last executing test programs: 3.695542705s ago: executing program 1 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76696e65459beb1fb664f6ce6c0c7274696f7874656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000000)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0xc, 0x0, 0x0, {{0xc}, {0x4, 0x3f}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.609398279s ago: executing program 1 (id=693): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000180)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88197c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r2, &(0x7f0000000980)="88a9131cf90d056c26f9fbb6850615984a137e32bc6dbea657f67083867c1dd810c17b510db0c6f5b5fbe4847f462ab505face3dfa1d5efaeb182e3a51eb551e26185e1510157f0c1fc6551d10c0b080cf7d0ef531db825f5ff6ab93249c1e0c2f228a0a30e649a90eaefcc106a7b49b31365d", 0x73) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x60000526) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) close(0x3) setreuid(0xee01, 0xee00) socket$inet_udp(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000280)='L', 0x1) mount$pvfs2(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7375620000000000000002282a2c00"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) fallocate(r1, 0x11, 0x600, 0x7c000) 2.759966336s ago: executing program 0 (id=715): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x15, 0x201, 0x0, 0x5, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x8040894) 2.680501783s ago: executing program 0 (id=717): r0 = socket(0x10, 0x803, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x005', 0x18, 0x0, 0xff, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xe}, 0x1, 0x0, 0x0, 0x140480c4}, 0x40012) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, r7, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x5d144}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) 2.669388019s ago: executing program 0 (id=719): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) write$tun(0xffffffffffffffff, 0x0, 0x340a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) close(0x3) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x2f) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7c, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010425174ce5ad60005a2300533a92fb62f5970000000000000000000000000000100000000000af6c427e4c3a4346fb1d370bbdae9b4f68bfeb8550adfc484bfabaea5da5de2038293f6985c7ac415d74751778dd3364b64ea6b05a3727605730f7b49284c222ca538a8419f622d5dff767", @ANYRESDEC=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000cee0202001a000000", 0x33a) r7 = socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000080)=""/121, 0x79}], 0x1, 0x5, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6ef22ada003c3a01fc010000000000000000000000000001fe8000000000d414ee880013000000aa03009078010000006240a61900402f00ff010000000000000000000000000001000000000000000000000000000000002b2888be6783937f22d39b2838574e237b5832702890f908171daab4f977d7"], 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r8, 0x11, 0x0, @void}, 0x36) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), 0x4) 2.470482681s ago: executing program 0 (id=721): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000280)=0xffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000100feffffffffdb7525017c0000040042800c00018006000600800a00000c0002800800178004"], 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x800c000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="799385f7", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf25790000000400f4000400f4000400f4000400f4000400f400"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 2.409645513s ago: executing program 0 (id=722): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x20002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r1, &(0x7f00000008c0)}, 0x20) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000280)={0xe000003, 0xf, &(0x7f0000000080)=[0x138d, 0x400b, 0x2a17438d, 0x89a1, 0x0, 0xfffffffb, 0xa, 0x3, 0x26, 0x5, 0x6, 0x0, 0x6, 0x8811, 0x10], 0x7f, 0x4000007}) r3 = socket$netlink(0x10, 0x3, 0x3d69f96ef8e8d6bf) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000080)={0x1f, @none}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x13fd, &(0x7f00000002c0)={@remote, @broadcast, @val={@void, {0x8100, 0x6}}, {@mpls_uc={0x8847, {[{0x9}, {0x4}, {0x0, 0x0, 0x1}, {0xffff}, {0x8, 0x0, 0x1}], @ipv6=@icmpv6={0x8, 0x6, "2ed6a6", 0x13af, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x89, 0x0, '\x00', [@pad1]}, @dstopts={0x33, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @mcast1}, @pad1, @hao={0xc9, 0x10, @loopback}]}, @hopopts={0xff}, @srh={0x3b, 0xe, 0x4, 0x7, 0x5, 0x28, 0x2, [@remote, @loopback, @rand_addr=' \x01\x00', @remote, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}]}], @ndisc_ns={0x87, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x18}, {0x18, 0x1e, "d3035e5580d97e88f6ed05621c4661006577d009cf64e6f5fbb2d188610b0b015db9c4258868072875c347cfa93e83ae49e45a34eac1b4095a1c6e2af8869b4e150f773e0d83c489697d8fd2b402c53872646db479f8d756cf805c8756beec3a0603761c244108f0cc07382175413ef493b3da174ac52cefea1382042c785ee6270057237c2c821b7f9c3ceb25d22cbaec9797d218b202c01062b0a07fe2d845c63d237792e1641fb3a48c1c1914d5fa197c07e28434a2a51ce4b09fd6854a295d839af7a041bce48ebb1ade69a802bebf438a40fcf0b52d715591ea67aa47eb7290f9aebc217b4d456fd93638ea"}, {0x1, 0x1f, "3498c160c41ba25b7022247e355b8b8d124a7e2d64eccfe17481535d72744e5528fe6d62203f885abc5b0607cc073b6d808426c195c898e54446ffc90db724b5d7cadb70db91866161e9e29dd8f4b53fbf992a90ab14e57fa7f054ab8293b0cf6e88f179951c01b27c39775878ac6b8a11e88ff165f298a6acf6458c1827de689b291e0b3ddf9205bb246ed4591170c03656a24230fb4862f7b6028448679f5b8bf6770e04e99e81944edbf6e80902d4832cf15b0d6f430e4c17d0eb52dedfaa42f97339e19adfbe123d501fb6a553216bc762784c164d156ec7ef1baa387c4a70875cb33d0dc4d44d4661c8ce6e4371a39e1587f6aa023e61"}, {0x19, 0x200, "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"}, {0x1, 0x18, "383255e93f61121ee0cb3f639efd987bc80a1eaba1f4da9787636dd7d0a90caa53184387c7d83e786c43267e1d8df39bb190da660da9cdcea6b2c28308aa4ebc94ccb6ee91c4447cd49675b0278cfca661291d175f2c33391968c9843245e999728305be476462d76ea0b21bd60a5f1be9ffce367bae6ab58c718e3252706ea41e8661031319bb5073033958189de830185e1ff2d306007f5b9aaf09afeb2bd2ff78f590d9b3d9fbcd3445fef7366d5857fee707d43f4530bda88a33e388a057695c"}]}}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.408977587s ago: executing program 0 (id=723): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0x4000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x9, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)=""/4088, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000300)=""/24, 0x18}], 0x4}, 0x8}], 0x2acf9e948481fa1, 0x180, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x505e8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xfffffffa}]}, 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="2e00000011008b10000f80ee59acbc04130800480f0000005ef5c62900421803001825800000000000000280000c00", 0x2f}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x52, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x9, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "f704def4d0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x4, 0x4, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x30, 0xf4, 0x7e, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x81, 0x1, 0xb2}}}}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0xc, &(0x7f0000000340)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x1, 0x5}]}, 0x2, [{0x0, 0x0}, {0x38, &(0x7f0000000740)=@string={0x38, 0x3, "0c71c0329b8bbddaa491344b6345c03d24b3eb014b2003cf9ceec0d4b77b64a61a25ff1b864bcc57d12607d7e7d9453f343b81718a58"}}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 1.037425142s ago: executing program 2 (id=730): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x4, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) 979.10593ms ago: executing program 2 (id=731): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bed000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00001a1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bed000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00001a1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x68}) (async) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x68}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000041c0)=[{0x7, 0x1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/144, 0x90}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/72, 0x48}], &(0x7f0000000580)=[0x7fffffff, 0xa, 0x2, 0x3]}, {0x3, 0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/21, 0x15}, {&(0x7f0000000640)=""/195, 0xc3}], &(0x7f0000000780)=[0x0, 0x8, 0xfffffffffffffff9, 0x8, 0x85ff, 0x3]}, {0xa, 0x1, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000007c0)=""/46, 0x2e}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/137, 0x89}, {&(0x7f0000000900)=""/153, 0x99}, {&(0x7f00000009c0)=""/46, 0x2e}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/180, 0xb4}, {&(0x7f0000001ac0)=""/48, 0x30}, {&(0x7f0000001b00)=""/28, 0x1c}, {&(0x7f0000001b40)=""/80, 0x50}], &(0x7f0000001c80)=[0x3, 0x6]}, {0x3, 0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/255, 0xff}, {&(0x7f0000002dc0)=""/116, 0x74}], &(0x7f0000002e80)=[0x5, 0x1, 0x4]}, {0x5, 0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002ec0)=""/93, 