3d056637cd83d9542253d3cf2149fbd5f13448aee359a2649fd579a18048955beefca1013aef787e5a0a9e68a6d7bd647ffc99143c058ecb2f9ce97f1f8b3ae12cf1fde8c9c0204b6efa45c5c1fef8e2b57d6fe40ef25a3b56654dc015cf01a4f7217d27cc2a7a4c9df5b0ff40c568307ef3e1e610001028ebeb39b6de7e432bbdcaed6edc2895ab2baf009b999918050c8892078d10162519d1ec947f9c0b1e6b1f041471ca4373cdb3fbbefcac70fbc05c7e079350f6fb605f2b7ac0e4cc0a5351310880b950e58945e5e8676", "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"}}) 0s ago: executing program 4 (id=855): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000080)={&(0x7f0000000040)=[r1], 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01864c1, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r1, r2, r3, r5], &(0x7f0000000140)=[0xd, 0xb, 0x6, 0x5, 0x3], 0x4}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f00000000c0)=""/55, 0x37) (async) getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) kernel console output (not intermixed with test programs): 5][ T6196] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 56.668691][ T6196] ? __pfx_vfs_write+0x10/0x10 [ 56.668703][ T6196] ? find_held_lock+0x2b/0x80 [ 56.668728][ T6196] ksys_write+0x1f8/0x250 [ 56.668741][ T6196] ? __pfx_ksys_write+0x10/0x10 [ 56.668758][ T6196] do_syscall_64+0x123/0x790 [ 56.668776][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.668788][ T6196] RIP: 0033:0x7fc23259e199 [ 56.668798][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.668808][ T6196] RSP: 002b:00007fc2333cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.668819][ T6196] RAX: ffffffffffffffda RBX: 00007fc232826090 RCX: 00007fc23259e199 [ 56.668826][ T6196] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000003 [ 56.668834][ T6196] RBP: 00007fc2333cc090 R08: 0000000000000000 R09: 0000000000000000 [ 56.668843][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.668852][ T6196] R13: 00007fc232826128 R14: 00007fc232826090 R15: 00007ffe6e8f5018 [ 56.668876][ T6196] [ 56.952306][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 57.018026][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 57.023461][ T6221] FAULT_INJECTION: forcing a failure. [ 57.023461][ T6221] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.023482][ T6221] CPU: 2 UID: 0 PID: 6221 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 57.023494][ T6221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.023500][ T6221] Call Trace: [ 57.023504][ T6221] [ 57.023509][ T6221] dump_stack_lvl+0x100/0x190 [ 57.023528][ T6221] should_fail_ex.cold+0x5/0xa [ 57.023542][ T6221] ? prepare_alloc_pages+0x16d/0x5b0 [ 57.023560][ T6221] should_fail_alloc_page+0xeb/0x140 [ 57.023579][ T6221] prepare_alloc_pages+0x1f0/0x5b0 [ 57.023597][ T6221] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 57.023612][ T6221] ? __lock_acquire+0x5c0/0x1f40 [ 57.023627][ T6221] ? __perf_event_task_sched_in+0x2a8/0xa30 [ 57.023645][ T6221] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 57.023659][ T6221] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 57.023672][ T6221] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 57.023692][ T6221] ? rcu_is_watching+0x13/0xc0 [ 57.023709][ T6221] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 57.023724][ T6221] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 57.023738][ T6221] ? rcu_is_watching+0x13/0xc0 [ 57.023758][ T6221] ? __lock_acquire+0x5c0/0x1f40 [ 57.023772][ T6221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.023788][ T6221] ? policy_nodemask+0xed/0x4f0 [ 57.023808][ T6221] alloc_pages_mpol+0x201/0x550 [ 57.023825][ T6221] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 57.023842][ T6221] ? futex_unqueue+0x133/0x2c0 [ 57.023860][ T6221] folio_alloc_mpol_noprof+0x36/0x260 [ 57.023873][ T6221] vma_alloc_folio_noprof+0xed/0x1d0 [ 57.023884][ T6221] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 57.023895][ T6221] ? __pfx___futex_wait+0x10/0x10 [ 57.023906][ T6221] ? __pfx_try_to_wake_up+0x10/0x10 [ 57.023918][ T6221] ? futex_hash+0x311/0x400 [ 57.023934][ T6221] do_anonymous_page+0xac9/0x2050 [ 57.023949][ T6221] ? __pfx_do_anonymous_page+0x10/0x10 [ 57.023958][ T6221] ? rcu_read_unlock+0x2d/0xb0 [ 57.023969][ T6221] ? rcu_read_unlock+0x2d/0xb0 [ 57.023979][ T6221] ? __pte_offset_map+0x179/0x310 [ 57.023995][ T6221] __handle_mm_fault+0x1ff3/0x2f60 [ 57.024007][ T6221] ? lock_vma_under_rcu+0x11d/0x590 [ 57.024024][ T6221] ? __pfx___handle_mm_fault+0x10/0x10 [ 57.024037][ T6221] ? lock_vma_under_rcu+0x17c/0x590 [ 57.024061][ T6221] handle_mm_fault+0x363/0xa20 [ 57.024074][ T6221] do_user_addr_fault+0x59c/0x12f0 [ 57.024093][ T6221] exc_page_fault+0x6f/0xd0 [ 57.024108][ T6221] asm_exc_page_fault+0x26/0x30 [ 57.024119][ T6221] RIP: 0033:0x7fc232465386 [ 57.024128][ T6221] Code: d1 fe ff 48 c7 c0 ff ff ff ff eb b0 0f 1f 84 00 00 00 00 00 41 56 41 55 41 54 55 53 48 81 ec 40 20 00 00 48 8b 05 a2 0e 1f 00 <48> 89 7c 24 18 48 89 74 24 10 be 02 55 08 80 48 89 54 24 08 48 8b [ 57.024139][ T6221] RSP: 002b:00007fc2333eafb0 EFLAGS: 00010202 [ 57.024149][ T6221] RAX: 0000100000000000 RBX: 00007fc232825fa0 RCX: 0000000000000000 [ 57.024156][ T6221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 57.024162][ T6221] RBP: 00007fc232635888 R08: 0000000000000000 R09: 0000000000000000 [ 57.024169][ T6221] R10: ffffffffffffffff R11: 0000000000000000 R12: 0000000000000000 [ 57.024175][ T6221] R13: 00007fc232826038 R14: 00007fc232825fa0 R15: 00007ffe6e8f5018 [ 57.024189][ T6221] [ 57.024264][ T6221] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 57.293016][ T6246] FAULT_INJECTION: forcing a failure. [ 57.293016][ T6246] name failslab, interval 1, probability 0, space 0, times 0 [ 57.293044][ T6246] CPU: 1 UID: 0 PID: 6246 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT(full) [ 57.293064][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.293074][ T6246] Call Trace: [ 57.293081][ T6246] [ 57.293088][ T6246] dump_stack_lvl+0x100/0x190 [ 57.293120][ T6246] should_fail_ex.cold+0x5/0xa [ 57.293146][ T6246] should_failslab+0xc2/0x120 [ 57.293172][ T6246] __kmalloc_noprof+0xfc/0x840 [ 57.293194][ T6246] ? __pfx_dynamic_dname+0x10/0x10 [ 57.293215][ T6246] ? tomoyo_encode2+0xfb/0x3c0 [ 57.293246][ T6246] tomoyo_encode2+0xfb/0x3c0 [ 57.293276][ T6246] tomoyo_encode+0x29/0x50 [ 57.293300][ T6246] tomoyo_realpath_from_path+0x18c/0x690 [ 57.293333][ T6246] tomoyo_path_number_perm+0x23c/0x580 [ 57.293354][ T6246] ? tomoyo_path_number_perm+0x22e/0x580 [ 57.293377][ T6246] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 57.293405][ T6246] ? __lock_acquire+0x5c0/0x1f40 [ 57.293436][ T6246] ? __fget_files+0x34/0x3d0 [ 57.293458][ T6246] ? find_held_lock+0x2b/0x80 [ 57.293479][ T6246] ? hook_file_ioctl_common+0x140/0x440 [ 57.293528][ T6246] ? __fget_files+0x21f/0x3d0 [ 57.293552][ T6246] security_file_ioctl+0xd3/0x230 [ 57.293577][ T6246] __x64_sys_ioctl+0xb7/0x210 [ 57.293600][ T6246] do_syscall_64+0x123/0x790 [ 57.293624][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.293638][ T6246] RIP: 0033:0x7f2776d9e199 [ 57.293649][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.293685][ T6246] RSP: 002b:00007f2777b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.293702][ T6246] RAX: ffffffffffffffda RBX: 00007f2777025fa0 RCX: 00007f2776d9e199 [ 57.293716][ T6246] RDX: 0000200000000300 RSI: 000000004020aeb2 RDI: 0000000000000004 [ 57.293724][ T6246] RBP: 00007f2777b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 57.293732][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.293740][ T6246] R13: 00007f2777026038 R14: 00007f2777025fa0 R15: 00007ffd5b85fbe8 [ 57.293764][ T6246] [ 57.294407][ T6246] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.453290][ T6256] syz_tun (unregistering): left allmulticast mode [ 57.560486][ T6260] FAULT_INJECTION: forcing a failure. [ 57.560486][ T6260] name failslab, interval 1, probability 0, space 0, times 0 [ 57.560515][ T6260] CPU: 1 UID: 0 PID: 6260 Comm: syz.2.97 Not tainted syzkaller #0 PREEMPT(full) [ 57.560537][ T6260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.560548][ T6260] Call Trace: [ 57.560555][ T6260] [ 57.560563][ T6260] dump_stack_lvl+0x100/0x190 [ 57.560596][ T6260] should_fail_ex.cold+0x5/0xa [ 57.560623][ T6260] should_failslab+0xc2/0x120 [ 57.560653][ T6260] kmem_cache_alloc_noprof+0x92/0x6a0 [ 57.560676][ T6260] ? d_instantiate+0x8a/0xb0 [ 57.560695][ T6260] ? alloc_empty_file+0x5b/0x1c0 [ 57.560729][ T6260] alloc_empty_file+0x5b/0x1c0 [ 57.560756][ T6260] alloc_file_pseudo+0x183/0x290 [ 57.560783][ T6260] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 57.560803][ T6260] ? alloc_fd+0x471/0x7a0 [ 57.560836][ T6260] sock_alloc_file+0x50/0x210 [ 57.560858][ T6260] __sys_socket+0x1c0/0x260 [ 57.560881][ T6260] ? __pfx___sys_socket+0x10/0x10 [ 57.560912][ T6260] __x64_sys_socket+0x72/0xb0 [ 57.560934][ T6260] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.560958][ T6260] do_syscall_64+0x123/0x790 [ 57.560984][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.561004][ T6260] RIP: 0033:0x7f2776d9e199 [ 57.561020][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.561036][ T6260] RSP: 002b:00007f2777b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 57.561055][ T6260] RAX: ffffffffffffffda RBX: 00007f2777025fa0 RCX: 00007f2776d9e199 [ 57.561067][ T6260] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 57.561079][ T6260] RBP: 00007f2776e35888 R08: 0000000000000000 R09: 0000000000000000 [ 57.561089][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.561101][ T6260] R13: 00007f2777026038 R14: 00007f2777025fa0 R15: 00007ffd5b85fbe8 [ 57.561126][ T6260] [ 57.643063][ T6267] netlink: 'syz.0.99': attribute type 27 has an invalid length. [ 57.643079][ T6267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.99'. [ 57.644155][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.761255][ T6279] netlink: 'syz.1.105': attribute type 27 has an invalid length. [ 57.761278][ T6279] netlink: 32 bytes leftover after parsing attributes in process `syz.1.105'. [ 57.765121][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.914395][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'. [ 57.920393][ T6298] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 57.920408][ T6298] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 57.920459][ T6298] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 57.935793][ T6300] jffs2: notice: (6300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 57.968250][ T6303] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 57.968303][ T6303] Cannot find add_set index 0 as target [ 57.976969][ T6306] CIFS: Invalid mount helper version specified [ 58.000787][ T6308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.116'. [ 58.000818][ T6308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.116'. [ 58.074615][ T67] Bluetooth: hci3: Invalid handle: 0xed88 > 0x0eff [ 58.136874][ T6322] ======================================================= [ 58.136874][ T6322] WARNING: The mand mount option has been deprecated and [ 58.136874][ T6322] and is ignored by this kernel. Remove the mand [ 58.136874][ T6322] option from the mount to silence this warning. [ 58.136874][ T6322] ======================================================= [ 58.137150][ T6322] overlayfs: failed to clone upperpath [ 58.435673][ T67] Bluetooth: hci3: command tx timeout [ 58.657844][ T43] kauditd_printk_skb: 84 callbacks suppressed [ 58.657859][ T43] audit: type=1400 audit(1791476416.831:378): avc: denied { read } for pid=6324 comm="syz.0.123" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 58.661850][ T43] audit: type=1400 audit(1791476416.831:379): avc: denied { ioctl } for pid=6324 comm="syz.0.123" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 58.708764][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 58.725042][ T6327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.735663][ T43] audit: type=1400 audit(1791476416.901:380): avc: denied { mount } for pid=6329 comm="syz.4.125" name="/" dev="autofs" ino=12607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 58.776294][ T6332] ip_tables: iptables: counters copy to user failed while replacing table [ 58.788120][ T43] audit: type=1400 audit(1791476416.961:381): avc: denied { setattr } for pid=6331 comm="syz.4.126" path="/dev/net/tun" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 58.818928][ T43] audit: type=1400 audit(1791476416.991:382): avc: denied { read write } for pid=6334 comm="syz.0.127" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.819611][ T43] audit: type=1400 audit(1791476416.991:383): avc: denied { open } for pid=6334 comm="syz.0.127" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.819777][ T43] audit: type=1400 audit(1791476416.991:384): avc: denied { ioctl } for pid=6334 comm="syz.0.127" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.021865][ T43] audit: type=1400 audit(1791476417.191:385): avc: denied { mounton } for pid=6336 comm="syz.2.128" path="/38/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 59.024253][ T43] audit: type=1400 audit(1791476417.191:386): avc: denied { read } for pid=6336 comm="syz.2.128" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.024295][ T43] audit: type=1400 audit(1791476417.191:387): avc: denied { open } for pid=6336 comm="syz.2.128" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.055678][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.207706][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 59.209961][ T10] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 59.209980][ T10] usb 5-1: config 0 has no interface number 0 [ 59.210010][ T10] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.211861][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.211881][ T10] usb 5-1: Product: syz [ 59.211892][ T10] usb 5-1: Manufacturer: syz [ 59.211905][ T10] usb 5-1: SerialNumber: syz [ 59.216907][ T10] usb 5-1: config 0 descriptor?? [ 59.233285][ T10] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 59.431826][ T5874] usb 5-1: USB disconnect, device number 2 [ 59.441674][ T5874] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 59.529931][ T6356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6356 comm=syz.4.134 [ 59.574636][ T6358] team0 (unregistering): Port device team_slave_0 removed [ 59.576552][ T6358] team0 (unregistering): Port device team_slave_1 removed [ 59.627553][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 59.739783][ T6360] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 59.742387][ T6360] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 59.744932][ T6360] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 59.744944][ T6360] netlink: 1 bytes leftover after parsing attributes in process `syz.1.136'. [ 59.854602][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.913982][ T6387] overlayfs: failed to clone upperpath [ 59.993393][ T6157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.993414][ T6157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.049999][ T6401] Need at least one configuration in g1. [ 60.050436][ T6401] udc dummy_udc.0: failed to start g1: -22 [ 60.050449][ T6401] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 60.053189][ T6401] UDC core: g1: couldn't find an available UDC or it's busy [ 60.053892][ T6399] af_packet: tpacket_rcv: packet too big, clamped from 9305 to 3966. macoff=82 [ 60.159076][ T6410] FAULT_INJECTION: forcing a failure. [ 60.159076][ T6410] name failslab, interval 1, probability 0, space 0, times 0 [ 60.159102][ T6410] CPU: 0 UID: 0 PID: 6410 Comm: syz.0.149 Not tainted syzkaller #0 PREEMPT(full) [ 60.159123][ T6410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.159134][ T6410] Call Trace: [ 60.159141][ T6410] [ 60.159148][ T6410] dump_stack_lvl+0x100/0x190 [ 60.159194][ T6410] should_fail_ex.cold+0x5/0xa [ 60.159222][ T6410] should_failslab+0xc2/0x120 [ 60.159261][ T6410] kmem_cache_alloc_noprof+0x92/0x6a0 [ 60.159286][ T6410] ? d_instantiate+0x8a/0xb0 [ 60.159305][ T6410] ? alloc_empty_file+0x5b/0x1c0 [ 60.159338][ T6410] alloc_empty_file+0x5b/0x1c0 [ 60.159367][ T6410] alloc_file_pseudo+0x183/0x290 [ 60.159386][ T6410] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 60.159401][ T6410] ? alloc_fd+0x471/0x7a0 [ 60.159432][ T6410] sock_alloc_file+0x50/0x210 [ 60.159457][ T6410] __sys_socket+0x1c0/0x260 [ 60.159481][ T6410] ? __pfx___sys_socket+0x10/0x10 [ 60.159514][ T6410] __x64_sys_socket+0x72/0xb0 [ 60.159539][ T6410] ? lockdep_hardirqs_on+0x7d/0x110 [ 60.159584][ T6410] do_syscall_64+0x123/0x790 [ 60.159611][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.159632][ T6410] RIP: 0033:0x7fc23259e199 [ 60.159649][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.159667][ T6410] RSP: 002b:00007fc2333ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 60.159685][ T6410] RAX: ffffffffffffffda RBX: 00007fc232825fa0 RCX: 00007fc23259e199 [ 60.159694][ T6410] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 60.159703][ T6410] RBP: 00007fc232635888 R08: 0000000000000000 R09: 0000000000000000 [ 60.159715][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.159725][ T6410] R13: 00007fc232826038 R14: 00007fc232825fa0 R15: 00007ffe6e8f5018 [ 60.159749][ T6410] [ 60.525760][ T67] Bluetooth: hci3: command tx timeout [ 61.389492][ T6461] FAULT_INJECTION: forcing a failure. [ 61.389492][ T6461] name failslab, interval 1, probability 0, space 0, times 0 [ 61.389512][ T6461] CPU: 1 UID: 0 PID: 6461 Comm: syz.4.162 Not tainted syzkaller #0 PREEMPT(full) [ 61.389524][ T6461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.389530][ T6461] Call Trace: [ 61.389533][ T6461] [ 61.389538][ T6461] dump_stack_lvl+0x100/0x190 [ 61.389559][ T6461] should_fail_ex.cold+0x5/0xa [ 61.389576][ T6461] should_failslab+0xc2/0x120 [ 61.389594][ T6461] kmem_cache_alloc_noprof+0x92/0x6a0 [ 61.389609][ T6461] ? d_instantiate+0x8a/0xb0 [ 61.389620][ T6461] ? alloc_empty_file+0x5b/0x1c0 [ 61.389667][ T6461] alloc_empty_file+0x5b/0x1c0 [ 61.389686][ T6461] alloc_file_pseudo+0x183/0x290 [ 61.389698][ T6461] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 61.389710][ T6461] ? alloc_fd+0x471/0x7a0 [ 61.389729][ T6461] sock_alloc_file+0x50/0x210 [ 61.389741][ T6461] __sys_socket+0x1c0/0x260 [ 61.389756][ T6461] ? __pfx___sys_socket+0x10/0x10 [ 61.389775][ T6461] __x64_sys_socket+0x72/0xb0 [ 61.389789][ T6461] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.389803][ T6461] do_syscall_64+0x123/0x790 [ 61.389818][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.389830][ T6461] RIP: 0033:0x7f4c6c79e199 [ 61.389839][ T6461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.389849][ T6461] RSP: 002b:00007f4c6d666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 61.389859][ T6461] RAX: ffffffffffffffda RBX: 00007f4c6ca25fa0 RCX: 00007f4c6c79e199 [ 61.389866][ T6461] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 61.389873][ T6461] RBP: 00007f4c6c835888 R08: 0000000000000000 R09: 0000000000000000 [ 61.389879][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.389886][ T6461] R13: 00007f4c6ca26038 R14: 00007f4c6ca25fa0 R15: 00007ffec892b9d8 [ 61.389901][ T6461] [ 61.476070][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 61.511133][ T6470] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 61.511201][ T6470] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 61.511263][ T6470] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 61.511317][ T6470] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 61.511371][ T6470] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 61.511424][ T6470] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 61.511478][ T6470] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 61.511532][ T6470] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 61.511585][ T6470] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 61.625940][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.626843][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.626859][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.626870][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.626890][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.629538][ T10] usb 5-1: config 0 descriptor?? [ 62.042035][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.042062][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.042075][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.042088][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.042100][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.042112][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.042124][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.042136][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.042148][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.042160][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 62.054395][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 62.106590][ T6493] __nla_validate_parse: 1 callbacks suppressed [ 62.106602][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 62.443844][ T5097] usb 5-1: USB disconnect, device number 3 [ 62.596333][ T67] Bluetooth: hci3: command tx timeout [ 63.032602][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'. [ 63.488842][ T6565] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 1, id = 0 [ 63.634446][ T6575] jffs2: notice: (6575) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 63.673055][ T43] kauditd_printk_skb: 70 callbacks suppressed [ 63.673071][ T43] audit: type=1400 audit(1791476421.841:458): avc: denied { write } for pid=6574 comm="syz.2.197" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.673109][ T43] audit: type=1400 audit(1791476421.841:459): avc: denied { write } for pid=6574 comm="syz.2.197" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.673143][ T43] audit: type=1400 audit(1791476421.841:460): avc: denied { link } for pid=6574 comm="syz.2.197" name="file0" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.734595][ T43] audit: type=1400 audit(1791476421.901:461): avc: denied { map } for pid=6580 comm="syz.0.200" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.754491][ T6587] overlayfs: failed to resolve './file1': -2 [ 63.757762][ T43] audit: type=1400 audit(1791476421.931:462): avc: denied { create } for pid=6586 comm="syz.4.202" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.758587][ T6582] syz.0.200 (6582): drop_caches: 2 [ 63.924363][ T6603] FAULT_INJECTION: forcing a failure. [ 63.924363][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 63.924383][ T6603] CPU: 0 UID: 0 PID: 6603 Comm: syz.2.207 Not tainted syzkaller #0 PREEMPT(full) [ 63.924395][ T6603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.924402][ T6603] Call Trace: [ 63.924406][ T6603] [ 63.924411][ T6603] dump_stack_lvl+0x100/0x190 [ 63.924432][ T6603] should_fail_ex.cold+0x5/0xa [ 63.924448][ T6603] should_failslab+0xc2/0x120 [ 63.924466][ T6603] __kmalloc_noprof+0xfc/0x840 [ 63.924480][ T6603] ? x509_get_sig_params+0x409/0x6c0 [ 63.924498][ T6603] x509_get_sig_params+0x409/0x6c0 [ 63.924515][ T6603] x509_cert_parse+0x4e9/0x910 [ 63.924530][ T6603] x509_key_preparse+0x65/0x9c0 [ 63.924546][ T6603] asymmetric_key_preparse+0xce/0x1d0 [ 63.924557][ T6603] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 63.924569][ T6603] __key_create_or_update+0x413/0xe30 [ 63.924607][ T6603] ? __pfx___key_create_or_update+0x10/0x10 [ 63.924629][ T6603] ? lookup_user_key+0x3f3/0x1300 [ 63.924660][ T6603] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 63.924678][ T6603] key_create_or_update+0x42/0x60 [ 63.924696][ T6603] __do_sys_add_key+0x2e8/0x460 [ 63.924708][ T6603] ? __pfx___do_sys_add_key+0x10/0x10 [ 63.924718][ T6603] ? ksys_write+0x1ac/0x250 [ 63.924737][ T6603] do_syscall_64+0x123/0x790 [ 63.924754][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.924765][ T6603] RIP: 0033:0x7f2776d9e199 [ 63.924775][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.924785][ T6603] RSP: 002b:00007f2777b8c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 63.924795][ T6603] RAX: ffffffffffffffda RBX: 00007f2777025fa0 RCX: 00007f2776d9e199 [ 63.924802][ T6603] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 63.924808][ T6603] RBP: 00007f2776e35888 R08: ffffffffffffffff R09: 0000000000000000 [ 63.924815][ T6603] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 63.924821][ T6603] R13: 00007f2777026038 R14: 00007f2777025fa0 R15: 00007ffd5b85fbe8 [ 63.924837][ T6603] [ 64.067569][ T6610] tmpfs: Bad value for 'mpol' [ 64.080549][ T43] audit: type=1400 audit(1791476422.251:463): avc: denied { ioctl } for pid=6612 comm="syz.0.210" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12845 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.200332][ C0] net_ratelimit: 3321 callbacks suppressed [ 64.200352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 64.221545][ T43] audit: type=1400 audit(1791476422.391:464): avc: denied { node_bind } for pid=6607 comm="syz.2.209" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 64.305557][ T6198] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.443717][ T6621] netlink: 'syz.4.213': attribute type 2 has an invalid length. [ 64.480816][ T6623] syz.4.214 (6623): drop_caches: 2 [ 64.601323][ T6627] kvm: requested 4190 ns i8254 timer period limited to 200000 ns qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 64.991730][ T43] audit: type=1400 audit(1791476423.161:465): avc: denied { write } for pid=6630 comm="syz.2.217" name="/" dev="9p" ino=71827647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.991828][ T43] audit: type=1400 audit(1791476423.161:466): avc: denied { write } for pid=6628 comm="syz.0.216" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.991862][ T43] audit: type=1400 audit(1791476423.161:467): avc: denied { open } for pid=6628 comm="syz.0.216" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.182173][ T6635] syz_tun: entered allmulticast mode [ 65.426023][ T6650] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20004 [ 65.608861][ T6657] syz.4.228 (6657): drop_caches: 2 [ 65.742449][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 65.754655][ T6667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.927365][ T6684] syz.4.237 (6684): drop_caches: 2 [ 66.270366][ T6721] syz.2.246 (6721): drop_caches: 2 [ 66.616442][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 66.616515][ T6757] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 66.641100][ T6754] syz.4.256 (6754): drop_caches: 2 [ 66.733949][ T6763] ip_tables: iptables: counters copy to user failed while replacing table [ 66.942849][ T6781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1820 sclass=netlink_route_socket pid=6781 comm=syz.0.262 [ 66.943571][ T6782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1820 sclass=netlink_route_socket pid=6782 comm=syz.0.262 [ 67.064817][ T6796] syz.4.268 (6796): drop_caches: 2 [ 67.156481][ T6809] ip_tables: iptables: counters copy to user failed while replacing table [ 67.319631][ T6825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.372639][ T6831] ip6gre1: entered promiscuous mode [ 67.372654][ T6831] ip6gre1: entered allmulticast mode [ 67.374812][ T5803] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.374967][ T5803] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.396064][ T5874] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.396251][ T5874] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.551641][ T6852] ip_tables: iptables: counters copy to user failed while replacing table [ 67.565696][ T6198] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.751908][ T6873] tipc: Started in network mode [ 67.751925][ T6873] tipc: Node identity 0208e5dca80b, cluster identity 4711 [ 67.752060][ T6873] tipc: Enabled bearer , priority 0 [ 67.791124][ T6873] syzkaller0: entered promiscuous mode [ 67.791148][ T6873] syzkaller0: entered allmulticast mode [ 67.791737][ T6873] tipc: Resetting bearer [ 67.811371][ T6873] vlan2: entered promiscuous mode [ 67.811391][ T6873] bridge0: entered promiscuous mode [ 67.822807][ T6870] tipc: Resetting bearer [ 68.766539][ T6870] tipc: Disabling bearer [ 68.770774][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.845193][ T6910] ip_tables: iptables: counters copy to user failed while replacing table [ 68.935226][ T43] kauditd_printk_skb: 52 callbacks suppressed [ 68.935243][ T43] audit: type=1400 audit(1791476427.101:520): avc: denied { create } for pid=6923 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.937196][ T43] audit: type=1400 audit(1791476427.111:521): avc: denied { name_bind } for pid=6923 comm="syz.0.311" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 68.946742][ T43] audit: type=1400 audit(1791476427.121:522): avc: denied { connect } for pid=6923 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.008487][ T6927] netlink: 'syz.0.312': attribute type 23 has an invalid length. [ 69.043533][ T6931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6931 comm=syz.1.314 [ 69.045965][ T6933] netlink: 'syz.2.315': attribute type 5 has an invalid length. [ 69.081913][ T6942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6942 comm=syz.1.319 [ 69.163487][ T6953] ip_tables: iptables: counters copy to user failed while replacing table [ 69.328329][ T5738] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 69.342580][ T43] audit: type=1400 audit(1791476427.511:523): avc: denied { write } for pid=6959 comm="syz.2.326" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.344119][ T43] audit: type=1400 audit(1791476427.511:524): avc: denied { ioctl } for pid=6959 comm="syz.2.326" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 69.381365][ T6963] netlink: 'syz.1.327': attribute type 2 has an invalid length. [ 69.420751][ T6956] 'Û=>*0: renamed from bridge_slave_0 (while UP) [ 69.434967][ T6969] FAULT_INJECTION: forcing a failure. [ 69.434967][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.434986][ T6969] CPU: 0 UID: 0 PID: 6969 Comm: syz.0.329 Not tainted syzkaller #0 PREEMPT(full) [ 69.434998][ T6969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.435004][ T6969] Call Trace: [ 69.435008][ T6969] [ 69.435012][ T6969] dump_stack_lvl+0x100/0x190 [ 69.435058][ T6969] should_fail_ex.cold+0x5/0xa [ 69.435075][ T6969] _copy_from_iter+0x1f4/0x1690 [ 69.435095][ T6969] ? __asan_memset+0x23/0x50 [ 69.435109][ T6969] ? __pfx__copy_from_iter+0x10/0x10 [ 69.435123][ T6969] ? __pfx___alloc_skb+0x10/0x10 [ 69.435148][ T6969] netlink_sendmsg+0x808/0xda0 [ 69.435167][ T6969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.435185][ T6969] ? selinux_socket_sendmsg+0x198/0x2f0 [ 69.435202][ T6969] ____sys_sendmsg+0xa4d/0xbe0 [ 69.435220][ T6969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.435237][ T6969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.435253][ T6969] ? lock_acquire+0x1d1/0x380 [ 69.435266][ T6969] ? get_pid_task+0x2a/0x250 [ 69.435282][ T6969] ___sys_sendmsg+0x190/0x1e0 [ 69.435297][ T6969] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.435310][ T6969] ? get_pid_task+0x106/0x250 [ 69.435331][ T6969] ? find_held_lock+0x2b/0x80 [ 69.435355][ T6969] __sys_sendmsg+0x160/0x210 [ 69.435373][ T6969] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.435398][ T6969] do_syscall_64+0x123/0x790 [ 69.435417][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.435428][ T6969] RIP: 0033:0x7fc23259e199 [ 69.435437][ T6969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.435447][ T6969] RSP: 002b:00007fc2333ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.435458][ T6969] RAX: ffffffffffffffda RBX: 00007fc232825fa0 RCX: 00007fc23259e199 [ 69.435465][ T6969] RDX: 0000000000000090 RSI: 0000200000000300 RDI: 0000000000000003 [ 69.435471][ T6969] RBP: 00007fc2333ed090 R08: 0000000000000000 R09: 0000000000000000 [ 69.435477][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.435483][ T6969] R13: 00007fc232826038 R14: 00007fc232825fa0 R15: 00007ffe6e8f5018 [ 69.435497][ T6969] [ 69.645041][ T6980] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 69.652561][ T6980] netlink: 'syz.0.333': attribute type 4 has an invalid length. [ 69.674976][ T43] audit: type=1400 audit(1791476427.841:525): avc: denied { connect } for pid=6981 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.679965][ T6982] netlink: 778 bytes leftover after parsing attributes in process `syz.4.334'. [ 69.683051][ T43] audit: type=1400 audit(1791476427.851:526): avc: denied { shutdown } for pid=6981 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.698128][ T6984] ip_tables: iptables: counters copy to user failed while replacing table [ 69.961398][ T43] audit: type=1400 audit(1791476428.131:527): avc: denied { bind } for pid=6991 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.039865][ T43] audit: type=1400 audit(1791476428.211:528): avc: denied { append } for pid=7005 comm="syz.2.342" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.042362][ T43] audit: type=1400 audit(1791476428.211:529): avc: denied { create } for pid=7006 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.043740][ T7008] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 70.053508][ T7008] bond2: entered promiscuous mode [ 70.053702][ T7008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.067892][ T7008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.068051][ T7008] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 70.068061][ T7008] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 70.071573][ T7008] bond2: (slave gre1): making interface the new active one [ 70.071585][ T7008] gre1: entered promiscuous mode [ 70.074461][ T7008] bond2: (slave gre1): Enslaving as an active interface with an up link [ 70.128474][ T7016] ip_tables: iptables: counters copy to user failed while replacing table [ 70.588957][ T7056] warning: `syz.1.359' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.686655][ T7064] Console: switching to colour dummy device 80x25 [ 70.951208][ T5738] Bluetooth: hci0: unexpected event for opcode 0x080d [ 70.956465][ T7066] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 70.971222][ T7066] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 70.971418][ T7066] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 70.971498][ T7066] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 70.971628][ T7066] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 70.972178][ T7066] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 70.989343][ T7066] pci 0000:00:01.0: Adding to iommu group 1 [ 70.998190][ T7066] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 70.998211][ T7066] pci 0000:00:01.0: vgaarb: bridge control possible [ 70.998224][ T7066] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 71.010982][ T7066] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 71.014121][ T7066] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 71.021152][ T7066] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 71.097019][ T7066] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 71.097133][ T7066] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 71.098847][ T7066] [drm] features: -virgl +edid -resource_blob -host_visible [ 71.098859][ T7066] [drm] features: -context_init -blob_alignment [ 71.111997][ T7066] [drm] number of scanouts: 1 [ 71.112030][ T7066] [drm] number of cap sets: 0 [ 71.134698][ T7066] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 71.155777][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 71.201141][ T7066] Console: switching to colour frame buffer device 160x50 [ 71.244969][ T7066] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 71.250644][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.250702][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.261605][ T50] cfg80211: failed to load regulatory.db [ 71.427736][ T7099] 9p: Bad value for 'rfdno' [ 71.428754][ T7100] FAULT_INJECTION: forcing a failure. [ 71.428754][ T7100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.428786][ T7100] CPU: 1 UID: 0 PID: 7100 Comm: syz.4.379 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.428808][ T7100] Tainted: [L]=SOFTLOCKUP [ 71.428814][ T7100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.428823][ T7100] Call Trace: [ 71.428829][ T7100] [ 71.428835][ T7100] dump_stack_lvl+0x100/0x190 [ 71.428918][ T7100] should_fail_ex.cold+0x5/0xa [ 71.428942][ T7100] _copy_from_user+0x2e/0xd0 [ 71.428989][ T7100] wext_handle_ioctl+0xc9/0x1b0 [ 71.429033][ T7100] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 71.429055][ T7100] ? do_vfs_ioctl+0x226/0x13e0 [ 71.429075][ T7100] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 71.429092][ T7100] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 71.429117][ T7100] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 71.429143][ T7100] sock_ioctl+0x2d4/0x6b0 [ 71.429165][ T7100] ? __pfx_sock_ioctl+0x10/0x10 [ 71.429191][ T7100] ? selinux_file_ioctl+0x13b/0x290 [ 71.429211][ T7100] ? selinux_file_ioctl+0xb6/0x290 [ 71.429233][ T7100] ? __pfx_sock_ioctl+0x10/0x10 [ 71.429254][ T7100] __x64_sys_ioctl+0x18e/0x210 [ 71.429275][ T7100] do_syscall_64+0x123/0x790 [ 71.429322][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.429339][ T7100] RIP: 0033:0x7f4c6c79e199 [ 71.429353][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.429367][ T7100] RSP: 002b:00007f4c6d666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.429384][ T7100] RAX: ffffffffffffffda RBX: 00007f4c6ca25fa0 RCX: 00007f4c6c79e199 [ 71.429394][ T7100] RDX: 0000200000000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 71.429405][ T7100] RBP: 00007f4c6d666090 R08: 0000000000000000 R09: 0000000000000000 [ 71.429414][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.429423][ T7100] R13: 00007f4c6ca26038 R14: 00007f4c6ca25fa0 R15: 00007ffec892b9d8 [ 71.429446][ T7100] [ 71.637142][ T50] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 71.796559][ T50] usb 5-1: Invalid ep0 maxpacket: 16 [ 71.840427][ T7143] sctp: [Deprecated]: syz.1.390 (pid 7143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.840427][ T7143] Use struct sctp_sack_info instead [ 71.841055][ T7135] sctp: [Deprecated]: syz.1.390 (pid 7135) Use of int in max_burst socket option deprecated. [ 71.841055][ T7135] Use struct sctp_assoc_value instead [ 71.846793][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.852744][ T7135] bridge_slave_0 (unregistering): left allmulticast mode [ 71.852765][ T7135] bridge_slave_0 (unregistering): left promiscuous mode [ 71.852853][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.936035][ T50] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 72.085637][ T50] usb 5-1: Invalid ep0 maxpacket: 16 [ 72.087961][ T50] usb usb5-port1: attempt power cycle [ 72.218292][ T5124] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.376024][ T5124] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.376848][ T5124] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.376864][ T5124] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.376875][ T5124] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.376893][ T5124] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.382058][ T5124] usb 7-1: config 0 descriptor?? [ 72.435605][ T50] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 72.456425][ T50] usb 5-1: Invalid ep0 maxpacket: 16 [ 72.585985][ T50] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 72.606997][ T50] usb 5-1: Invalid ep0 maxpacket: 16 [ 72.607454][ T50] usb usb5-port1: unable to enumerate USB device [ 72.698512][ T7167] overlayfs: failed to clone lowerpath [ 72.701348][ T7167] overlayfs: failed to clone upperpath [ 72.798881][ T5124] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 74.226039][ T50] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 74.781424][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.403'. [ 74.902386][ T7176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=7176 comm=syz.2.403 [ 74.902781][ T7176] netlink: 48 bytes leftover after parsing attributes in process `syz.2.403'. [ 74.997174][ T5738] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 74.997320][ T5738] Bluetooth: hci0: Injecting HCI hardware error event [ 75.012199][ T5124] usb 7-1: USB disconnect, device number 3 [ 75.335084][ T7157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.551538][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 75.551556][ T43] audit: type=1400 audit(1791476433.721:545): avc: denied { listen } for pid=7209 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.554101][ T43] audit: type=1400 audit(1791476433.721:546): avc: denied { setopt } for pid=7209 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.601637][ T43] audit: type=1400 audit(1791476433.771:547): avc: denied { bind } for pid=7211 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 75.601857][ T43] audit: type=1400 audit(1791476433.771:548): avc: denied { ioctl } for pid=7211 comm="syz.1.416" path="socket:[16991]" dev="sockfs" ino=16991 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 75.631671][ T7212] netlink: 'syz.1.416': attribute type 4 has an invalid length. [ 75.631685][ T7212] netlink: 152 bytes leftover after parsing attributes in process `syz.1.416'. [ 75.966451][ T7228] syz.0.420 (7228): drop_caches: 2 [ 76.094192][ T7233] syz.0.422 (7233): drop_caches: 2 [ 76.382060][ T7242] netlink: 'syz.0.424': attribute type 4 has an invalid length. [ 76.583196][ T43] audit: type=1400 audit(1791476434.751:549): avc: denied { write } for pid=7243 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.636113][ T62] rpcbind: server 127.0.0.1 not responding, timed out [ 78.697867][ T7218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.814906][ T7258] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 78.814932][ T7258] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.817694][ T7258] vhci_hcd vhci_hcd.0: Device attached [ 78.818506][ T7260] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0 [ 78.819012][ T43] audit: type=1400 audit(1791476436.981:550): avc: denied { create } for pid=7248 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.822881][ T13] vhci_hcd vhci_hcd.0: stop threads [ 78.822891][ T13] vhci_hcd vhci_hcd.0: release socket [ 78.822904][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 78.843998][ T7264] rnbd_client L213: map_device: Parameters missing [ 78.845779][ T43] audit: type=1400 audit(1791476437.021:551): avc: denied { bind } for pid=7249 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.915613][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.989041][ T7273] dns_resolver: Unsupported content type (234) [ 78.994575][ T7273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=485 sclass=netlink_route_socket pid=7273 comm=syz.1.434 [ 79.245594][ T30] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 79.363291][ T43] audit: type=1400 audit(1791476437.531:552): avc: denied { append } for pid=7286 comm="syz.2.441" name="card1" dev="devtmpfs" ino=2866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.396035][ T30] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 79.396997][ T30] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 79.397011][ T30] usb 9-1: config 1 has no interface number 0 [ 79.398679][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.398691][ T30] usb 9-1: Product: syz [ 79.398698][ T30] usb 9-1: Manufacturer: syz [ 79.398705][ T30] usb 9-1: SerialNumber: syz [ 79.424096][ T30] usb 9-1: 3:1 : does not exist [ 79.424108][ T30] usb 9-1: 3:2 : does not exist [ 79.644504][ T7293] FAULT_INJECTION: forcing a failure. [ 79.644504][ T7293] name failslab, interval 1, probability 0, space 0, times 0 [ 79.644534][ T7293] CPU: 2 UID: 0 PID: 7293 Comm: syz.2.443 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.644557][ T7293] Tainted: [L]=SOFTLOCKUP [ 79.644563][ T7293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.644582][ T7293] Call Trace: [ 79.644588][ T7293] [ 79.644595][ T7293] dump_stack_lvl+0x100/0x190 [ 79.644664][ T7293] should_fail_ex.cold+0x5/0xa [ 79.644691][ T7293] should_failslab+0xc2/0x120 [ 79.644722][ T7293] kmem_cache_alloc_noprof+0x92/0x6a0 [ 79.644744][ T7293] ? d_instantiate+0x8a/0xb0 [ 79.644763][ T7293] ? alloc_empty_file+0x5b/0x1c0 [ 79.644795][ T7293] alloc_empty_file+0x5b/0x1c0 [ 79.644821][ T7293] alloc_file_pseudo+0x183/0x290 [ 79.644840][ T7293] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 79.644858][ T7293] ? alloc_fd+0x471/0x7a0 [ 79.644886][ T7293] sock_alloc_file+0x50/0x210 [ 79.644909][ T7293] __sys_socket+0x1c0/0x260 [ 79.644931][ T7293] ? __pfx___sys_socket+0x10/0x10 [ 79.644960][ T7293] __x64_sys_socket+0x72/0xb0 [ 79.644982][ T7293] ? lockdep_hardirqs_on+0x7d/0x110 [ 79.645010][ T7293] do_syscall_64+0x123/0x790 [ 79.645034][ T7293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.645053][ T7293] RIP: 0033:0x7f2776d9e199 [ 79.645069][ T7293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.645085][ T7293] RSP: 002b:00007f2777b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 79.645102][ T7293] RAX: ffffffffffffffda RBX: 00007f2777025fa0 RCX: 00007f2776d9e199 [ 79.645114][ T7293] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 79.645124][ T7293] RBP: 00007f2776e35888 R08: 0000000000000000 R09: 0000000000000000 [ 79.645135][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.645145][ T7293] R13: 00007f2777026038 R14: 00007f2777025fa0 R15: 00007ffd5b85fbe8 [ 79.645169][ T7293] [ 79.782874][ T7303] FAULT_INJECTION: forcing a failure. [ 79.782874][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 79.782895][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.2.446 Tainted: G L syzkaller #0 PREEMPT(full) [ 79.782910][ T7303] Tainted: [L]=SOFTLOCKUP [ 79.782914][ T7303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.782921][ T7303] Call Trace: [ 79.782925][ T7303] [ 79.782929][ T7303] dump_stack_lvl+0x100/0x190 [ 79.782950][ T7303] should_fail_ex.cold+0x5/0xa [ 79.782967][ T7303] should_failslab+0xc2/0x120 [ 79.782984][ T7303] __kmalloc_noprof+0xfc/0x840 [ 79.782998][ T7303] ? __pfx_dynamic_dname+0x10/0x10 [ 79.783011][ T7303] ? tomoyo_encode2+0xfb/0x3c0 [ 79.783030][ T7303] tomoyo_encode2+0xfb/0x3c0 [ 79.783048][ T7303] tomoyo_encode+0x29/0x50 [ 79.783064][ T7303] tomoyo_realpath_from_path+0x18c/0x690 [ 79.783084][ T7303] tomoyo_path_number_perm+0x23c/0x580 [ 79.783097][ T7303] ? tomoyo_path_number_perm+0x22e/0x580 [ 79.783112][ T7303] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 79.783131][ T7303] ? __lock_acquire+0x5c0/0x1f40 [ 79.783150][ T7303] ? __fget_files+0x34/0x3d0 [ 79.783166][ T7303] ? find_held_lock+0x2b/0x80 [ 79.783182][ T7303] ? hook_file_ioctl_common+0x140/0x440 [ 79.783203][ T7303] ? __fget_files+0x21f/0x3d0 [ 79.783221][ T7303] security_file_ioctl+0xd3/0x230 [ 79.783241][ T7303] __x64_sys_ioctl+0xb7/0x210 [ 79.783255][ T7303] do_syscall_64+0x123/0x790 [ 79.783271][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.783283][ T7303] RIP: 0033:0x7f2776d9e199 [ 79.783292][ T7303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.783302][ T7303] RSP: 002b:00007f2777b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.783313][ T7303] RAX: ffffffffffffffda RBX: 00007f2777025fa0 RCX: 00007f2776d9e199 [ 79.783320][ T7303] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 79.783326][ T7303] RBP: 00007f2777b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 79.783333][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.783339][ T7303] R13: 00007f2777026038 R14: 00007f2777025fa0 R15: 00007ffd5b85fbe8 [ 79.783353][ T7303] [ 79.783362][ T7303] ERROR: Out of memory at tomoyo_realpath_from_path. [ 79.956046][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'. [ 79.984191][ T43] audit: type=1400 audit(1791476438.151:553): avc: denied { ioctl } for pid=7270 comm="syz.4.433" path="socket:[17199]" dev="sockfs" ino=17199 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.984501][ T43] audit: type=1400 audit(1791476438.151:554): avc: denied { bind } for pid=7270 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.166388][ T50] usb 9-1: USB disconnect, device number 2 [ 80.290502][ T7337] FAULT_INJECTION: forcing a failure. [ 80.290502][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 80.290532][ T7337] CPU: 1 UID: 0 PID: 7337 Comm: syz.0.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.290555][ T7337] Tainted: [L]=SOFTLOCKUP [ 80.290561][ T7337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.290571][ T7337] Call Trace: [ 80.290577][ T7337] [ 80.290584][ T7337] dump_stack_lvl+0x100/0x190 [ 80.290620][ T7337] should_fail_ex.cold+0x5/0xa [ 80.290649][ T7337] should_failslab+0xc2/0x120 [ 80.290678][ T7337] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.290703][ T7337] ? d_instantiate+0x8a/0xb0 [ 80.290724][ T7337] ? alloc_empty_file+0x5b/0x1c0 [ 80.290760][ T7337] alloc_empty_file+0x5b/0x1c0 [ 80.290791][ T7337] alloc_file_pseudo+0x183/0x290 [ 80.290811][ T7337] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 80.290830][ T7337] ? alloc_fd+0x471/0x7a0 [ 80.290862][ T7337] sock_alloc_file+0x50/0x210 [ 80.290883][ T7337] __sys_socket+0x1c0/0x260 [ 80.290908][ T7337] ? __pfx___sys_socket+0x10/0x10 [ 80.290939][ T7337] __x64_sys_socket+0x72/0xb0 [ 80.290962][ T7337] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.290988][ T7337] do_syscall_64+0x123/0x790 [ 80.291016][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.291036][ T7337] RIP: 0033:0x7fc23259e199 [ 80.291052][ T7337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.291070][ T7337] RSP: 002b:00007fc2333cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 80.291089][ T7337] RAX: ffffffffffffffda RBX: 00007fc232826090 RCX: 00007fc23259e199 [ 80.291102][ T7337] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 80.291113][ T7337] RBP: 00007fc232635888 R08: 0000000000000000 R09: 0000000000000000 [ 80.291125][ T7337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.291137][ T7337] R13: 00007fc232826128 R14: 00007fc232826090 R15: 00007ffe6e8f5018 [ 80.291163][ T7337] [ 80.332599][ T7347] ip_tables: iptables: counters copy to user failed while replacing table [ 80.587833][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 80.587850][ T43] audit: type=1400 audit(1791476438.761:562): avc: denied { mount } for pid=7369 comm="syz.0.470" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.650177][ T7379] netlink: 'syz.0.470': attribute type 3 has an invalid length. [ 80.664373][ T43] audit: type=1400 audit(1791476438.831:563): avc: denied { ioctl } for pid=7380 comm="syz.1.475" path="socket:[17298]" dev="sockfs" ino=17298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.667248][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 80.667344][ T7381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.685168][ T7381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.719362][ T7378] binder: 7377:7378 ioctl 4018620d 0 returned -22 [ 80.732502][ T7378] syz.2.474 (7378): drop_caches: 2 [ 80.898119][ T43] audit: type=1400 audit(1791476439.061:564): avc: denied { nlmsg_read } for pid=7395 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.944697][ T43] audit: type=1326 audit(1791476439.111:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.4.485" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6c79e199 code=0x7ffc0000 [ 80.944742][ T43] audit: type=1326 audit(1791476439.111:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.4.485" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6c79e199 code=0x7ffc0000 [ 80.945200][ T43] audit: type=1326 audit(1791476439.111:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.4.485" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c6c79e199 code=0x7ffc0000 [ 80.947083][ T43] audit: type=1326 audit(1791476439.121:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.4.485" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6c79e199 code=0x7ffc0000 [ 80.947541][ T43] audit: type=1326 audit(1791476439.121:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.4.485" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6c79e199 code=0x7ffc0000 [ 80.999695][ T43] audit: type=1326 audit(1791476439.171:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.4.485" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c6c79e199 code=0x7ffc0000 [ 80.999740][ T43] audit: type=1326 audit(1791476439.171:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.4.485" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6c79e199 code=0x7ffc0000 [ 81.098484][ T7420] syzkaller0: entered promiscuous mode [ 81.098503][ T7420] syzkaller0: entered allmulticast mode [ 81.147194][ T7418] binder: 7417:7418 ioctl 4018620d 0 returned -22 [ 81.154190][ T7418] syz.0.488 (7418): drop_caches: 2 [ 81.216430][ T7429] fuse: fd is not a fuse device [ 81.423808][ T7443] x_tables: duplicate underflow at hook 1 [ 81.534286][ T7453] binder: 7452:7453 ioctl 4018620d 0 returned -22 [ 81.540176][ T7453] syz.0.502 (7453): drop_caches: 2 [ 81.575912][ T7455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.576088][ T7455] block device autoloading is deprecated and will be removed. [ 81.719960][ T7460] fuse: Unknown parameter 'ltÃÈë¥' [ 81.785911][ T7460] FAULT_INJECTION: forcing a failure. [ 81.785911][ T7460] name failslab, interval 1, probability 0, space 0, times 0 [ 81.785941][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: syz.2.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.785962][ T7460] Tainted: [L]=SOFTLOCKUP [ 81.785968][ T7460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.785977][ T7460] Call Trace: [ 81.785982][ T7460] [ 81.785988][ T7460] dump_stack_lvl+0x100/0x190 [ 81.786015][ T7460] should_fail_ex.cold+0x5/0xa [ 81.786036][ T7460] should_failslab+0xc2/0x120 [ 81.786057][ T7460] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 81.786079][ T7460] ? kasan_save_track+0x14/0x30 [ 81.786099][ T7460] ? media_pipeline_add_pad+0x6b8/0xa00 [ 81.786127][ T7460] krealloc_node_align_noprof+0x321/0x3e0 [ 81.786149][ T7460] media_pipeline_add_pad+0x6b8/0xa00 [ 81.786198][ T7460] __media_pipeline_start+0x2e6/0x22b0 [ 81.786224][ T7460] ? lock_acquire+0x1d1/0x380 [ 81.786247][ T7460] ? __pfx___media_pipeline_start+0x10/0x10 [ 81.786273][ T7460] ? __mutex_lock+0x26c/0x1bd0 [ 81.786298][ T7460] media_pipeline_start+0x49/0x70 [ 81.786323][ T7460] video_device_pipeline_start+0x79/0xa0 [ 81.786340][ T7460] vimc_capture_start_streaming+0x7d/0x130 [ 81.786360][ T7460] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 81.786380][ T7460] vb2_start_streaming+0x162/0x570 [ 81.786399][ T7460] ? __bitmap_weight+0xd7/0x110 [ 81.786424][ T7460] vb2_core_streamon+0x26a/0x3c0 [ 81.786446][ T7460] vb2_ioctl_streamon+0xd9/0x150 [ 81.786465][ T7460] ? v4l_streamon+0x1a/0xa0 [ 81.786483][ T7460] __video_do_ioctl+0xb2a/0xdf0 [ 81.786502][ T7460] ? __might_fault+0xc5/0x140 [ 81.786519][ T7460] ? __pfx___video_do_ioctl+0x10/0x10 [ 81.786541][ T7460] video_usercopy+0x47a/0x1730 [ 81.786559][ T7460] ? __pfx___video_do_ioctl+0x10/0x10 [ 81.786576][ T7460] ? __pfx_video_usercopy+0x10/0x10 [ 81.786606][ T7460] v4l2_ioctl+0x1bd/0x250 [ 81.786621][ T7460] ? __pfx_v4l2_ioctl+0x10/0x10 [ 81.786639][ T7460] __x64_sys_ioctl+0x18e/0x210 [ 81.786660][ T7460] do_syscall_64+0x123/0x790 [ 81.786682][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.786698][ T7460] RIP: 0033:0x7f2776d9e199 [ 81.786711][ T7460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.786726][ T7460] RSP: 002b:00007f2777b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.786742][ T7460] RAX: ffffffffffffffda RBX: 00007f2777025fa0 RCX: 00007f2776d9e199 [ 81.786753][ T7460] RDX: 0000200000000700 RSI: 0000000040045612 RDI: 0000000000000009 [ 81.786762][ T7460] RBP: 00007f2776e35888 R08: 0000000000000000 R09: 0000000000000000 [ 81.786771][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.786780][ T7460] R13: 00007f2777026038 R14: 00007f2777025fa0 R15: 00007ffd5b85fbe8 [ 81.786801][ T7460] [ 81.788484][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.2.504'. [ 81.956559][ T7472] netlink: 68 bytes leftover after parsing attributes in process `syz.0.508'. [ 82.011263][ T7479] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 82.016039][ T5124] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 82.127689][ T7482] binder: BINDER_SET_CONTEXT_MGR already set [ 82.127704][ T7482] binder: 7481:7482 ioctl 4018620d 200000000040 returned -16 [ 82.143763][ T7482] syz.2.511 (7482): drop_caches: 2 [ 82.187280][ T5124] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 82.188873][ T5124] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 82.188896][ T5124] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.189685][ T5124] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 82.189696][ T5124] usb 9-1: Manufacturer: syz [ 82.194003][ T5124] usb 9-1: config 0 descriptor?? [ 82.200675][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7487 comm=syz.1.513 [ 82.255658][ T5124] rc_core: IR keymap rc-hauppauge not found [ 82.255670][ T5124] Registered IR keymap rc-empty [ 82.257421][ T5124] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 82.258415][ T5124] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input5 [ 82.283797][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 82.323826][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.518'. [ 82.323928][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.518'. [ 82.324007][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.518'. [ 82.324087][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.518'. [ 82.324173][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.518'. [ 82.394522][ T7509] netlink: 'syz.1.520': attribute type 21 has an invalid length. [ 82.401953][ T5124] usb 9-1: USB disconnect, device number 3 [ 82.514525][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.601659][ T7513] ip6gre1: left promiscuous mode [ 82.601680][ T7513] ip6gre1: left allmulticast mode [ 82.627930][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.627970][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.628000][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.628035][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.751779][ T7524] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 83.104902][ T7551] overlayfs: failed to clone upperpath [ 83.183862][ T7555] overlayfs: failed to clone upperpath [ 83.882436][ T7572] ip_tables: iptables: counters copy to user failed while replacing table [ 83.972279][ T7576] binder: 7575:7576 ioctl c0306201 0 returned -14 [ 83.981324][ T7576] syz.2.545 (7576): drop_caches: 2 [ 84.081932][ T7581] xt_cgroup: no path or classid specified [ 84.153435][ T7586] netlink: 'syz.2.548': attribute type 16 has an invalid length. [ 84.234010][ T7590] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 84.235581][ T7590] CIFS: Attempting to mount //127.0.0.1/share [ 84.335620][ T7596] xt_ecn: cannot match TCP bits for non-tcp packets [ 85.061310][ T7590] CIFS: VFS: Error connecting to socket. Aborting operation. [ 85.061370][ T7590] CIFS: VFS: cifs_mount failed w/return code = -4 [ 85.147790][ T7616] kvm [7615]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1200000000eb5 [ 85.163617][ T7636] FAULT_INJECTION: forcing a failure. [ 85.163617][ T7636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.163671][ T7636] CPU: 0 UID: 0 PID: 7636 Comm: syz.4.562 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.163688][ T7636] Tainted: [L]=SOFTLOCKUP [ 85.163692][ T7636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.163699][ T7636] Call Trace: [ 85.163703][ T7636] [ 85.163708][ T7636] dump_stack_lvl+0x100/0x190 [ 85.163739][ T7636] should_fail_ex.cold+0x5/0xa [ 85.163755][ T7636] _copy_from_user+0x2e/0xd0 [ 85.163774][ T7636] copy_msghdr_from_user+0x9f/0x4c0 [ 85.163792][ T7636] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 85.163809][ T7636] ? lock_acquire+0x1d1/0x380 [ 85.163822][ T7636] ? get_pid_task+0x2a/0x250 [ 85.163838][ T7636] ___sys_sendmsg+0x106/0x1e0 [ 85.163853][ T7636] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.163866][ T7636] ? get_pid_task+0x106/0x250 [ 85.163886][ T7636] ? find_held_lock+0x2b/0x80 [ 85.163911][ T7636] __sys_sendmsg+0x160/0x210 [ 85.163929][ T7636] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.163953][ T7636] do_syscall_64+0x123/0x790 [ 85.163973][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.163985][ T7636] RIP: 0033:0x7f4c6c79e199 [ 85.163994][ T7636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.164005][ T7636] RSP: 002b:00007f4c6d666028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.164016][ T7636] RAX: ffffffffffffffda RBX: 00007f4c6ca25fa0 RCX: 00007f4c6c79e199 [ 85.164023][ T7636] RDX: 00000000240488d0 RSI: 0000200000000680 RDI: 0000000000000003 [ 85.164030][ T7636] RBP: 00007f4c6d666090 R08: 0000000000000000 R09: 0000000000000000 [ 85.164036][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.164042][ T7636] R13: 00007f4c6ca26038 R14: 00007f4c6ca25fa0 R15: 00007ffec892b9d8 [ 85.164056][ T7636] [ 85.236575][ T7642] syzkaller0: entered promiscuous mode [ 85.236588][ T7642] syzkaller0: entered allmulticast mode [ 85.287956][ T7645] bridge1: entered promiscuous mode [ 85.287996][ T7645] bridge1: entered allmulticast mode [ 85.388754][ T7655] netlink: 'syz.2.569': attribute type 32 has an invalid length. [ 85.525727][ T7664] __nla_validate_parse: 67 callbacks suppressed [ 85.525748][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 85.526463][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 85.980311][ T7685] syzkaller0: entered promiscuous mode [ 85.980330][ T7685] syzkaller0: entered allmulticast mode [ 85.983080][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 85.983091][ T43] audit: type=1400 audit(1791476445.157:620): avc: denied { write } for pid=7684 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.251051][ T7692] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 86.251082][ T7692] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 86.252411][ T7692] team0: Port device wlan0 added [ 86.264632][ T7699] mmap: syz.4.585 (7699) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.266573][ T7699] syzkaller0: entered promiscuous mode [ 86.266589][ T7699] syzkaller0: entered allmulticast mode [ 86.279237][ T43] audit: type=1400 audit(1791476445.457:621): avc: denied { ioctl } for pid=7700 comm="syz.0.586" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.312884][ T43] audit: type=1400 audit(1791476445.487:622): avc: denied { create } for pid=7704 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.313832][ T43] audit: type=1400 audit(1791476445.487:623): avc: denied { bind } for pid=7704 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.314030][ T43] audit: type=1400 audit(1791476445.487:624): avc: denied { listen } for pid=7704 comm="syz.1.588" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.315172][ T43] audit: type=1400 audit(1791476445.487:625): avc: denied { write } for pid=7704 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.315305][ T43] audit: type=1400 audit(1791476445.487:626): avc: denied { connect } for pid=7704 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.375097][ T43] audit: type=1400 audit(1791476445.547:627): avc: denied { shutdown } for pid=7704 comm="syz.1.588" laddr=fec0::6387:dfa7:6e19:38c3 lport=45669 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.444985][ T7714] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 86.540002][ T43] audit: type=1400 audit(1791476445.717:628): avc: denied { read } for pid=7726 comm="syz.2.595" path="socket:[21456]" dev="sockfs" ino=21456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.713352][ T43] audit: type=1400 audit(1791476445.887:629): avc: denied { read write } for pid=7739 comm="syz.0.601" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 86.719190][ T7740] FAULT_INJECTION: forcing a failure. [ 86.719190][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 86.719217][ T7740] CPU: 3 UID: 0 PID: 7740 Comm: syz.0.601 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.719239][ T7740] Tainted: [L]=SOFTLOCKUP [ 86.719245][ T7740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.719254][ T7740] Call Trace: [ 86.719260][ T7740] [ 86.719267][ T7740] dump_stack_lvl+0x100/0x190 [ 86.719306][ T7740] should_fail_ex.cold+0x5/0xa [ 86.719329][ T7740] should_failslab+0xc2/0x120 [ 86.719359][ T7740] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 86.719382][ T7740] ? __d_alloc+0x35/0xa50 [ 86.719402][ T7740] __d_alloc+0x35/0xa50 [ 86.719420][ T7740] d_alloc_pseudo+0x1c/0xc0 [ 86.719439][ T7740] alloc_file_pseudo+0x118/0x290 [ 86.719456][ T7740] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 86.719474][ T7740] ? mas_preallocate+0x528/0xee0 [ 86.719507][ T7740] __shmem_file_setup+0x205/0x460 [ 86.719532][ T7740] ? __pfx___shmem_file_setup+0x10/0x10 [ 86.719556][ T7740] ? vm_area_alloc+0x1f/0x160 [ 86.719583][ T7740] shmem_zero_setup+0x96/0x1b0 [ 86.719601][ T7740] __mmap_region+0x26b6/0x32e0 [ 86.719625][ T7740] ? __pfx___mmap_region+0x10/0x10 [ 86.719642][ T7740] ? __lock_acquire+0x5c0/0x1f40 [ 86.719676][ T7740] ? __lock_acquire+0x5c0/0x1f40 [ 86.719698][ T7740] ? __lock_acquire+0x5c0/0x1f40 [ 86.719726][ T7740] ? __lock_acquire+0x5c0/0x1f40 [ 86.719755][ T7740] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 86.719812][ T7740] ? avc_has_perm_noaudit+0x145/0x470 [ 86.719836][ T7740] mmap_region+0x3db/0x6d0 [ 86.719855][ T7740] ? rcu_is_watching+0x13/0xc0 [ 86.719877][ T7740] ? __pfx_mmap_region+0x10/0x10 [ 86.719899][ T7740] ? selinux_mmap_addr+0xe2/0x110 [ 86.719918][ T7740] ? bpf_lsm_mmap_addr+0x9/0x30 [ 86.719972][ T7740] ? security_mmap_addr+0x71/0x1e0 [ 86.719997][ T7740] ? __get_unmapped_area+0x255/0x3e0 [ 86.720021][ T7740] do_mmap+0x12c7/0x1c30 [ 86.720055][ T7740] ? lock_acquire+0x1d1/0x380 [ 86.720075][ T7740] ? __pfx_do_mmap+0x10/0x10 [ 86.720106][ T7740] ? __pfx_down_write_killable+0x10/0x10 [ 86.720135][ T7740] vm_mmap_pgoff+0x28d/0x470 [ 86.720160][ T7740] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 86.720185][ T7740] ? __pfx_do_futex+0x10/0x10 [ 86.720214][ T7740] ksys_mmap_pgoff+0xe4/0x610 [ 86.720236][ T7740] ? __x64_sys_futex+0x358/0x4d0 [ 86.720260][ T7740] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 86.720281][ T7740] ? xfd_validate_state+0x129/0x190 [ 86.720304][ T7740] __x64_sys_mmap+0x125/0x190 [ 86.720326][ T7740] do_syscall_64+0x123/0x790 [ 86.720351][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.720369][ T7740] RIP: 0033:0x7fc23259e199 [ 86.720383][ T7740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.720400][ T7740] RSP: 002b:00007fc2333ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 86.720417][ T7740] RAX: ffffffffffffffda RBX: 00007fc232825fa0 RCX: 00007fc23259e199 [ 86.720427][ T7740] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000 [ 86.720437][ T7740] RBP: 00007fc232635888 R08: ffffffffffffffff R09: 0000000000000000 [ 86.720447][ T7740] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 86.720457][ T7740] R13: 00007fc232826038 R14: 00007fc232825fa0 R15: 00007ffe6e8f5018 [ 86.720481][ T7740] [ 86.825575][ T50] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 86.986055][ T50] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 86.986712][ T50] usb 7-1: config 0 has no interfaces? [ 86.988307][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.988319][ T50] usb 7-1: Product: syz [ 86.988326][ T50] usb 7-1: Manufacturer: syz [ 86.988333][ T50] usb 7-1: SerialNumber: syz [ 86.990123][ T50] usb 7-1: config 0 descriptor?? [ 87.179467][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 87.197081][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.197490][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.199704][ T938] usb 7-1: USB disconnect, device number 4 [ 87.509328][ T7768] No such timeout policy "syz1" [ 87.613217][ T7774] syzkaller0: entered promiscuous mode [ 87.613231][ T7774] syzkaller0: entered allmulticast mode [ 87.636022][ T35] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 87.717084][ T7783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.786005][ T35] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 87.786806][ T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.786828][ T35] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 87.788317][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.788329][ T35] usb 7-1: Product: syz [ 87.788336][ T35] usb 7-1: Manufacturer: syz [ 87.788343][ T35] usb 7-1: SerialNumber: syz [ 87.799469][ T5738] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 87.799514][ T5738] Bluetooth: hci1: Injecting HCI hardware error event [ 87.801884][ T5728] Bluetooth: hci1: hardware error 0x00 [ 87.993546][ T35] usb 7-1: Cannot retrieve CPort count: -71 [ 87.993570][ T35] usb 7-1: Cannot retrieve CPort count: -71 [ 87.993582][ T35] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 87.997629][ T35] usb 7-1: USB disconnect, device number 5 [ 89.009246][ T7830] netlink: zone id is out of range [ 89.009256][ T7830] netlink: zone id is out of range [ 89.877268][ T5728] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 90.679150][ T7787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.714200][ T7837] netlink: 'syz.4.629': attribute type 1 has an invalid length. [ 90.732241][ T7837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.742946][ T7840] overlay: ./file1 is not a directory [ 90.750365][ T7837] bond1: (slave geneve2): making interface the new active one [ 90.751285][ T7837] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 90.755689][ T7837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7837 comm=syz.4.629 [ 90.787269][ T7846] zero sized request [ 90.854106][ T7849] syz.0.634 (7849): drop_caches: 2 [ 90.854734][ T7851] netlink: 'syz.2.635': attribute type 3 has an invalid length. [ 90.900211][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.637'. [ 91.111063][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 91.111082][ T43] audit: type=1400 audit(1791476450.287:643): avc: denied { getopt } for pid=7889 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.216412][ T7896] syz.4.649 (7896): drop_caches: 2 [ 91.328138][ T7903] overlayfs: failed to clone lowerpath [ 91.334505][ T7903] fuse: fd is not a fuse device [ 91.399024][ T7911] overlayfs: failed to clone upperpath [ 91.459066][ T7915] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.655'. [ 91.459765][ T43] audit: type=1400 audit(1791476450.637:644): avc: denied { read } for pid=7913 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.461935][ T7915] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.655'. [ 91.464005][ T7915] UBIFS error (pid: 7915): cannot open "ubi0_0", error -19 [ 91.512320][ T43] audit: type=1400 audit(1791476450.687:645): avc: denied { map } for pid=7913 comm="syz.4.654" path="socket:[22807]" dev="sockfs" ino=22807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.512486][ T43] audit: type=1400 audit(1791476450.687:646): avc: denied { read accept } for pid=7913 comm="syz.4.654" path="socket:[22807]" dev="sockfs" ino=22807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.521876][ T7918] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 91.632388][ T43] audit: type=1400 audit(1791476450.807:647): avc: denied { mount } for pid=7921 comm="syz.1.657" name="/" dev="hugetlbfs" ino=23758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 91.670730][ T43] audit: type=1400 audit(1791476450.847:648): avc: denied { lock } for pid=7925 comm="syz.2.659" path="socket:[22811]" dev="sockfs" ino=22811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.751939][ T7931] netlink: 'syz.0.660': attribute type 3 has an invalid length. [ 92.041242][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 92.058304][ T7936] can0: slcan on ttynull. [ 92.058557][ T43] audit: type=1400 audit(1791476451.237:649): avc: denied { read } for pid=5439 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 92.062879][ T7936] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 92.093204][ T43] audit: type=1400 audit(1791476451.267:650): avc: denied { setopt } for pid=7935 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.093469][ T43] audit: type=1400 audit(1791476451.267:651): avc: denied { read } for pid=7935 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.150278][ T43] audit: type=1400 audit(1791476451.327:652): avc: denied { write } for pid=7939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.197707][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 92.531379][ T7966] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 92.568095][ T7966] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.647671][ T7966] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.712378][ T7966] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.789695][ T7966] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.938708][ T7935] can0 (unregistered): slcan off ttynull. [ 92.955550][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.966558][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.966594][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.966620][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.069851][ T5728] Bluetooth: hci2: Dropping invalid advertising data [ 93.069864][ T5728] Bluetooth: hci2: Dropping invalid advertising data [ 93.069870][ T5728] Bluetooth: hci2: Malformed LE Event: 0x02 [ 93.070285][ T7987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.676'. [ 93.104808][ T7985] syz.2.675 (7985): drop_caches: 2 [ 93.751817][ T8023] program syz.4.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.781153][ T8027] syzkaller0: entered promiscuous mode [ 93.781169][ T8027] syzkaller0: entered allmulticast mode [ 93.823942][ T8025] syz.2.687 (8025): drop_caches: 2 [ 93.829624][ T8030] bond0: entered promiscuous mode [ 93.829645][ T8030] bond_slave_0: entered promiscuous mode [ 93.829854][ T8030] bond_slave_1: entered promiscuous mode [ 93.911127][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 93.951069][ T8042] program syz.2.