0x5d}, {&(0x7f0000002f40)=""/214, 0xd6}, {&(0x7f0000003040)=""/44, 0x2c}, {&(0x7f0000003080)=""/23, 0x17}, {&(0x7f00000030c0)=""/4096, 0x1000}], &(0x7f0000004140)=[0x800, 0x1, 0x8001, 0x0, 0x6, 0xdd7, 0xeb56, 0x2, 0x8000, 0x8]}], 0x5) r1 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000004440)={'ip6tnl0\x00', &(0x7f00000043c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x5, 0x200, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x44}, 0x1, 0x700, 0x8, 0x6}}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_ublk_setup_io_uring(0x5880, &(0x7f000001a240)={0x0, 0xd7f4, 0x8, 0x1, 0x24c}, &(0x7f000001a2c0), &(0x7f000001a300), &(0x7f000001a340)) (async) r4 = syz_ublk_setup_io_uring(0x5880, &(0x7f000001a240)={0x0, 0xd7f4, 0x8, 0x1, 0x24c}, &(0x7f000001a2c0), &(0x7f000001a300), &(0x7f000001a340)) io_uring_setup(0x112c, &(0x7f000001a380)={0x0, 0x979e, 0x10, 0x3, 0x202, 0x0, r4}) (async) io_uring_setup(0x112c, &(0x7f000001a380)={0x0, 0x979e, 0x10, 0x3, 0x202, 0x0, r4}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000004500)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000004540)={0x0, r0, 0x1}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004580)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000045c0), 0x200, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x13e) write$cgroup_int(r10, 0x0, 0x0) (async) write$cgroup_int(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000046c0)={0xb, 0x14, &(0x7f0000004280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x39c}, [@generic={0x7, 0x4, 0x2, 0xf, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @jmp={0x5, 0x1, 0x8, 0x5, 0xb, 0x18, 0x8}]}, &(0x7f0000004340)='syzkaller\x00', 0x8, 0x1b, &(0x7f0000004380)=""/27, 0x40f00, 0x45, '\x00', r2, @fallback=0x11, r3, 0x8, &(0x7f0000004480)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000044c0)={0x5, 0x4, 0xb, 0xfffffff7}, 0x10, r5, r6, 0x5, &(0x7f0000004600)=[r7, r8, r9, r10], &(0x7f0000004640)=[{0x0, 0x5, 0xa, 0x6}, {0x3, 0x5, 0xe, 0x6}, {0x3, 0x4, 0x0, 0xc}, {0x3, 0x3, 0x2, 0xa}, {0x4, 0x5, 0x10, 0x2}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 889.0709ms ago: executing program 2 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, 0x0, 0x0, 0x19, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000021c0), &(0x7f00000022c0)=""/136}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0x8000000, 0xf000, 0xc, 0x2, 0x8, 0x0, 0x40, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0xfb, 0x9, 0x0, 0x2, 0x7, 0x7, 0x0, 0xff}, {0x6000, 0x3000, 0xc, 0x0, 0x7, 0x9, 0x40, 0x0, 0x3, 0x9, 0x0, 0xfc}, {0xeeef0000, 0xd000, 0x0, 0xff, 0x0, 0xfe, 0xa, 0x0, 0xfe, 0x3, 0x4}, {0xdddd0000, 0xf000, 0x4, 0x0, 0xff, 0x4, 0x6, 0xb, 0x0, 0x3c}, {0xeeee8000, 0x4000, 0x0, 0x3, 0x5, 0x2, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0xdddd1000, 0x0, 0x2, 0xff, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, {0x80a0000, 0x3000, 0xe, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x96}, {0x1, 0x4}, {0x80a0000, 0xff}, 0x9dfeffdb, 0x0, 0xffffffff, 0x600, 0x1, 0x5800, 0x0, [0x4000000000013, 0x0, 0x1]}) r12 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r8, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r12, 0x20, &(0x7f0000000240)="fb4149dd053be3ac2cc4a22332a77b23b8898600087bb16c94a6ab80313804d92f00000000010000045a96383369d226270080ff000000000000000000a000", 0x0, 0xffa4) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r8, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0xa, 0x3, 0x0, '\x00', 0x3}) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x86004, &(0x7f00000000c0)={'trans=virtio,', {[{@aname={'aname', 0x3d, ')@)'}}]}}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 727.691778ms ago: executing program 2 (id=733): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x422000, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CDROMEJECT(r1, 0x5309) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000100)={@msf={0x9, 0x3e, 0x98}, 0x0, 0x5}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd66f2a2c365fc7e8, 0x2a) r3 = openat$incfs(r2, &(0x7f0000000180)='.pending_reads\x00', 0x2caa00, 0xc4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) ioctl$CDROM_DEBUG(r3, 0x5330, 0x1) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x1f}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x1291, 0x78, &(0x7f00000003c0)=""/120, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x4, 0x4d}, 0x10, 0x2e5de, r3, 0x1, &(0x7f0000000480)=[0xffffffffffffffff, r1, r1, r1], &(0x7f00000004c0)=[{0x1, 0x4, 0xe, 0x8}], 0x10, 0x4}, 0x94) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f00000005c0)) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f0000000600)) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000ac0)={&(0x7f0000000680)={{@hyper, 0x4}, {@my=0x1, 0x3}, 0x400, "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"}, 0x418, 0xca}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r3) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000b40)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b80)={0x7ff, 0x1, 0x2, 0x5, 0x0, [0x5, 0x200, 0x5, 0x9]}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000c00)={0x0, 0x8, 0x6, &(0x7f0000000bc0)={0xa, "7b4ce2559d33686dc10be1ccb74b9aad4370f0adbae79a4537a6d70651c4f91e28"}}) io_uring_setup(0x14be, &(0x7f0000000c40)={0x0, 0xb08f, 0x20, 0x2, 0x130}) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000cc0)={0xb0, "1e2cecca73197081994a0eecde72ceefb2a1f5c5aaac976e89f9fe9ffd970d8186bbc60593f495ac3eae6bb40fa8f74bb2e4f795e2a042ae0c4690ffe2bce164d88deddc554acfdc621488020d61e911716fbc12f83d434bbd984bb4190ab456ba8ce17fe60a72e2ae76e4d9676fc0a50fb5a700900ba2992ad9a6c98f45a69e0d2d62aa82ba9d4caded3648b73f2a7e7cf05c25a6f7227eec637c8bbfcd0c6a4fef36f596aee424e62d09e401a408b4"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000d80), 0x400400, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000dc0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000e00)=0x2c) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x4000010, r0, 0xd4d65000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r3}, &(0x7f0000000e40), &(0x7f0000000e80)=r3}, 0x20) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000f00)=r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x111002, 0x0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) fsetxattr(r6, &(0x7f0000000f80)=@known='user.incfs.size\x00', &(0x7f0000000fc0)='/dev/hpet\x00', 0xa, 0x2) 725.865705ms ago: executing program 2 (id=734): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd0c, 0x10, &(0x7f0000000000), 0x76}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x52) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}]}, 0x1c}, 0x1, 0x60}, 0x4040000) getdents(r0, &(0x7f0000000200)=""/242, 0xf2) (async) getdents(r0, &(0x7f0000000200)=""/242, 0xf2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$drirender128(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async) r4 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) 600.232772ms ago: executing program 2 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x345, 0x0, 0x80000000}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRESHEX=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000280)='2', 0x1}], 0x1) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg$unix(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) 598.387035ms ago: executing program 3 (id=736): r0 = socket$igmp6(0xa, 0x3, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xeb}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) sendmsg$inet6(r0, &(0x7f0000001840)={&(0x7f0000001580)={0xa, 0x2, 0xfffffffa, @empty, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x33}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x30}, 0x4000010) 586.548944ms ago: executing program 3 (id=737): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x140a, 0x80d, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 290.482468ms ago: executing program 3 (id=738): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) (async) ioctl$TCFLSH(r1, 0x800455ca, 0x9) (async, rerun: 32) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) (rerun: 32) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x2, 0x0, 0x8}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001400)) (async) r5 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f0000000100)='\x00', 0x1) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async, rerun: 32) syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/cgroup\x00') writev(r3, &(0x7f0000000640)=[{&(0x7f00000001c0)="2e31b69c9bd4beb2ce56518bf0aea548722f050000000000000aa2b987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea34545d81cc4ec7f661dc11ad699fb96016f4339f32f77d28943e964fef03d540661f0c83a711cade4739a56dca8c1e4626fea8cff8ffa7b50e8b9687641d94abfa57d002d8c806968ae2003255bbc8e3c9cbf118783939ebd65092ab73065576062acb54a858279a342e4b6c1ebb492bbd65a2146d63c764245326343b7bac0c45fdfff16cb0690c5d3c3304e6afe4ae555123f4d8b5a74cb06", 0xd8}], 0x1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="040046000a0034000101010101010000080026006c0900000800270001000000300051"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 229.658723ms ago: executing program 1 (id=739): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x480, 0x3}, 0x18, 0x2) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)=']\x00', 