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.951137][ T8040] 9pnet_fd: p9_fd_create_unix (8040): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.952605][ T8040] netlink: 408 bytes leftover after parsing attributes in process `syz.1.694'. [ 93.956819][ T8040] netlink: 108 bytes leftover after parsing attributes in process `syz.1.694'. [ 94.149306][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 94.224883][ T8064] syzkaller0: entered promiscuous mode [ 94.224905][ T8064] syzkaller0: entered allmulticast mode [ 94.229532][ T8064] tipc: Enabled bearer , priority 0 [ 94.245965][ T8064] ima: policy update completed [ 94.261208][ T8064] tipc: Resetting bearer [ 94.265203][ T8063] tipc: Resetting bearer [ 94.277763][ T8067] loop6: detected capacity change from 0 to 2640 [ 94.278899][ T8063] tipc: Disabling bearer [ 94.281046][ T8066] binder: 8065:8066 ioctl 4018620d 0 returned -22 [ 94.282982][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283023][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283048][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283071][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283093][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283199][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283233][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283255][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283267][ T8067] ldm_validate_partition_table(): Disk read failed. [ 94.283288][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283308][ T8067] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.283340][ T8067] Dev loop6: unable to read RDB block 0 [ 94.283471][ T8066] syz.0.705 (8066): drop_caches: 2 [ 94.283478][ T8067] loop6: unable to read partition table [ 94.283756][ T8067] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 94.559701][ T8080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8080 comm=syz.4.711 [ 94.560154][ T8080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8080 comm=syz.4.711 [ 94.561086][ T8080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8080 comm=syz.4.711 [ 94.902716][ T8085] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 95.045218][ T5137] ldm_validate_partition_table(): Disk read failed. [ 95.045254][ T5137] Dev loop6: unable to read RDB block 0 [ 95.045321][ T5137] loop6: unable to read partition table [ 95.156243][ T8094] jffs2: notice: (8094) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 95.515876][ T8106] FAULT_INJECTION: forcing a failure. [ 95.515876][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 95.515910][ T8106] CPU: 3 UID: 0 PID: 8106 Comm: syz.2.720 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.515938][ T8106] Tainted: [L]=SOFTLOCKUP [ 95.515946][ T8106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.515960][ T8106] Call Trace: [ 95.515967][ T8106] [ 95.515975][ T8106] dump_stack_lvl+0x100/0x190 [ 95.516050][ T8106] should_fail_ex.cold+0x5/0xa [ 95.516086][ T8106] should_failslab+0xc2/0x120 [ 95.516121][ T8106] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 95.516149][ T8106] ? __d_alloc+0x35/0xa50 [ 95.516172][ T8106] __d_alloc+0x35/0xa50 [ 95.516193][ T8106] d_alloc+0x4a/0x1e0 [ 95.516233][ T8106] lookup_one_qstr_excl+0x171/0x250 [ 95.516261][ T8106] start_dirop+0x59/0xb0 [ 95.516289][ T8106] simple_start_creating+0xf9/0x110 [ 95.516319][ T8106] ? __pfx_simple_start_creating+0x10/0x10 [ 95.516349][ T8106] ? dput.part.0+0x4f/0x240 [ 95.516377][ T8106] rpc_new_dir+0x27/0x420 [ 95.516408][ T8106] rpc_populate.constprop.0+0x125/0x1c0 [ 95.516434][ T8106] ? d_instantiate+0x8f/0xb0 [ 95.516455][ T8106] ? __pfx_rpc_fill_super+0x10/0x10 [ 95.516479][ T8106] rpc_fill_super+0x2b1/0x4f0 [ 95.516504][ T8106] ? __pfx_rpc_fill_super+0x10/0x10 [ 95.516527][ T8106] get_tree_keyed+0x10e/0x1d0 [ 95.516553][ T8106] vfs_get_tree+0x92/0x320 [ 95.516572][ T8106] path_mount+0x7d0/0x24c0 [ 95.516596][ T8106] ? __pfx_path_mount+0x10/0x10 [ 95.516616][ T8106] ? lockdep_hardirqs_on+0x7d/0x110 [ 95.516649][ T8106] ? putname+0xb1/0x110 [ 95.516676][ T8106] ? kmem_cache_free+0x127/0x6c0 [ 95.516706][ T8106] ? __x64_sys_mount+0x293/0x310 [ 95.516726][ T8106] __x64_sys_mount+0x293/0x310 [ 95.516747][ T8106] ? __pfx___x64_sys_mount+0x10/0x10 [ 95.516776][ T8106] do_syscall_64+0x123/0x790 [ 95.516804][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.516825][ T8106] RIP: 0033:0x7f2776d9e199 [ 95.516843][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.516861][ T8106] RSP: 002b:00007f2777b8c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.516881][ T8106] RAX: ffffffffffffffda RBX: 00007f2777025fa0 RCX: 00007f2776d9e199 [ 95.516894][ T8106] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 95.516906][ T8106] RBP: 00007f2776e35888 R08: 0000000000000000 R09: 0000000000000000 [ 95.516917][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.516928][ T8106] R13: 00007f2777026038 R14: 00007f2777025fa0 R15: 00007ffd5b85fbe8 [ 95.516956][ T8106] [ 95.516982][ T8106] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 95.533755][ T8109] netlink: 'syz.4.722': attribute type 3 has an invalid length. [ 95.581910][ T8113] FAULT_INJECTION: forcing a failure. [ 95.581910][ T8113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.581939][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.4.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.581964][ T8113] Tainted: [L]=SOFTLOCKUP [ 95.581971][ T8113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.581981][ T8113] Call Trace: [ 95.581987][ T8113] [ 95.581996][ T8113] dump_stack_lvl+0x100/0x190 [ 95.582027][ T8113] should_fail_ex.cold+0x5/0xa [ 95.582061][ T8113] _copy_from_user+0x2e/0xd0 [ 95.582087][ T8113] copy_ns_id_req+0xbc/0x210 [ 95.582114][ T8113] __x64_sys_listns+0x1d1/0x430 [ 95.582140][ T8113] ? __pfx___x64_sys_listns+0x10/0x10 [ 95.582166][ T8113] ? fput+0x7c/0x100 [ 95.582202][ T8113] do_syscall_64+0x123/0x790 [ 95.582230][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.582248][ T8113] RIP: 0033:0x7f4c6c79e199 [ 95.582263][ T8113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.582279][ T8113] RSP: 002b:00007f4c6d666028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d6 [ 95.582298][ T8113] RAX: ffffffffffffffda RBX: 00007f4c6ca25fa0 RCX: 00007f4c6c79e199 [ 95.582310][ T8113] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 00002000000000c0 [ 95.582321][ T8113] RBP: 00007f4c6d666090 R08: 0000000000000000 R09: 0000000000000000 [ 95.582331][ T8113] R10: 0100000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.582344][ T8113] R13: 00007f4c6ca26038 R14: 00007f4c6ca25fa0 R15: 00007ffec892b9d8 [ 95.582369][ T8113] [ 95.680689][ T8126] FAULT_INJECTION: forcing a failure. [ 95.680689][ T8126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.680719][ T8126] CPU: 3 UID: 0 PID: 8126 Comm: syz.4.728 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.680745][ T8126] Tainted: [L]=SOFTLOCKUP [ 95.680752][ T8126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.680763][ T8126] Call Trace: [ 95.680770][ T8126] [ 95.680777][ T8126] dump_stack_lvl+0x100/0x190 [ 95.680829][ T8126] should_fail_ex.cold+0x5/0xa [ 95.680856][ T8126] _copy_from_iter+0x1f4/0x1690 [ 95.680887][ T8126] ? __pfx__copy_from_iter+0x10/0x10 [ 95.680911][ T8126] ? sock_has_perm+0x25a/0x2f0 [ 95.680932][ T8126] ? __pfx_sock_has_perm+0x10/0x10 [ 95.680961][ T8126] hci_sock_sendmsg+0x4a1/0x26a0 [ 95.680989][ T8126] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 95.681021][ T8126] ? selinux_socket_sendmsg+0x198/0x2f0 [ 95.681048][ T8126] sock_write_iter+0x53a/0x5b0 [ 95.681074][ T8126] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 95.681095][ T8126] ? __pfx_sock_write_iter+0x10/0x10 [ 95.681123][ T8126] ? bpf_lsm_file_permission+0x9/0x10 [ 95.681150][ T8126] ? security_file_permission+0x76/0x210 [ 95.681177][ T8126] ? rw_verify_area+0xce/0x6d0 [ 95.681199][ T8126] vfs_write+0x6af/0x1050 [ 95.681222][ T8126] ? __pfx_sock_write_iter+0x10/0x10 [ 95.681246][ T8126] ? __pfx_vfs_write+0x10/0x10 [ 95.681266][ T8126] ? find_held_lock+0x2b/0x80 [ 95.681309][ T8126] ksys_write+0x1f8/0x250 [ 95.681331][ T8126] ? __pfx_ksys_write+0x10/0x10 [ 95.681360][ T8126] do_syscall_64+0x123/0x790 [ 95.681387][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.681406][ T8126] RIP: 0033:0x7f4c6c79e199 [ 95.681421][ T8126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.681439][ T8126] RSP: 002b:00007f4c6d666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.681457][ T8126] RAX: ffffffffffffffda RBX: 00007f4c6ca25fa0 RCX: 00007f4c6c79e199 [ 95.681470][ T8126] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 95.681504][ T8126] RBP: 00007f4c6d666090 R08: 0000000000000000 R09: 0000000000000000 [ 95.681515][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.681526][ T8126] R13: 00007f4c6ca26038 R14: 00007f4c6ca25fa0 R15: 00007ffec892b9d8 [ 95.681552][ T8126] [ 95.695217][ T8120] kvm: MONITOR instruction emulated as NOP! [ 95.870914][ T8131] smpboot: CPU 1 is now offline [ 95.959069][ T8139] binder: 8135:8139 ioctl 4018620d 0 returned -22 [ 95.963667][ T8139] syz.4.732 (8139): drop_caches: 2 [ 96.076498][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'. [ 96.153797][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 96.153812][ T43] audit: type=1400 audit(1791476455.327:688): avc: denied { ioctl } for pid=8142 comm="syz.0.735" path="net:[4026533113]" dev="nsfs" ino=4026533113 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 96.287672][ T8160] FAULT_INJECTION: forcing a failure. [ 96.287672][ T8160] name failslab, interval 1, probability 0, space 0, times 0 [ 96.287694][ T8160] CPU: 0 UID: 0 PID: 8160 Comm: syz.2.741 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.287710][ T8160] Tainted: [L]=SOFTLOCKUP [ 96.287715][ T8160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.287722][ T8160] Call Trace: [ 96.287726][ T8160] [ 96.287730][ T8160] dump_stack_lvl+0x100/0x190 [ 96.287758][ T8160] should_fail_ex.cold+0x5/0xa [ 96.287775][ T8160] should_failslab+0xc2/0x120 [ 96.287796][ T8160] __kmalloc_cache_noprof+0x91/0x6d0 [ 96.287808][ T8160] ? snd_ctl_open+0x14f/0x5a0 [ 96.287831][ T8160] snd_ctl_open+0x14f/0x5a0 [ 96.287846][ T8160] ? __pfx_snd_ctl_open+0x10/0x10 [ 96.287861][ T8160] snd_open+0x201/0x450 [ 96.287872][ T8160] ? __pfx_snd_open+0x10/0x10 [ 96.287883][ T8160] chrdev_open+0x234/0x6a0 [ 96.287899][ T8160] ? __pfx_chrdev_open+0x10/0x10 [ 96.287917][ T8160] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 96.287933][ T8160] do_dentry_open+0x6ab/0x14d0 [ 96.287947][ T8160] ? __pfx_chrdev_open+0x10/0x10 [ 96.287965][ T8160] vfs_open+0x82/0x3f0 [ 96.287984][ T8160] path_openat+0x19fa/0x2440 [ 96.288003][ T8160] ? __pfx_path_openat+0x10/0x10 [ 96.288022][ T8160] do_file_open+0x20e/0x430 [ 96.288039][ T8160] ? __pfx_do_file_open+0x10/0x10 [ 96.288048][ T6157] IPVS: starting estimator thread 0... [ 96.288064][ T8160] ? _raw_spin_unlock+0x28/0x50 [ 96.288080][ T8160] ? alloc_fd+0x471/0x7a0 [ 96.288099][ T8160] do_sys_openat2+0x10f/0x1e0 [ 96.288116][ T8160] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.288149][ T8160] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 96.288172][ T8160] __x64_sys_openat+0x12d/0x210 [ 96.288183][ T8160] ? __pfx___x64_sys_openat+0x10/0x10 [ 96.288200][ T8160] do_syscall_64+0x123/0x790 [ 96.288217][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.288229][ T8160] RIP: 0033:0x7f2776d5e9ce [ 96.288239][ T8160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.288250][ T8160] RSP: 002b:00007f2777b8bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.288261][ T8160] RAX: ffffffffffffffda RBX: 00007f2777b8c6c0 RCX: 00007f2776d5e9ce [ 96.288268][ T8160] RDX: 000000000004a103 RSI: 00007f2777b8bc00 RDI: ffffffffffffff9c [ 96.288275][ T8160] RBP: 00007f2777b8bc00 R08: 0000000000000000 R09: 0000000000000000 [ 96.288284][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 96.288294][ T8160] R13: 00007f2777026038 R14: 00007f2777025fa0 R15: 00007ffd5b85fbe8 [ 96.288316][ T8160] [ 96.328261][ T8165] kAFS: unable to lookup cell '(,c¾ûL' [ 96.375670][ T8163] IPVS: using max 43 ests per chain, 103200 per kthread [ 96.482380][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'. [ 96.507640][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.746'. [ 96.508483][ T8175] syzkaller0: entered promiscuous mode [ 96.508494][ T8175] syzkaller0: entered allmulticast mode [ 96.689883][ T8195] netlink: 'syz.2.751': attribute type 4 has an invalid length. [ 96.691480][ T8194] netlink: 'syz.2.751': attribute type 4 has an invalid length. [ 96.741075][ T8202] syzkaller0: entered promiscuous mode [ 96.741097][ T8202] syzkaller0: entered allmulticast mode [ 97.023305][ T8232] sctp: [Deprecated]: syz.1.761 (pid 8232) Use of int in max_burst socket option. [ 97.023305][ T8232] Use struct sctp_assoc_value instead [ 97.099827][ T43] audit: type=1400 audit(1791476456.277:689): avc: denied { accept } for pid=8237 comm="syz.1.764" lport=43312 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.100076][ T43] audit: type=1400 audit(1791476456.277:690): avc: denied { write } for pid=8237 comm="syz.1.764" path="socket:[24604]" dev="sockfs" ino=24604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 97.168612][ T8245] xt_IDLETIMER: timeout value is too big [ 97.205806][ T43] audit: type=1400 audit(1791476456.387:691): avc: denied { unmount } for pid=6041 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.264236][ T5728] Bluetooth: hci0: unexpected event for opcode 0x200b [ 97.297348][ T8247] bridge0: port 1('Û=>*0) entered disabled state [ 97.336663][ T8247] netlink: 'syz.4.768': attribute type 16 has an invalid length. [ 97.336683][ T8247] netlink: 'syz.4.768': attribute type 17 has an invalid length. [ 97.365232][ T8247] bridge0: port 1('Û=>*0) entered blocking state [ 97.365329][ T8247] bridge0: port 1('Û=>*0) entered forwarding state [ 97.412887][ T8247] vlan2: left promiscuous mode [ 97.412907][ T8247] bridge0: left promiscuous mode [ 97.413625][ T8247] bridge1: left promiscuous mode [ 97.413640][ T8247] bridge1: left allmulticast mode [ 97.423059][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.423106][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.428036][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 97.584565][ T8259] netlink: 100 bytes leftover after parsing attributes in process `syz.4.768'. [ 97.880514][ T43] audit: type=1400 audit(1791476457.057:692): avc: denied { accept } for pid=8268 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.099868][ T43] audit: type=1400 audit(1791476457.277:693): avc: denied { read } for pid=8279 comm="syz.0.776" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.099898][ T43] audit: type=1400 audit(1791476457.277:694): avc: denied { open } for pid=8279 comm="syz.0.776" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.100335][ T43] audit: type=1400 audit(1791476457.277:695): avc: denied { ioctl } for pid=8279 comm="syz.0.776" path="/dev/btrfs-control" dev="devtmpfs" ino=1339 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.174483][ T8282] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 98.208762][ T8282] bond3: entered promiscuous mode [ 98.209029][ T8282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.251776][ T8282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.252015][ T8282] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 98.252027][ T8282] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 98.267085][ T8282] bond3: (slave ip6gre2): making interface the new active one [ 98.267105][ T8282] ip6gre2: entered promiscuous mode [ 98.268026][ T8282] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 98.313918][ T43] audit: type=1400 audit(1791476457.487:696): avc: denied { mounton } for pid=8281 comm="syz.0.778" path="/166/file0" dev="tmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 98.326315][ T43] audit: type=1400 audit(1791476457.507:697): avc: denied { ioctl } for pid=8281 comm="syz.0.778" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 98.373113][ T8285] kvm [8283]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 98.426548][ T8288] netlink: 'syz.0.779': attribute type 2 has an invalid length. [ 98.492035][ T8296] nfs: Unknown parameter 'Õmountproto' [ 98.545999][ T8299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42256 sclass=netlink_route_socket pid=8299 comm=syz.4.782 [ 98.552689][ T8301] nfs: Unknown parameter 'Õmountproto' [ 98.817419][ T8310] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.820258][ T8310] 9pnet_virtio: no channels available for device syz [ 98.820814][ T8312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.786'. [ 98.824492][ T8312] overlayfs: failed to resolve './bus/file0': -13 [ 99.000736][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 99.067351][ T8324] netlink: 700 bytes leftover after parsing attributes in process `syz.2.788'. [ 99.068707][ T8324] nvme_fabrics: found same hostid 6d88dcc3-2ea4-4436-ae3f-45478795db77 but different hostnqn nq [ 99.160161][ T8328] vmclock PNP0103:00: vmclock magic fields invalid [ 99.160176][ T8328] vmclock PNP0103:00: probe with driver vmclock failed with error -22 [ 99.200574][ T8328] vmclock PNP0103:00: vmclock magic fields invalid [ 99.200595][ T8328] vmclock PNP0103:00: probe with driver vmclock failed with error -22 [ 99.214895][ T8328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.790'. [ 99.215099][ T8328] FAULT_INJECTION: forcing a failure. [ 99.215099][ T8328] name failslab, interval 1, probability 0, space 0, times 0 [ 99.215118][ T8328] CPU: 3 UID: 0 PID: 8328 Comm: syz.2.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.215132][ T8328] Tainted: [L]=SOFTLOCKUP [ 99.215136][ T8328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.215143][ T8328] Call Trace: [ 99.215146][ T8328] [ 99.215152][ T8328] dump_stack_lvl+0x100/0x190 [ 99.215183][ T8328] should_fail_ex.cold+0x5/0xa [ 99.215199][ T8328] should_failslab+0xc2/0x120 [ 99.215219][ T8328] kmem_cache_alloc_noprof+0x92/0x6a0 [ 99.215234][ T8328] ? do_getname+0x35/0x390 [ 99.215248][ T8328] do_getname+0x35/0x390 [ 99.215261][ T8328] do_sys_openat2+0xc7/0x1e0 [ 99.215278][ T8328] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.215296][ T8328] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.215319][ T8328] __x64_sys_openat+0x12d/0x210 [ 99.215330][ T8328] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.215345][ T8328] do_syscall_64+0x123/0x790 [ 99.215361][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.215372][ T8328] RIP: 0033:0x7f2776d5e9ce [ 99.215382][ T8328] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.215393][ T8328] RSP: 002b:00007f2777b8bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.215405][ T8328] RAX: ffffffffffffffda RBX: 00007f2777b8c6c0 RCX: 00007f2776d5e9ce [ 99.215431][ T8328] RDX: 0000000000000000 RSI: 00007f2777b8bc00 RDI: ffffffffffffff9c [ 99.215439][ T8328] RBP: 00007f2777b8bc00 R08: 0000000000000000 R09: 0000000000000000 [ 99.215446][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 99.215453][ T8328] R13: 00007f2777026038 R14: 00007f2777025fa0 R15: 00007ffd5b85fbe8 [ 99.215468][ T8328] [ 99.251775][ T8330] ftl_cs: FTL header not found. [ 99.275766][ T8334] bond0: entered promiscuous mode [ 99.275785][ T8334] bond_slave_0: entered promiscuous mode [ 99.275914][ T8334] bond_slave_1: entered promiscuous mode [ 99.321185][ T8330] block2mtd: mtd1: [/dev/zram0] erase_size = 4KiB [4096] [ 99.373097][ T8337] A link change request failed with some changes committed already. Interface 'Û=>*0 may have been left with an inconsistent configuration, please check. [ 99.406084][ T8339] FAULT_INJECTION: forcing a failure. [ 99.406084][ T8339] name failslab, interval 1, probability 0, space 0, times 0 [ 99.406107][ T8339] CPU: 3 UID: 0 PID: 8339 Comm: syz.0.794 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.406122][ T8339] Tainted: [L]=SOFTLOCKUP [ 99.406126][ T8339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.406138][ T8339] Call Trace: [ 99.406143][ T8339] [ 99.406147][ T8339] dump_stack_lvl+0x100/0x190 [ 99.406168][ T8339] should_fail_ex.cold+0x5/0xa [ 99.406184][ T8339] should_failslab+0xc2/0x120 [ 99.406202][ T8339] __kmalloc_cache_noprof+0x91/0x6d0 [ 99.406215][ T8339] ? __alloc_workqueue+0x155/0x1950 [ 99.406233][ T8339] __alloc_workqueue+0x155/0x1950 [ 99.406246][ T8339] ? __pfx_vsnprintf+0x10/0x10 [ 99.406259][ T8339] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 99.406272][ T8339] ? lockdep_hardirqs_on+0x7d/0x110 [ 99.406287][ T8339] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.406303][ T8339] alloc_workqueue_noprof+0xc7/0x130 [ 99.406317][ T8339] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 99.406335][ T8339] ? __pfx___debug_object_init+0x10/0x10 [ 99.406356][ T8339] nci_register_device+0x394/0xb80 [ 99.406369][ T8339] ? __pfx_nci_register_device+0x10/0x10 [ 99.406383][ T8339] ? lockdep_init_map_type+0x5c/0x250 [ 99.406399][ T8339] virtual_ncidev_open+0x141/0x220 [ 99.406411][ T8339] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 99.406423][ T8339] misc_open+0x26d/0x450 [ 99.406437][ T8339] ? __pfx_misc_open+0x10/0x10 [ 99.406451][ T8339] chrdev_open+0x234/0x6a0 [ 99.406467][ T8339] ? __pfx_chrdev_open+0x10/0x10 [ 99.406483][ T8339] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 99.406498][ T8339] do_dentry_open+0x6ab/0x14d0 [ 99.406511][ T8339] ? __pfx_chrdev_open+0x10/0x10 [ 99.406530][ T8339] vfs_open+0x82/0x3f0 [ 99.406548][ T8339] path_openat+0x19fa/0x2440 [ 99.406566][ T8339] ? __pfx_path_openat+0x10/0x10 [ 99.406586][ T8339] do_file_open+0x20e/0x430 [ 99.406602][ T8339] ? __pfx_do_file_open+0x10/0x10 [ 99.406628][ T8339] ? _raw_spin_unlock+0x28/0x50 [ 99.406640][ T8339] ? alloc_fd+0x471/0x7a0 [ 99.406660][ T8339] do_sys_openat2+0x10f/0x1e0 [ 99.406676][ T8339] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.406694][ T8339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.406713][ T8339] __x64_sys_openat+0x12d/0x210 [ 99.406724][ T8339] ? __pfx___x64_sys_openat+0x10/0x10 [ 99.406739][ T8339] do_syscall_64+0x123/0x790 [ 99.406755][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.406766][ T8339] RIP: 0033:0x7fc23259e199 [ 99.406776][ T8339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.406786][ T8339] RSP: 002b:00007fc2333ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.406798][ T8339] RAX: ffffffffffffffda RBX: 00007fc232825fa0 RCX: 00007fc23259e199 [ 99.406804][ T8339] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 99.406811][ T8339] RBP: 00007fc232635888 R08: 0000000000000000 R09: 0000000000000000 [ 99.406817][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.406824][ T8339] R13: 00007fc232826038 R14: 00007fc232825fa0 R15: 00007ffe6e8f5018 [ 99.406838][ T8339] [ 99.775534][ T65] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.935516][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 99.936012][ T65] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 99.936986][ T65] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 99.937000][ T65] usb 5-1: config 0 has no interface number 0 [ 99.937017][ T65] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.937035][ T65] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 99.937048][ T65] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.937061][ T65] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 99.937073][ T65] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.937094][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.939170][ T65] usb 5-1: config 0 descriptor?? [ 99.949445][ T8349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.798'. [ 99.950872][ T65] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.142471][ T8347] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 100.148672][ T35] usb 5-1: USB disconnect, device number 8 [ 100.155711][ T35] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 100.164992][ T8360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.166333][ T8360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.252814][ T5728] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 100.357692][ T8364] syz.4.805 (8364): drop_caches: 2 [ 100.966560][ T8388] syz.0.814 (8388): drop_caches: 2 [ 101.143074][ T8397] __nla_validate_parse: 1 callbacks suppressed [ 101.143093][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'. [ 101.188745][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 101.219259][ T8399] bond1: entered promiscuous mode [ 101.228957][ T8399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.243748][ T8399] bond1: (slave ipip0): refused to change device type [ 101.269109][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 101.269126][ T43] audit: type=1400 audit(1791476460.447:707): avc: denied { read } for pid=5439 comm="dhcpcd" name="n456" dev="tmpfs" ino=2714 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.269479][ T43] audit: type=1400 audit(1791476460.447:708): avc: denied { open } for pid=5439 comm="dhcpcd" path="/run/udev/data/n456" dev="tmpfs" ino=2714 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.269733][ T43] audit: type=1400 audit(1791476460.447:709): avc: denied { getattr } for pid=5439 comm="dhcpcd" path="/run/udev/data/n456" dev="tmpfs" ino=2714 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.343100][ T43] audit: type=1400 audit(1791476460.517:710): avc: denied { write } for pid=8404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.343234][ T43] audit: type=1400 audit(1791476460.517:711): avc: denied { create } for pid=8404 comm="dhcpcd-run-hook" name="resolv.conf.bond1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.343629][ T43] audit: type=1400 audit(1791476460.517:712): avc: denied { write } for pid=8404 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.bond1.link" dev="tmpfs" ino=2718 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.344068][ T43] audit: type=1400 audit(1791476460.517:713): avc: denied { append } for pid=8404 comm="dhcpcd-run-hook" name="resolv.conf.bond1.link" dev="tmpfs" ino=2718 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.387544][ T5874] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 101.411377][ T8413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.822'. [ 101.411685][ T8413] FAULT_INJECTION: forcing a failure. [ 101.411685][ T8413] name failslab, interval 1, probability 0, space 0, times 0 [ 101.411705][ T8413] CPU: 3 UID: 0 PID: 8413 Comm: syz.0.822 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.411722][ T8413] Tainted: [L]=SOFTLOCKUP [ 101.411726][ T8413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.411733][ T8413] Call Trace: [ 101.411737][ T8413] [ 101.411743][ T8413] dump_stack_lvl+0x100/0x190 [ 101.411771][ T8413] should_fail_ex.cold+0x5/0xa [ 101.411789][ T8413] should_failslab+0xc2/0x120 [ 101.411809][ T8413] kmem_cache_alloc_noprof+0x92/0x6a0 [ 101.411823][ T8413] ? __kernfs_new_node+0xd2/0xa10 [ 101.411840][ T8413] __kernfs_new_node+0xd2/0xa10 [ 101.411854][ T8413] ? __pfx___kernfs_new_node+0x10/0x10 [ 101.411868][ T8413] ? lock_acquire+0x1d1/0x380 [ 101.411881][ T8413] ? kernfs_root+0x23/0x2a0 [ 101.411891][ T8413] ? find_held_lock+0x2b/0x80 [ 101.411906][ T8413] ? kernfs_root+0xee/0x2a0 [ 101.411915][ T8413] ? kernfs_root+0xee/0x2a0 [ 101.411928][ T8413] kernfs_new_node+0x117/0x150 [ 101.411942][ T8413] __kernfs_create_file+0x53/0x350 [ 101.411958][ T8413] sysfs_add_file_mode_ns+0x207/0x3c0 [ 101.411978][ T8413] sysfs_merge_group+0x194/0x340 [ 101.411991][ T8413] ? __pfx_sysfs_merge_group+0x10/0x10 [ 101.412006][ T8413] ? bus_add_device+0x2e2/0x6c0 [ 101.412023][ T8413] ? __pfx_bus_add_device+0x10/0x10 [ 101.412037][ T8413] ? __pfx_dev_add_physical_location+0x10/0x10 [ 101.412053][ T8413] dpm_sysfs_add+0x237/0x280 [ 101.412066][ T8413] device_add+0x9f4/0x1970 [ 101.412079][ T8413] ? __pfx_device_add+0x10/0x10 [ 101.412091][ T8413] ? kfree_const+0x5a/0x70 [ 101.412103][ T8413] ? kfree+0x1e5/0x6d0 [ 101.412118][ T8413] device_create_groups_vargs+0x1f8/0x270 [ 101.412132][ T8413] device_create+0xed/0x130 [ 101.412146][ T8413] ? __pfx_device_create+0x10/0x10 [ 101.412157][ T8413] ? lockdep_init_map_type+0x5c/0x250 [ 101.412171][ T8413] ? timer_init_key+0x150/0x310 [ 101.412187][ T8413] ? ieee80211_roc_setup+0x136/0x270 [ 101.412203][ T8413] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 101.412220][ T8413] mac80211_hwsim_new_radio+0x37c/0x6510 [ 101.412232][ T8413] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.412255][ T8413] ? rcu_is_watching+0x13/0xc0 [ 101.412272][ T8413] ? do_trace_netlink_extack+0x72/0x1e0 [ 101.412286][ T8413] ? __nla_validate_parse+0x1e7/0x28b0 [ 101.412301][ T8413] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 101.412317][ T8413] hwsim_new_radio_nl+0xc6b/0x13f0 [ 101.412330][ T8413] ? trace_kmalloc+0xeb/0x110 [ 101.412347][ T8413] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 101.412362][ T8413] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 101.412374][ T8413] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 101.412388][ T8413] genl_family_rcv_msg_doit+0x214/0x300 [ 101.412400][ T8413] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 101.412416][ T8413] ? bpf_lsm_capable+0x9/0x10 [ 101.412426][ T8413] ? security_capable+0x80/0x260 [ 101.412439][ T8413] ? ns_capable+0xd2/0xf0 [ 101.412451][ T8413] genl_rcv_msg+0x560/0x800 [ 101.412464][ T8413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.412474][ T8413] ? __lock_acquire+0x5c0/0x1f40 [ 101.412486][ T8413] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 101.412498][ T8413] ? __lock_acquire+0x5c0/0x1f40 [ 101.412514][ T8413] netlink_rcv_skb+0x159/0x420 [ 101.412530][ T8413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.412541][ T8413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.412563][ T8413] ? netlink_deliver_tap+0x1ae/0xcc0 [ 101.412580][ T8413] genl_rcv+0x28/0x40 [ 101.412595][ T8413] netlink_unicast+0x585/0x850 [ 101.412613][ T8413] ? __pfx_netlink_unicast+0x10/0x10 [ 101.412633][ T8413] netlink_sendmsg+0x8b0/0xda0 [ 101.412651][ T8413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.412668][ T8413] ? selinux_socket_sendmsg+0x198/0x2f0 [ 101.412685][ T8413] ____sys_sendmsg+0xa4d/0xbe0 [ 101.412699][ T8413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.412716][ T8413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.412735][ T8413] ___sys_sendmsg+0x190/0x1e0 [ 101.412750][ T8413] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.412764][ T8413] ? futex_wait+0x11e/0x370 [ 101.412781][ T8413] ? find_held_lock+0x2b/0x80 [ 101.412807][ T8413] __sys_sendmsg+0x160/0x210 [ 101.412824][ T8413] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.412849][ T8413] do_syscall_64+0x123/0x790 [ 101.412865][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.412877][ T8413] RIP: 0033:0x7fc23259e199 [ 101.412886][ T8413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.412897][ T8413] RSP: 002b:00007fc2333ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.412909][ T8413] RAX: ffffffffffffffda RBX: 00007fc232825fa0 RCX: 00007fc23259e199 [ 101.412916][ T8413] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 101.412922][ T8413] RBP: 00007fc232635888 R08: 0000000000000000 R09: 0000000000000000 [ 101.412929][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.412936][ T8413] R13: 00007fc232826038 R14: 00007fc232825fa0 R15: 00007ffe6e8f5018 [ 101.412952][ T8413] [ 101.425994][ T8413] IPVS: set_ctl: invalid protocol: 126 100.1.1.1:20004 [ 101.439286][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 101.474451][ T43] audit: type=1400 audit(1791476460.647:714): avc: denied { write } for pid=8416 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.474654][ T43] audit: type=1400 audit(1791476460.647:715): avc: denied { unlink } for pid=8416 comm="rm" name="resolv.conf.bond1.link" dev="tmpfs" ino=2718 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.535626][ T5874] usb 7-1: Using ep0 maxpacket: 8 [ 101.539298][ T5874] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 101.546994][ T8419] ptrace attach of "/syz-executor exec"[5726] was attempted by ""[8419] [ 101.551939][ T5874] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.551957][ T5874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 101.551988][ T5874] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.552018][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.629947][ T43] audit: type=1400 audit(1791476460.807:716): avc: denied { map } for pid=8424 comm="syz.4.826" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.673798][ T5874] hub 7-1:1.0: bad descriptor, ignoring hub [ 101.673813][ T5874] hub 7-1:1.0: probe with driver hub failed with error -5 [ 101.674245][ T5874] cdc_wdm 7-1:1.0: skipping garbage [ 101.674252][ T5874] cdc_wdm 7-1:1.0: skipping garbage [ 101.682016][ T5874] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 101.682032][ T5874] cdc_wdm 7-1:1.0: Unknown control protocol [ 101.805940][ T8438] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2558430984 (81869791488 ns) > initial count (19335048768 ns). Using initial count to start timer. [ 101.959262][ T8445] tipc: Started in network mode [ 101.959279][ T8445] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 101.959303][ T8445] tipc: Enabling of bearer rejected, failed to enable media [ 101.960445][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.832'. [ 102.229464][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 102.229606][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 102.229964][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 102.229980][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 102.230068][ T65] usb 7-1: USB disconnect, device number 6 [ 102.230190][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 102.230205][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 102.230220][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 102.267090][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 102.414596][ T8460] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1279413326.1296518495.84), cmd(6) [ 102.459001][ T8396] cgroup: Unknown subsys name 'uid<00000000000000000000' [ 103.147339][ T8493] team0: Device xfrm0 is of different type [ 103.150200][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.276789][ T8504] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 103.295221][ T8507] WARNING! power/level is deprecated; use power/control instead [ 103.504800][ T8517] ------------[ cut here ]------------ [ 103.504809][ T8517] 1 [ 103.504813][ T8517] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x2137/0x3300, CPU#3: syz.4.855/8517 [ 103.511018][ T8517] Modules linked in: [ 103.513551][ T8517] CPU: 3 UID: 0 PID: 8517 Comm: syz.4.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.517118][ T8517] Tainted: [L]=SOFTLOCKUP [ 103.518496][ T8517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.521629][ T8517] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300 [ 103.523692][ T8517] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d 0f a4 ba 0f 00 0f 85 9d e2 ff ff c6 05 02 a4 ba 0f 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7 [ 103.529833][ T8517] RSP: 0018:ffffc900050bf728 EFLAGS: 00010246 [ 103.531755][ T8517] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 103.534358][ T8517] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 103.536901][ T8517] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000009 [ 103.539418][ T8517] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 103.541887][ T8517] R13: 1ffff92000a17f41 R14: 0000000000000000 R15: 1ffff92000a17eff [ 103.544406][ T8517] FS: 00007f4c6d6666c0(0000) GS:ffff8880d4c47000(0000) knlGS:0000000000000000 [ 103.547331][ T8517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.549491][ T8517] CR2: 00007f4c6d624d58 CR3: 000000002fd9b000 CR4: 0000000000352ef0 [ 103.552029][ T8517] Call Trace: [ 103.553098][ T8517] [ 103.554050][ T8517] ? lock_acquire+0x1d1/0x380 [ 103.555679][ T8517] ? is_bpf_text_address+0x25/0x1a0 [ 103.557326][ T8517] ? find_held_lock+0x2b/0x80 [ 103.558865][ T8517] ? is_bpf_text_address+0x8a/0x1a0 [ 103.560509][ T8517] ? is_bpf_text_address+0x8a/0x1a0 [ 103.562191][ T8517] ? bpf_ksym_find+0x128/0x1c0 [ 103.563696][ T8517] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 103.565750][ T8517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 103.567768][ T8517] ? kernel_text_address+0x8d/0x100 [ 103.569487][ T8517] ? unwind_get_return_address+0x59/0xa0 [ 103.571335][ T8517] ? arch_stack_walk+0xa6/0xf0 [ 103.572921][ T8517] ? tomoyo_path_number_perm+0x46d/0x580 [ 103.574707][ T8517] ? stack_depot_save_flags+0x27/0x9f0 [ 103.576495][ T8517] ? __lock_acquire+0x5c0/0x1f40 [ 103.578079][ T8517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.579980][ T8517] ? policy_nodemask+0xed/0x4f0 [ 103.581553][ T8517] alloc_pages_mpol+0x201/0x550 [ 103.583084][ T8517] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 103.584798][ T8517] ? avc_has_extended_perms+0x201/0x1080 [ 103.586685][ T8517] ? find_held_lock+0x2b/0x80 [ 103.588179][ T8517] ___kmalloc_large_node+0xe8/0x130 [ 103.589892][ T8517] __kmalloc_large_node_noprof+0x1c/0x70 [ 103.591725][ T8517] __kmalloc_noprof+0x5a8/0x840 [ 103.593281][ T8517] ? __lock_acquire+0x5c0/0x1f40 [ 103.594845][ T8517] ? drm_syncobj_array_find+0x34/0x3a0 [ 103.596584][ T8517] drm_syncobj_array_find+0x34/0x3a0 [ 103.598229][ T8517] drm_syncobj_signal_ioctl+0x20b/0x460 [ 103.599927][ T8517] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 103.601802][ T8517] ? drm_dev_exit+0x41/0x60 [ 103.603197][ T8517] ? drm_dev_exit+0x41/0x60 [ 103.604599][ T8517] drm_ioctl_kernel+0x1f3/0x3e0 [ 103.606246][ T8517] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 103.608180][ T8517] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 103.609889][ T8517] drm_ioctl+0x5e6/0xc60 [ 103.611251][ T8517] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 103.613199][ T8517] ? __pfx_drm_ioctl+0x10/0x10 [ 103.614744][ T8517] ? __fget_files+0x34/0x3d0 [ 103.616299][ T8517] ? selinux_file_ioctl+0x13b/0x290 [ 103.617948][ T8517] ? selinux_file_ioctl+0xb6/0x290 [ 103.619624][ T8517] ? __pfx_drm_ioctl+0x10/0x10 [ 103.621154][ T8517] __x64_sys_ioctl+0x18e/0x210 [ 103.622685][ T8517] do_syscall_64+0x123/0x790 [ 103.624280][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.626209][ T8517] RIP: 0033:0x7f4c6c79e199 [ 103.627598][ T8517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.633467][ T8517] RSP: 002b:00007f4c6d666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.636135][ T8517] RAX: ffffffffffffffda RBX: 00007f4c6ca25fa0 RCX: 00007f4c6c79e199 [ 103.638532][ T8517] RDX: 0000200000000080 RSI: 00000000c01064c5 RDI: 0000000000000003 [ 103.641005][ T8517] RBP: 00007f4c6c835888 R08: 0000000000000000 R09: 0000000000000000 [ 103.643470][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.646034][ T8517] R13: 00007f4c6ca26038 R14: 00007f4c6ca25fa0 R15: 00007ffec892b9d8 [ 103.648477][ T8517] [ 103.649476][ T8517] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.651747][ T8517] CPU: 3 UID: 0 PID: 8517 Comm: syz.4.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.655071][ T8517] Tainted: [L]=SOFTLOCKUP [ 103.656457][ T8517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.659564][ T8517] Call Trace: [ 103.660632][ T8517] [ 103.661597][ T8517] dump_stack_lvl+0x100/0x190 [ 103.663107][ T8517] vpanic+0x553/0x970 [ 103.664371][ T8517] ? __pfx_vpanic+0x10/0x10 [ 103.665819][ T8517] panic+0xd1/0xe0 [ 103.667018][ T8517] ? __pfx_panic+0x10/0x10 [ 103.668444][ T8517] check_panic_on_warn.cold+0x19/0x34 [ 103.670131][ T8517] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 103.672054][ T8517] __warn.cold+0x191/0x318 [ 103.673464][ T8517] __report_bug+0x30f/0x440 [ 103.674915][ T8517] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 103.676846][ T8517] ? __pfx___report_bug+0x10/0x10 [ 103.678448][ T8517] ? __lock_acquire+0x5c0/0x1f40 [ 103.680009][ T8517] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 103.681992][ T8517] report_bug+0xb3/0x220 [ 103.683334][ T8517] ? __alloc_frozen_pages_noprof+0x2137/0x3300 [ 103.685310][ T8517] handle_bug+0x16a/0x2a0 [ 103.686704][ T8517] exc_invalid_op+0x17/0x50 [ 103.688157][ T8517] asm_exc_invalid_op+0x1a/0x20 [ 103.689708][ T8517] RIP: 0010:__alloc_frozen_pages_noprof+0x2137/0x3300 [ 103.691824][ T8517] Code: 13 00 00 39 84 24 98 00 00 00 0f 85 4a fa ff ff e9 91 f6 ff ff 80 3d 0f a4 ba 0f 00 0f 85 9d e2 ff ff c6 05 02 a4 ba 0f 01 90 <0f> 0b 90 e9 8d e2 ff ff 31 c0 e9 5f ec ff ff 48 8b 7c 24 08 48 c7 [ 103.697815][ T8517] RSP: 0018:ffffc900050bf728 EFLAGS: 00010246 [ 103.699715][ T8517] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 103.702207][ T8517] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 103.704666][ T8517] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000009 [ 103.707170][ T8517] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 103.709638][ T8517] R13: 1ffff92000a17f41 R14: 0000000000000000 R15: 1ffff92000a17eff [ 103.712127][ T8517] ? lock_acquire+0x1d1/0x380 [ 103.713623][ T8517] ? is_bpf_text_address+0x25/0x1a0 [ 103.715317][ T8517] ? find_held_lock+0x2b/0x80 [ 103.716918][ T8517] ? is_bpf_text_address+0x8a/0x1a0 [ 103.718645][ T8517] ? is_bpf_text_address+0x8a/0x1a0 [ 103.720433][ T8517] ? bpf_ksym_find+0x128/0x1c0 [ 103.722017][ T8517] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 103.724037][ T8517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 103.726052][ T8517] ? kernel_text_address+0x8d/0x100 [ 103.727724][ T8517] ? unwind_get_return_address+0x59/0xa0 [ 103.729548][ T8517] ? arch_stack_walk+0xa6/0xf0 [ 103.731104][ T8517] ? tomoyo_path_number_perm+0x46d/0x580 [ 103.732921][ T8517] ? stack_depot_save_flags+0x27/0x9f0 [ 103.734710][ T8517] ? __lock_acquire+0x5c0/0x1f40 [ 103.736307][ T8517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.738236][ T8517] ? policy_nodemask+0xed/0x4f0 [ 103.739827][ T8517] alloc_pages_mpol+0x201/0x550 [ 103.741571][ T8517] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 103.743283][ T8517] ? avc_has_extended_perms+0x201/0x1080 [ 103.745103][ T8517] ? find_held_lock+0x2b/0x80 [ 103.746632][ T8517] ___kmalloc_large_node+0xe8/0x130 [ 103.748344][ T8517] __kmalloc_large_node_noprof+0x1c/0x70 [ 103.750172][ T8517] __kmalloc_noprof+0x5a8/0x840 [ 103.751728][ T8517] ? __lock_acquire+0x5c0/0x1f40 [ 103.753332][ T8517] ? drm_syncobj_array_find+0x34/0x3a0 [ 103.755110][ T8517] drm_syncobj_array_find+0x34/0x3a0 [ 103.756933][ T8517] drm_syncobj_signal_ioctl+0x20b/0x460 [ 103.758736][ T8517] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 103.761036][ T8517] ? drm_dev_exit+0x41/0x60 [ 103.762897][ T8517] ? drm_dev_exit+0x41/0x60 [ 103.764740][ T8517] drm_ioctl_kernel+0x1f3/0x3e0 [ 103.766745][ T8517] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 103.769238][ T8517] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 103.771470][ T8517] drm_ioctl+0x5e6/0xc60 [ 103.773256][ T8517] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 103.775836][ T8517] ? __pfx_drm_ioctl+0x10/0x10 [ 103.777875][ T8517] ? __fget_files+0x34/0x3d0 [ 103.779821][ T8517] ? selinux_file_ioctl+0x13b/0x290 [ 103.782027][ T8517] ? selinux_file_ioctl+0xb6/0x290 [ 103.784154][ T8517] ? __pfx_drm_ioctl+0x10/0x10 [ 103.786198][ T8517] __x64_sys_ioctl+0x18e/0x210 [ 103.788186][ T8517] do_syscall_64+0x123/0x790 [ 103.790133][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.792574][ T8517] RIP: 0033:0x7f4c6c79e199 [ 103.794428][ T8517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.802192][ T8517] RSP: 002b:00007f4c6d666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.805700][ T8517] RAX: ffffffffffffffda RBX: 00007f4c6ca25fa0 RCX: 00007f4c6c79e199 [ 103.808963][ T8517] RDX: 0000200000000080 RSI: 00000000c01064c5 RDI: 0000000000000003 [ 103.811923][ T8517] RBP: 00007f4c6c835888 R08: 0000000000000000 R09: 0000000000000000 [ 103.814816][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.817584][ T8517] R13: 00007f4c6ca26038 R14: 00007f4c6ca25fa0 R15: 00007ffec892b9d8 [ 103.820060][ T8517] [ 103.821705][ T8517] Kernel Offset: disabled [ 103.823336][ T8517] Rebooting in 86400 seconds..