0x80, &(0x7f00000000c0)={@align=0xf5, {0x6d, 0x4, 0x7, 0x9}}, 0x745f, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000200)={{0x0, 0x6, 0x4, 0xb, 'syz1\x00', 0x4}, 0x2, 0x10, 0x9, 0x0, 0x1, 0x6, 'syz1\x00', &(0x7f00000001c0)=['/dev/sequencer2\x00'], 0x10}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x6, 0xed, 0x9, 0x3}, {0xca, 0xf, 0xfc, 0x9}, {0xb99f, 0x9, 0xe, 0x4}, {0x9, 0x0, 0x10}, {0x6, 0x37, 0x7, 0x94e}]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x0, 0x3, @status={[0x7, 0x12, 0xc3, 0xe, 0x10001, 0x1ff]}, [0x80, 0x3, 0x3, 0xdab, 0x2, 0x61c4000000, 0x45, 0x2, 0x5a99, 0x10000, 0x1, 0xfffffffffffffffa, 0x4, 0x9, 0x3, 0xfffffffffffffffc, 0x89a, 0x3, 0x7, 0x6, 0x4, 0x0, 0x1, 0xca2, 0x3, 0x5, 0x10, 0x9, 0xfffffffffffffffe, 0x6, 0xeca4, 0x0, 0x2, 0x9, 0x80000000, 0x80000, 0x4, 0x9, 0xffffffffffffffff, 0x7fff, 0x8, 0x4, 0x5, 0x5, 0x100000000, 0x7fffffffffffffff, 0x1, 0x0, 0x3ff, 0x4e2, 0x8, 0xf, 0xff, 0x2, 0x7fffffffffffffff, 0x3482, 0x2, 0x6, 0x0, 0x6, 0x5, 0x0, 0x8, 0x1cab]}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000e00)={{@my=0x0, 0x7}, 0x1, 0x5, 0x81, 0x9dd6b04f}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) (async) r4 = openat$cgroup_ro(r2, &(0x7f0000000f80)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000fc0), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000001000)={0x70093df, 0x3, 0x1, 0x0, 0x9}) (async) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000001040)={0x1, 0x1, 0x2, 0x3ff, 0x92b, 0xf, 0xe, 0x3e4c, 0x70cd, 0x8001, 0x5, 0xd, 0x5, 0x101}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000001080)) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000001200)={0x1, @win={{0xf3000000, 0x401, 0x67, 0x468c}, 0x7, 0x5, &(0x7f0000001180)={{0x3, 0x1, 0x5, 0x9}, &(0x7f0000001140)={{0x1, 0x43, 0x1, 0x7}, &(0x7f0000001100)={{0x5, 0x8, 0xb81}, &(0x7f00000010c0)={{0xe, 0x2, 0x2, 0x2}}}}}, 0x6, &(0x7f00000011c0)="fd3dd1f471fbd27ecdaff9a87551d5313dbaf669983095b6482b4b6dcdd4810a0d6b49d2ee720774f032d582bf2799418c572b868d6ab917330c01d9dc", 0xf}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000001300)={0xff, 0x6, 0x6}) r6 = syz_open_dev$mouse(&(0x7f0000001340), 0xf, 0x90001) write$usbip_server(r6, &(0x7f0000001380)=@ret_unlink={{0x4, 0x9, 0x0, 0x1, 0x8}, {0x4}}, 0x30) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000014c0)={r2, &(0x7f00000013c0)='-+\x00', 0x200800, &(0x7f0000001400)={@align=0x6e746b7a, {0x3217, 0x912, 0x1fd, 0x2}}, 0x4, &(0x7f0000001440), &(0x7f0000001480)=0x2cc}) r8 = dup3(r7, r2, 0x80000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat(r7, &(0x7f0000001500)='./file0\x00', 0x10400, 0x150) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r9) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r10, &(0x7f0000001880)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001600)={0x1f8, r11, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7, 0x4d}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x939}, @NL80211_ATTR_IE={0x10b, 0x2a, [@preq={0x82, 0x72, {{0x1, 0x1}, 0x8, 0x81, 0x6, @device_a, 0x5, @void, 0x8, 0x6, 0x8, [{{0x1}, @device_b, 0xc9}, {{}, @device_b, 0x7}, {{0x1}, @device_a, 0x7ff}, {{}, @device_b, 0x5}, {{0x0, 0x0, 0x1}, @device_b, 0xef9d}, {{}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0xffffffff}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}]}}, @supported_rates={0x1, 0x6, [{0x4, 0x1}, {0xb}, {0x30, 0x1}, {0x2}, {0xb}, {0xc, 0x1}]}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0xe, 0xa, @broadcast, 0x5, 0x4, 0xbd}}, @supported_rates={0x1, 0x5, [{0xff1de6309568ba7b}, {0x30}, {0x60}, {0x6c}, {0x60}]}, @random_vendor={0xdd, 0x63, "c923102f84f7e1f268459c1b24668ff0c65aaf5d8d8f4eb537d6db3ed4a787b64560fae13ddc9d4dbb4274c49d7e0f5f056c20ca71c1de6c7c788de55fc709a13960199418ca474c05a7bf56e4803306cd80d76befd490872ecb3d4b2204264035c02d"}, @mesh_chsw={0x76, 0x6, {0xf, 0x2, 0x3e, 0xfff8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2c}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffe}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x84, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @perr={0x84, 0x7b, {0xff, 0x7, [{{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x1}, {{}, @device_b, 0x80000, @void, 0x19}, {{0x0, 0x1}, @device_a, 0x6, @value, 0xf}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x33}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x3f}, {{}, @device_a, 0x7140, @void, 0x19}, {{0x0, 0x1}, @broadcast, 0x200, @value=@broadcast, 0x3e}]}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) (async) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000018c0)=0x8) (async) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) (async, rerun: 64) ioctl$DVB_DEMUX_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f0000001900)={0xffb, 0x80000, r1}) (rerun: 64) sendmsg$TIPC_NL_BEARER_ADD(r13, &(0x7f0000002a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002a00)={&(0x7f0000001980)={0x1050, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x103c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x11f0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff41d8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "7c9aae11b7b762422d49c284da7751d933a050a94a157c546cefed75e30a149f5a3b52b82972f11799bef06dcd01a7c82fe048aad80c052c14a12252ec7b67af191a16aec2ca73d6a0593bca762bd950cbc39ebdb46eedc439376fdf4e138c5407070aea785d718b7db9c148464a77c25e9700146b52363fea05f8cc5ee0f369fa960a529ca152572b12d09f4f0e9f503ad20d53bbfd6379728ac68427ad4c79086d7b9b8f2fb33578ae838aba166444646ed9f1c252efe3b213939eaa2a0ceb471ae3ce8b1ee912b910309b44f539fe0f47adadd0960e20520a481a1bc5224a7b8563096975dea234905f076d6b55412625d67646ea226ce4ab78117313c5f604e7bc039e025841722b09ab996e4f4372374584fbe9b9d2f9e0b5a3e4f30f552b516e020efb8cbe3cb14a28d5fd791ecc64b5441a0e1cf42ab87b245a003dba023d63510cc5cc863f677a1709cf05319384474e8fa4f007e38729fff18e92176232fdc16d3fe5bf088eeac237680d8e8bb6e4c8426bb4504e697690d53421702d2e0b6b4670969226303cb6216dd6d4ef9e2eb8fbbd0aa5a5b436325590aadef7179413fbe31b7682c2e914b5cc56c6f4a430a0353e6d994f393e88a28393be68db8c70e68d79575d6f126e25f2593235bb4a08a755649d1c4fbe05da7c9cf3411ab6a6688ab1b566a32a28e6bd62a0f1868e63f161a26b22980b40ab847341c277b7d5fe14a29e82b5214b5f4e985d2b2276d49e8e8436e50ef9d6c44a9573dfd82bc43aa790ed2aadb32a8438594729795ad8be4c96b1c2b213b777820e09c07407e2134b7eef39af7340f8f5e1dbf22191eb3d0d6bb6b61717fefb854081cc4196ff06f2e71e51a60c04764368c5b7b2db48d7e99351aff503cdcd4b0767c9dd6e0d3a33824e0e3fd743927cfd505176d8e4774b9dab3448822932881defef054cf1836e94abffe17fad5d2ee076a296d44982e9a754adf1a2372741205eceff8ea9fea7c9ea53108284d21946f15569eff7c31ccd645c563b714e195c53c9400de7a9f9ac90b0ecee0d1379cdd7c54f6e71a3cc0324402d2752d533376a0e6c211d92a5961b1aa523c5570fc9d7af9b697a28edf854b21554cc756c3adf780ff002f287a03d4615a93dcbfe49a5bb8d85fc5a49c8e2f873c8ceefa783d5cd8c83c34d9defca4122b98123ccc3342e96ea4ecd36b7639ab1c1e753bdebe6c3ae252fee964edde1c0c3b06d4bc8b3b811c692e8c0c5e0ff0649f1f78699941725b5e94363a7d003fa1ed9ca466ad4cb7f21891c5728ad078a633143cf36ff8eb4c7e5a944d2dc12ae608cf837bab0743754dc957475773229e0703cef4543a89f58418967a9afe397b3d9a034cfab14b2c7d115b3f71854c9a157b9f389742061d4366859aff394990c5cde25ed4bf2f8f809a5b49f5244e61f439dbe57c5ee5a636954be4286e62941dd1e2cf92c0f3e0d565bff3ee654582dc549eacd31b23c0b4f08a14555c3c4837abecf9e709ac21798575725bc8d051b83ba67f28bbf7133ee860cfe2f86229cae8c5247745b5bef7525f00811634c626406960e86ace66be8626fd53919bcfc2135ec1a17083983c3bd72cd34ebda9688fb02bfa88be4d5003a78aeef8db231ce2951cdc20d71fe7336da146a8217b2955bd84f2a48d36135d49b47625d7aca5c2725aa29211f9f05f214fa89f429ad5c1139b886f20b365ace7c92c71d3f2d57b4a4b5fdf684e72f2a1cb958a5e6658025a79b998982c00205980106582b0d33d3b644daeaf9454c810604e43c17c23ee4fb14dc513ee97b77395f9f33c3937c727e34f95bc2a3e653fb13ef778961691e3f8bc72b9ee80bfe25ea91f6d6dc00de8fdc239aa233ce6cd506a1acff35d2931a2267b0a8aac19204e7d5a97b122efc873eb8db2de2d7ba8a303f5cad7471e1c4bc55e17c78821abb0b22b68612b973cf6dbd21156193d65bc4874f6e88728d70cb9327f93c764b5daf144a9518628644a77a3511e0304a025ba66355812175ac269a4e90354b1025a4568c3c98d5621f0d7ec032212f6c8bffe1131e611e19120b6ed8464e8d9c41f2db4ab7da1aa7d9ec7197b99d1e1b935c92cd673025dd4d38cd23ab6e2b92d2edbc53c3c02fc68f7b6719ab0cdd5a2e450891bc5d51030ab6d28fb2deee9054e216939ca3bb759eac8913a51b7eefedb092c91434cf6bb7c1dd99b3042c4efcabf6872a63019eeeeb9f7af36ffdbff53e3e5b982e95f46804fc856ed89c281cc89a3bb85b14f781661460a9b14f7532572cbbc8bfb0ec544c2c123e973795fc1017689d8a939edbf0cc94eed3d48259a15f7be44c5ca4410020f92d656a341bb1884cd3e947412ce066563e9194cd701a3c196518d2ca79cf67ec6900663c4932e1c8ff040e73bd2182f53e055a3c193607a3efa09f6b70a5b9652b1b849f42c5199d103f970a342914a75c0a0cff6975deb6e13fd51c668178556dbad796c983ea45ff365a76ab10453f211fa405a73c70d305591c0716b9c43b7be1e079a190a2835c188476ae34d7f22eb8d0038aded74040f8b4f52e259f944900e9fb82b4ced1f66be87421b5b86281e32e49075550ddecab88a93a8874223af57595c0fc966a68cc024c3843eef6cabb5aa32c0005b1fef7400f0c5eb75349252988d4d18aef4f44312e214ea8efb625ea33a9ec88a1c907a9d229a31c6a7cfad1fa6ceb983657e42aeb81649bc32dfcd13f3bbd5d8782a57d626394910f00ff2399b445c4b82b9315590831ab95ce40baf16d888e8f3d71e6d2301302fe6ec02016473ced8eb5a9146fd82ec7cfc6bff2e063ca14872682cd08d6c7500de4d2556aaf7ebf73cf43c61ac4e1b78a359d04daf26fe73fc620ac079d465fd6746d30c9aafec9ac6cdabb3c149479f65daa4d6c7882a3c1e57b3196821c0d1e41bc5411f666288e1a5aa08ee29fbc5831681c7d58158236021c4936aceed963d0ac760137c4a8149e1c721824a1a11f2e184fa3dbc98d52c7bacf0d020bd2a1d4b94baf854394a155b96cdebc95715d6ec7151739669b9e241fb0e9f0ffe75bf3e273e7de9f74b204cba598bdc91d0fd97ab9c738ab463065edd893f07de90a9cca24ee08d5f815e2969dfec878f43ac14f7556f0e0018c77dc8069a63543e92c06d6b70185f02c1ad110c1c3fca7f0d1424279b8a7b7d2da114d556ff928f43430f30e91ec17e7706dc4f9e93d1d8f9e789fc684ec97248ca10d3fea2bcd218a9cda4d0cd338e644d49369281f3c9ddccfa94900b2a1b84d0c462ce2cefaa512e24990319120b4017d8666c096c469284dbcbe87d41d09cef07707105af5291309fee500425a816d5c93f546f22dfb8275b21d3da798ae6dba2388d1e9dd1c000e91f0337d4cea6a4b307e41dafd0059a5bdd68e5d83d4990aaf9b035b29bb5e58c298cb0838920a0c93d29ea861683e222c7b3c2e7d605e8d74df2032eb58054f107ac3cf15affc673911d6df74b4c5f76d51ef0d87f60c22a6a95c80cc3d60ead849277ad050d1a80aa2b74e25f90f17397fa38926ba34c4a33965e06624eba33caf6550dd0fb705fdceba0bbc56f006702eccee73998dedcf288e7a4c1e8fc211540b48a5c3b8a1fb167095c19c62448d48d59b6376582aa7c37c2b1eaa5efce6f185ed405762617b1f5aa99dc06405c2ad5b45194636ce855c2d11a3a83b7db76c3d4647ec4d940a3be8c8e42bc717e4f054e78221a11963313ba5c8a268b33e5c1b0754058828f6381d4be03ac64e7a0973d73f32659ce2b39b4ef83ebdaeb7b33cb6eb9e2f3a98913bc0b45b237ad51bad4d3f3aae53433fc1770c3215b4236340e5431b7cd1a59981c2511a7054f2eb435121dd6acc743c1ca880486e10a6f39483afdcb07901623ecede3b05750112b0c318f4708291faa19faa19dc82fe171f183c2b86d95c610382ef409fa56a755bac8142fc8f99ee4ca415592115f47804c504562f2aec97a082b50d6d041801340dd51c9f390ba14cb47feda238fb8fcdc6c87d4768eb6bbf241cf0eda1769e983dc01b69b0b6eb18829ed2f158135399722d8ab4fac86e9a4ba14221da443c59d46bd48e5bd4f567b5e96ec7a265f0c48ccec6f635828c507743a47112fc3f0ebdbfa211ce54d80717f1f21d10dfac9b948b40afeb03a3495fb8208c796d3e875ac0b98fa641a9ec30eac7642260d65d07cfac9741498a31ee728fa7c7d2610bd893b0d5a05977825ede522902452669903c8c289b4ab6161aa9daed2be63550185849e65f1505be67893d94c80dcd1be8552201035430a30307e93b08fd3b469c789bb8fab87d93efdbf48faf1f2e44705b7eaa36a16fcdc058da508e66e4868bbb1079d6d448186dbf16f8464e407b055da6c5aadbc3ef72ae8e05dcb89f19f381fc41eaa2504b264907932950dbef754c7721677f71f6d5d98fd86187e0410c0cbb78832357e9e6693005322f4f84fe9824768972448a28524bb355ea3b8c270227f09df8ffb76f22a1a15704812c4f1422038cedaf82a5d856f8dfbd3af2b4dbc20f354830b4ec08f39e43e5aa84cf460d4e99e22971d15bb1df4913b4bedf2871c5fb728430fa91db42e624ee6860de1cd9ccd977c36299a5a1a40bb9fda8c2a1290b4ee6050e596789a4de23eb3cb787837ff050c673c3adb869e3ba1b5a230376454315a7af351c9e5f6c3d218ab7f56c5e93393fe5094c49819a6280664dc54a1f73bd184d09c6ebf782fb6835686c8a7b391216f6a9c58bfa59fe0494f9cd2957a57d629a8b8a1104f4d7b7551f07d59e4ca5d33a66e8acfe9fab8770b84907ba55cb150c2efaa4cdda8ca545623ce6641ac3d99ff4d7351d34635c591b385d812bbff90a16f584afe4b80155a54a90dc08b824d35f0f4317f69cbeed6b7dd2ba7806322077c9ae0b3356ad1f3e8fbdd8a4e27c552f29cee27f3e7ff0a3d469228f49df5b3f2354443ad8418da61fa64887c3fc739f02ee3e2532ab2802efeb2ea4e18fb455b6b68050a74d88e8728c2cae9745bd2fe5e0f7e2667dacf6462dc429dd81b03b28d0184040c2eb07ba45bfcf75041a3edde370c17816b53a8d96c6d516981e37334e8fa703f2bcf3766095d589d8c128f7f2d22cd313c07f4fcba080f87aa0333d8d99c874e759b6fbd17d8748816983c7930f403b7430f1d7028e1bdf94ae2ff597cb2de31ce3ee6380a82a228c6ee67f890ab261186056dc12baac333199b5ed1e845eaf69ba00e0e239451b31a7981bd13d4ffdab8351e634322d53de6ddbf33994f2e5120b648de4512b6edb0baf4f2b36eb7563b9dbb612e02f8ec8e586345cfd32043d1814195edb67197231a7f3783e7fc60044b496bc9f473f321e15405af2c05282bf4a067cd9dd2786680a4d9673bb425b284bf8a7d45d63844eb1cd29c6a16735c4ba44e010ee9aaedd621a71e4cdfe20eb5cccb5b844ff6f95f681c3075f29d8f4d11359703e987932c3d9d75a48a5acb55e1c82af7bda983128b19bd0f61810cb4702cebcf1476b3d4eeba77053e3ce0b5c2d4014932ff8b7862127ff4d61c52c265d3696c85bc59efb7977322eae4a6aa83982f36642709635d2760b051a9780cde1574bcdc329da5e41e8778362436388293887b7a7b5bc31a920c5150753ca8b278581d8018e445588f1d8407956ca546b47391d417a0a05531d06c291bbc6f5c11a2da4082dbdbdbc5290618f5e5850729b899b602388262ca25df6811ba58e4572c5586b13922d5857518e7f3fee3d1cc1f4df0f47fd32"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1050}}, 0x0) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000002a80)=0x4) 229.412854ms ago: executing program 3 (id=740): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000003f80)=@newspdinfo={0x14, 0x28, 0x1}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r2, 0x1, 0xffffffff, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e0}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 226.994125ms ago: executing program 3 (id=741): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x80b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0xf8ab52690d89ff83) close(r4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000240)) listen(r6, 0x0) syz_emit_ethernet(0x24c, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100400086dd68a2d7c4000011fffe8000000000000000000000000000aafc020000000000000000000800fe880000000000000000000000000001ff02000000000000000000000000000100000000000002000000ffff7f000001200100000000000000000000000000004e204e2300009078020000724b0000000300000095205131a79a3c621e2e6ca581e9b12f1ffd2c75714ecfd2d2cbf13ed26edd5b7d19ebd34e1498158d79122479925d4535e57fb12a02f9a6e8afa643f274ac55fac1902968a6917145efff286ab1c32d"], 0x0) syz_emit_ethernet(0x96, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x60, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0xffffffff}, @exp_fastopen={0xfe, 0xd, 0xf989, "511aabef3be7e1bfd0"}, @mptcp=@capable={0x1e, 0x14, 0x1, 0x8, 0x4d, 0xfffffffffffffff7, [0x7]}, @sack={0x5, 0x1e, [0x8, 0x9, 0x102000, 0xb, 0xffff0001, 0x0, 0xb]}]}}}}}}}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x101, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 132.775072ms ago: executing program 1 (id=742): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000040c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000700)=0x91, 0x4) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000000200)) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0x5c) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) 131.927123ms ago: executing program 3 (id=743): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b8"], 0x159c}}, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0xfffffffffffffff4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x112}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x100, r6}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x12) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506e500001b0000000000000000", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400ff3c000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 59.794717ms ago: executing program 1 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r1) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x44000) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001380)={'wlan1\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x42000104}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000013c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="21002cbd7000fedbdf2507000009080001006d00004ae8000b7d", @ANYRES32=r5, @ANYBLOB="0c00990001000100120000001400040076657468305f746f5f7465616d00000008000500020000000500530001000000"], 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) write$FUSE_INTERRUPT(r12, &(0x7f0000002780)={0x10}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r12, 0x0, 0x5b, 0x7b, &(0x7f0000000340)="f6e7cf43ef451d79f1322f9f63f6a27dbfa1746e16d89d0bbe518eb61f1a87558c4beb5627735b65862e3fa0b3e6b3a25ce10e66fd18c4efc5824cf57b18648eb45a4088da3682a9e10e4aa9b8508c3449117093ca1633d4f8e19a", &(0x7f00000003c0)=""/123, 0x0, 0x0, 0x33, 0x56, &(0x7f00000007c0)="a4ff92a4969a9ff4f1856ff63d232c0b6d10062a1fe0ccb80b3459710cb50c1bd9ea203084c20026fca4e353ec90a44cbddcb8", &(0x7f0000000800)="dacbd987a9063fe7225fb0adf79361217fda95c5ba18348de8868c7c67b2d77dce5ec59919fa3ccefeac429392ee0c32d9b469672bb1a14d95060b64f9723419df356a32370292a1555ba4395384e07a5b0f242f077a", 0x0, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01000cbd7000fcdbdf251200000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0xc000) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYRES8=r6, @ANYRES16=r6, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r15}, 0xc) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r15}, 0xc) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012abd7000fcdbdf2511000000050012000f00000008000300", @ANYRES32=r16, @ANYBLOB="08000300", @ANYRESOCT=r14, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x4000) 0s ago: executing program 1 (id=745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = io_uring_setup(0x727e, &(0x7f00000001c0)={0x0, 0x600, 0x2, 0x0, 0x3d7}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) accept(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x2100) ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0xffff, 0xff800000, 0x1, 0x1, 0xfffffffffffffffa, 0xff, 0x713, 0x3, 0x9, 0xffffffff, 0x6, 0x9, 0x5, 0x9, 0x0, 0x8, {0x8ac, 0x1ff}, 0x73, 0x1}}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:61270' (ED25519) to the list of known hosts. [ 57.599244][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 57.599257][ T40] audit: type=1400 audit(1778820081.590:141): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.610275][ T40] audit: type=1400 audit(1778820081.600:142): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.612753][ T5721] cgroup: Unknown subsys name 'net' [ 57.623619][ T40] audit: type=1400 audit(1778820081.610:143): avc: denied { unmount } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.792671][ T5721] cgroup: Unknown subsys name 'cpuset' [ 57.799730][ T5721] cgroup: Unknown subsys name 'rlimit' [ 57.967936][ T40] audit: type=1400 audit(1778820081.950:144): avc: denied { setattr } for pid=5721 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.983045][ T40] audit: type=1400 audit(1778820081.960:145): avc: denied { create } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.990808][ T40] audit: type=1400 audit(1778820081.960:146): avc: denied { write } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.998557][ T40] audit: type=1400 audit(1778820081.960:147): avc: denied { read } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.007188][ T40] audit: type=1400 audit(1778820081.970:148): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.019002][ T40] audit: type=1400 audit(1778820081.970:149): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.028716][ T40] audit: type=1400 audit(1778820081.980:150): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.037788][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.864053][ T5721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.905378][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 62.905401][ T40] audit: type=1400 audit(1778820086.890:158): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.156886][ T40] audit: type=1400 audit(1778820087.140:159): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.167833][ T40] audit: type=1400 audit(1778820087.140:160): avc: denied { read write } for pid=5732 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.183456][ T40] audit: type=1400 audit(1778820087.140:161): avc: denied { open } for pid=5732 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.192421][ T40] audit: type=1400 audit(1778820087.160:162): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="socket:[3538]" dev="sockfs" ino=3538 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.212840][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.217328][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.222123][ T5738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.225965][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.231640][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.237041][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.240209][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.240672][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.245001][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.245092][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.245830][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.247037][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.247452][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.248555][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.248727][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.249178][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.252475][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.256435][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.260091][ T40] audit: type=1400 audit(1778820087.250:163): avc: denied { read } for pid=5735 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.267019][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.267546][ T40] audit: type=1400 audit(1778820087.250:164): avc: denied { open } for pid=5732 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.272009][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.277886][ T40] audit: type=1400 audit(1778820087.250:165): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.312223][ T40] audit: type=1400 audit(1778820087.260:166): avc: denied { module_request } for pid=5735 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.321854][ T40] audit: type=1400 audit(1778820087.300:167): avc: denied { sys_module } for pid=5732 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.067102][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.070340][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.072796][ T5736] bridge_slave_0: entered allmulticast mode [ 64.075970][ T5736] bridge_slave_0: entered promiscuous mode [ 64.114477][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.117599][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.121170][ T5736] bridge_slave_1: entered allmulticast mode [ 64.125461][ T5736] bridge_slave_1: entered promiscuous mode [ 64.141836][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.144374][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.146866][ T5732] bridge_slave_0: entered allmulticast mode [ 64.150048][ T5732] bridge_slave_0: entered promiscuous mode [ 64.155406][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.157853][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.160847][ T5732] bridge_slave_1: entered allmulticast mode [ 64.164486][ T5732] bridge_slave_1: entered promiscuous mode [ 64.197384][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.200006][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.202282][ T5735] bridge_slave_0: entered allmulticast mode [ 64.205318][ T5735] bridge_slave_0: entered promiscuous mode [ 64.219781][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.231177][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.246286][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.249564][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.252822][ T5735] bridge_slave_1: entered allmulticast mode [ 64.256958][ T5735] bridge_slave_1: entered promiscuous mode [ 64.262755][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.269076][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.333633][ T5736] team0: Port device team_slave_0 added [ 64.354451][ T5732] team0: Port device team_slave_0 added [ 64.358189][ T5732] team0: Port device team_slave_1 added [ 64.362718][ T5736] team0: Port device team_slave_1 added [ 64.373142][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.378179][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.381591][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.384757][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.388016][ T5733] bridge_slave_0: entered allmulticast mode [ 64.392601][ T5733] bridge_slave_0: entered promiscuous mode [ 64.397015][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.400256][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.404030][ T5733] bridge_slave_1: entered allmulticast mode [ 64.407330][ T5733] bridge_slave_1: entered promiscuous mode [ 64.446745][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.450238][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.460941][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.503165][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.506331][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.516887][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.522162][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.524339][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.534116][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.542227][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.548808][ T5735] team0: Port device team_slave_0 added [ 64.561562][ T5735] team0: Port device team_slave_1 added [ 64.564957][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.568472][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.579267][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.586246][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.640816][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.643827][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.653145][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.659740][ T5733] team0: Port device team_slave_0 added [ 64.675011][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.678140][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.688817][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.703033][ T5733] team0: Port device team_slave_1 added [ 64.727128][ T5736] hsr_slave_0: entered promiscuous mode [ 64.731552][ T5736] hsr_slave_1: entered promiscuous mode [ 64.764004][ T5732] hsr_slave_0: entered promiscuous mode [ 64.767488][ T5732] hsr_slave_1: entered promiscuous mode [ 64.771406][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 64.774121][ T5732] Cannot create hsr debugfs directory [ 64.777300][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.779799][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.788682][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.793482][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.796002][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.804455][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.869285][ T5735] hsr_slave_0: entered promiscuous mode [ 64.872996][ T5735] hsr_slave_1: entered promiscuous mode [ 64.875253][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 64.877364][ T5735] Cannot create hsr debugfs directory [ 64.944009][ T5733] hsr_slave_0: entered promiscuous mode [ 64.947322][ T5733] hsr_slave_1: entered promiscuous mode [ 64.950434][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 64.952887][ T5733] Cannot create hsr debugfs directory [ 65.234996][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.244588][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.247923][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.253203][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.257089][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.259076][ T62] Bluetooth: hci0: command tx timeout [ 65.264415][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.275766][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.281313][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.327329][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.334226][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.337600][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.340278][ T62] Bluetooth: hci2: command tx timeout [ 65.346433][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.348402][ T62] Bluetooth: hci1: command tx timeout [ 65.349152][ T5749] Bluetooth: hci3: command tx timeout [ 65.353700][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.360237][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.363336][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.369040][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.439933][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.444450][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.449743][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.454705][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.469232][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.475994][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.484010][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.489412][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.555199][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.576684][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.582456][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.586154][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.594208][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.597985][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.604306][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.611651][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.616762][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.645883][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.683806][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.687179][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.706561][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.708961][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.715892][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.761545][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.774630][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.777139][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.806151][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.810614][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.813809][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.859379][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.872747][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.885300][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.887531][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.909621][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.912688][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.924788][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.945445][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.948680][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.966074][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.969435][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.202190][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.258705][ T5732] veth0_vlan: entered promiscuous mode [ 66.277323][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.285238][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.289204][ T5732] veth1_vlan: entered promiscuous mode [ 66.333720][ T5732] veth0_macvtap: entered promiscuous mode [ 66.343480][ T5732] veth1_macvtap: entered promiscuous mode [ 66.372093][ T5733] veth0_vlan: entered promiscuous mode [ 66.381507][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.386186][ T5735] veth0_vlan: entered promiscuous mode [ 66.395077][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.402558][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.408391][ T5733] veth1_vlan: entered promiscuous mode [ 66.422872][ T1193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.432836][ T5735] veth1_vlan: entered promiscuous mode [ 66.436984][ T1193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.444743][ T1193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.453166][ T1193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.495536][ T5733] veth0_macvtap: entered promiscuous mode [ 66.522906][ T5733] veth1_macvtap: entered promiscuous mode [ 66.542374][ T5736] veth0_vlan: entered promiscuous mode [ 66.555963][ T5735] veth0_macvtap: entered promiscuous mode [ 66.562605][ T5735] veth1_macvtap: entered promiscuous mode [ 66.573835][ T5736] veth1_vlan: entered promiscuous mode [ 66.583659][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.588015][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.592198][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.611068][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.612331][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.614166][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.619173][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.639015][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.643456][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.653120][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.657221][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.670228][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.673230][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.673557][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.691318][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.695206][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.699802][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.708791][ T5736] veth0_macvtap: entered promiscuous mode [ 66.726314][ T5736] veth1_macvtap: entered promiscuous mode [ 66.762100][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.772942][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.809627][ T770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.813359][ T770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.824873][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.828432][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.830515][ T770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.834132][ T770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.852497][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.856385][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.881338][ T5884] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 66.903745][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.906435][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.929503][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.932349][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.967522][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.973788][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.014124][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.016703][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.163233][ T5894] vlan2: entered promiscuous mode [ 67.165032][ T5894] hsr0: entered promiscuous mode [ 67.166953][ T5894] vlan2: entered allmulticast mode [ 67.169822][ T5894] hsr0: entered allmulticast mode [ 67.171848][ T5894] hsr_slave_0: entered allmulticast mode [ 67.173858][ T5894] hsr_slave_1: entered allmulticast mode [ 67.238259][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.245730][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.339236][ T5749] Bluetooth: hci0: command tx timeout [ 67.351134][ T5903] loop9: detected capacity change from 0 to 7 [ 67.418404][ T62] Bluetooth: hci2: command tx timeout [ 67.418566][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 67.422013][ T5739] Bluetooth: hci1: command tx timeout [ 67.425510][ T5749] Bluetooth: hci3: command tx timeout [ 67.427382][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.432332][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.436720][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.440382][ T5907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.448157][ T5825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 67.452154][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.462674][ T5825] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 67.468256][ T5825] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 67.475744][ T5825] usb 6-1: Manufacturer: syz [ 67.490808][ T5825] usb 6-1: config 0 descriptor?? [ 67.691484][ C2] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 67.694780][ C2] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 67.696225][ T5903] Dev loop9: unable to read RDB block 7 [ 67.701363][ T5903] loop9: unable to read partition table [ 67.704278][ T5903] loop9: partition table beyond EOD, truncated [ 67.706532][ T5903] loop_reread_partitions: partition scan of loop9 (śłƒå”™‰ü¾CźjĢ–ć¢P=Ć½?ć}X‹ŗŠ œėÜ%õ«`Éęրł…ˆ{ķ©Ö˜Čµ4FLQkŻŠ) failed (rc=-5) [ 67.809040][ T5825] rc_core: IR keymap rc-hauppauge not found [ 67.816156][ T5825] Registered IR keymap rc-empty [ 67.829384][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.858478][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.879526][ T5825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 67.894552][ T5825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 67.899195][ T5932] vlan2: entered promiscuous mode [ 67.901130][ T5932] hsr0: entered promiscuous mode [ 67.903338][ T5932] vlan2: entered allmulticast mode [ 67.906209][ T5932] hsr0: entered allmulticast mode [ 67.909014][ T5932] hsr_slave_0: entered allmulticast mode [ 67.911262][ T5932] hsr_slave_1: entered allmulticast mode [ 67.930786][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.948230][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.954935][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 67.954948][ T40] audit: type=1400 audit(1778820091.940:226): avc: denied { ioctl } for pid=5936 comm="syz.0.16" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8082 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.968350][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 67.988482][ T40] audit: type=1400 audit(1778820091.970:227): avc: denied { create } for pid=5933 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.990179][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.019851][ T40] audit: type=1400 audit(1778820092.010:228): avc: denied { read write } for pid=5941 comm="syz.3.18" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 68.038352][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.040998][ T40] audit: type=1400 audit(1778820092.020:229): avc: denied { open } for pid=5941 comm="syz.3.18" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 68.053337][ T40] audit: type=1400 audit(1778820092.040:230): avc: denied { create } for pid=5941 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.061071][ T40] audit: type=1400 audit(1778820092.040:231): avc: denied { bind } for pid=5941 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.067037][ T40] audit: type=1400 audit(1778820092.040:232): avc: denied { setopt } for pid=5941 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.068474][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.073812][ T40] audit: type=1400 audit(1778820092.040:233): avc: denied { accept } for pid=5941 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.082735][ T40] audit: type=1400 audit(1778820092.040:234): avc: denied { write } for pid=5941 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.089288][ T40] audit: type=1400 audit(1778820092.040:235): avc: denied { read } for pid=5941 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.099589][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.118818][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.152433][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.188265][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 68.229421][ T5825] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 68.235158][ T5825] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 68.292860][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 68.311151][ T5956] openvswitch: netlink: IP tunnel TTL not specified. [ 68.589030][ T5958] Zero length message leads to an empty skb [ 68.723140][ T5979] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 69.137921][ T5998] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.374470][ T6012] loop5: detected capacity change from 0 to 7 [ 69.380758][ T6012] loop5: p1 < > p3 p4 [ 69.382122][ T6012] loop5: partition table partially beyond EOD, truncated [ 69.388612][ T6012] loop5: p3 size 8 extends beyond EOD, truncated [ 69.392626][ T6012] loop5: p4 start 58801 is beyond EOD, truncated [ 69.420421][ T5739] Bluetooth: hci0: command tx timeout [ 69.425951][ T1345] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.498765][ T5739] Bluetooth: hci1: command tx timeout [ 69.498791][ T5749] Bluetooth: hci2: command tx timeout [ 69.579141][ T5749] Bluetooth: hci3: command tx timeout [ 69.581981][ T1345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.585861][ T1345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.589351][ T1345] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.593723][ T1345] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.596808][ T1345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.602062][ T1345] usb 5-1: config 0 descriptor?? [ 69.791497][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 69.803613][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'. [ 69.805210][ T9] usb 6-1: USB disconnect, device number 2 [ 69.833651][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 69.961674][ T6031] ufs: You didn't specify the type of your ufs filesystem [ 69.961674][ T6031] [ 69.961674][ T6031] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 69.961674][ T6031] [ 69.961674][ T6031] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 70.025441][ T1345] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 70.155341][ T6038] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.39'. [ 70.195803][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 71.580031][ T5749] Bluetooth: hci2: command tx timeout [ 71.580349][ T5739] Bluetooth: hci1: command tx timeout [ 71.716396][ T6083] bond1 (unregistering): Released all slaves [ 71.806009][ T6074] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.808900][ T6074] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.826810][ T6074] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.834829][ T6074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.837670][ T6074] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.843767][ T6074] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.847030][ T6074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.849868][ T6074] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.854133][ T6074] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.857949][ T6074] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.860324][ T6074] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.863668][ T6074] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.911045][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.52'. [ 71.914127][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.52'. [ 71.947932][ T6093] loop5: detected capacity change from 0 to 7 [ 71.954849][ T6093] loop5: p1 < > p3 p4 [ 71.956874][ T6093] loop5: partition table partially beyond EOD, truncated [ 71.962312][ T6093] loop5: p3 size 8 extends beyond EOD, truncated [ 71.966595][ T6093] loop5: p4 start 58801 is beyond EOD, truncated [ 72.199783][ T2321] usb 5-1: USB disconnect, device number 2 [ 72.225170][ T6101] ip6t_REJECT: ECHOREPLY is not supported [ 72.226161][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 72.243454][ T6098] overlayfs: upper fs does not support tmpfile. [ 72.439400][ T6107] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 72.599361][ T6120] gfs2: error -5 reading superblock [ 72.815410][ T6127] netlink: 76 bytes leftover after parsing attributes in process `syz.3.63'. [ 73.099642][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.258763][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 73.258775][ T40] audit: type=1400 audit(1778820097.250:289): avc: denied { read } for pid=6130 comm="syz.0.65" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.276092][ T40] audit: type=1400 audit(1778820097.250:290): avc: denied { open } for pid=6130 comm="syz.0.65" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 73.287205][ T40] audit: type=1400 audit(1778820097.260:291): avc: denied { create } for pid=6130 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.296689][ T40] audit: type=1400 audit(1778820097.260:292): avc: denied { setopt } for pid=6130 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.345957][ T40] audit: type=1400 audit(1778820097.330:293): avc: denied { audit_write } for pid=6130 comm="syz.0.65" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.359292][ T40] audit: type=1400 audit(1778820097.350:294): avc: denied { bind } for pid=6130 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.595501][ T40] audit: type=1400 audit(1778820097.580:295): avc: denied { create } for pid=6142 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.608264][ T40] audit: type=1400 audit(1778820097.600:296): avc: denied { write } for pid=6142 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.662919][ T40] audit: type=1400 audit(1778820097.650:297): avc: denied { getopt } for pid=6144 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.670437][ T40] audit: type=1400 audit(1778820097.650:298): avc: denied { name_connect } for pid=6144 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 73.715026][ T6148] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 73.721969][ T6148] Bluetooth: MGMT ver 1.23 [ 73.898206][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.898332][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.900139][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.302308][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 74.745018][ T6198] tipc: Can't bind to reserved service type 2 [ 74.805139][ T6205] netlink: 'syz.1.88': attribute type 3 has an invalid length. [ 74.838430][ T6205] openvswitch: netlink: VLAN attribute unexpected. [ 74.915727][ T6204] process 'syz.2.89' launched '/dev/fd/3' with NULL argv: empty string added [ 75.178270][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.187271][ T6211] gretap1: entered promiscuous mode [ 75.191554][ T6211] overlayfs: failed to resolve './file0': -2 [ 75.252828][ T6230] sg_write: data in/out 16777180/10 bytes for SCSI command 0x0-- guessing data in; [ 75.252828][ T6230] program syz.1.95 not setting count and/or reply_len properly [ 75.317499][ T6230] team0 (unregistering): Port device team_slave_0 removed [ 75.331750][ T6230] team0 (unregistering): Port device team_slave_1 removed [ 75.659263][ T6245] btrfs: Unknown parameter 'norecovery$' [ 75.978222][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.978304][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.988238][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.375640][ T6243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.380174][ T6243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.380266][ T6243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.380329][ T6243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.418765][ T6265] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.106'. [ 76.422659][ T6265] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 76.422853][ T6264] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 76.442538][ T6262] bridge1: entered promiscuous mode [ 76.444355][ T6262] bridge1: entered allmulticast mode [ 76.447607][ T6267] warning: `syz.3.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.464883][ T6262] loop5: detected capacity change from 0 to 7 [ 76.468995][ T6262] Dev loop5: unable to read RDB block 7 [ 76.471022][ T6262] loop5: unable to read partition table [ 76.472929][ T6262] loop5: partition table beyond EOD, truncated [ 76.477224][ T6262] loop_reread_partitions: partition scan of loop5 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 76.551898][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 76.563652][ T6262] Dev loop5: unable to read RDB block 7 [ 76.565533][ T6262] loop5: unable to read partition table [ 76.570581][ T6262] loop5: partition table beyond EOD, truncated [ 76.573703][ T6262] loop_reread_partitions: partition scan of loop5 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 76.667986][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 76.782069][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.785651][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.791430][ T6295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6295 comm=syz.0.115 [ 76.860966][ T6299] gretap0: entered promiscuous mode [ 76.865651][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 76.869223][ T6299] gretap0: left promiscuous mode [ 77.182867][ T6309] bond1 (unregistering): Released all slaves [ 77.601966][ T6340] tipc: Enabling of bearer rejected, failed to enable media [ 77.658183][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.686564][ T6345] bond1: Unable to set up delay as MII monitoring is disabled [ 77.691632][ T6345] bond1 (unregistering): Released all slaves [ 78.153893][ T6367] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3551904703 (227321900992 ns) > initial count (123586732480 ns). Using initial count to start timer. [ 78.266382][ T6370] loop9: detected capacity change from 0 to 7 [ 78.322106][ T6371] input: syz0 as /devices/virtual/input/input6 [ 78.354443][ T40] kauditd_printk_skb: 77 callbacks suppressed [ 78.354454][ T40] audit: type=1400 audit(1778820102.340:376): avc: denied { mount } for pid=6369 comm="syz.2.139" name="/" dev="ramfs" ino=12157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 78.366159][ T40] audit: type=1400 audit(1778820102.350:377): avc: denied { watch } for pid=6369 comm="syz.2.139" path="/33/control" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.389741][ T40] audit: type=1400 audit(1778820102.350:378): avc: denied { search } for pid=6372 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.399132][ T40] audit: type=1400 audit(1778820102.350:379): avc: denied { search } for pid=6372 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.409199][ T40] audit: type=1400 audit(1778820102.350:380): avc: denied { search } for pid=6372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.417911][ T40] audit: type=1400 audit(1778820102.350:381): avc: denied { search } for pid=6372 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.428918][ T40] audit: type=1400 audit(1778820102.350:382): avc: denied { read } for pid=6373 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.428955][ T40] audit: type=1400 audit(1778820102.350:383): avc: denied { read open } for pid=6373 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.428975][ T40] audit: type=1400 audit(1778820102.360:384): avc: denied { getattr } for pid=6373 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.428996][ T40] audit: type=1400 audit(1778820102.370:385): avc: denied { write } for pid=6372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.469122][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.469230][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.471710][ T5739] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.575530][ T6370] Dev loop9: unable to read RDB block 7 [ 78.577636][ T6370] loop9: unable to read partition table [ 78.582979][ T6370] loop9: partition table beyond EOD, truncated [ 78.586008][ C3] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 78.589915][ C3] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 78.598346][ T6370] loop_reread_partitions: partition scan of loop9 (śłƒå”™‰ü¾CźjĢ–ć¢P=Ć½?ć}X‹ŗŠ œėÜ%õ«`Éęրł…ˆ{ķ©Ö˜Čµ4FLQkŻŠ) failed (rc=-5) [ 78.724379][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 78.766393][ T6395] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 78.782133][ T12] Bluetooth: (null): Invalid header checksum [ 78.784902][ T12] Bluetooth: (null): Invalid header checksum [ 78.839460][ T6400] openvswitch: netlink: Actions may not be safe on all matching packets [ 78.929611][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'. [ 79.029415][ T6421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=6421 comm=syz.1.154 [ 79.041308][ T6421] tipc: Started in network mode [ 79.043077][ T6421] tipc: Node identity ac141424, cluster identity 4711 [ 79.045553][ T6421] tipc: New replicast peer: 10.1.1.0 [ 79.047535][ T6421] tipc: Enabled bearer , priority 10 [ 80.160152][ T10] tipc: Node number set to 2886997028 [ 80.538366][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.538426][ T5712] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 80.546297][ T5712] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 82.618261][ T5712] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 82.618348][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.620381][ T5712] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 84.698288][ T5712] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 84.698469][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.700311][ T5712] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 86.778264][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.782468][ T5712] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 86.785279][ T5712] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 86.930631][ T6459] No such timeout policy "syz1" [ 86.953281][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 86.953294][ T40] audit: type=1400 audit(1778820110.940:409): avc: denied { prog_load } for pid=6460 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.975814][ T40] audit: type=1400 audit(1778820110.960:410): avc: denied { map_create } for pid=6462 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.983452][ T40] audit: type=1400 audit(1778820110.960:411): avc: denied { map_read map_write } for pid=6462 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.990226][ T40] audit: type=1400 audit(1778820110.980:412): avc: denied { listen } for pid=6460 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.009534][ T40] audit: type=1400 audit(1778820111.000:413): avc: denied { prog_run } for pid=6462 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.033489][ T39] cfg80211: failed to load regulatory.db qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb4000) [ 87.122115][ T1131] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 87.128622][ T1131] ata1: failed to read log page 10h (errno=-5) [ 87.130796][ T1131] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 87.133603][ T40] audit: type=1400 audit(1778820111.120:414): avc: denied { map } for pid=6464 comm="syz.3.164" path="socket:[13550]" dev="sockfs" ino=13550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.137608][ T1131] ata1.00: irq_stat 0x41000000 [ 87.144234][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED [ 87.146886][ T1131] ata1.00: cmd 61/08:00:36:81:08/00:00:00:00:00/40 tag 0 ncq dma 4096 out [ 87.146886][ T1131] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 87.150916][ T40] audit: type=1400 audit(1778820111.120:415): avc: denied { read } for pid=6464 comm="syz.3.164" path="socket:[13550]" dev="sockfs" ino=13550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.154768][ T1131] ata1.00: status: { DRDY } [ 87.166801][ T1131] ata1.00: failed command: WRITE FPDMA QUEUED [ 87.170617][ T1131] ata1.00: cmd 61/a0:f0:36:3f:08/05:00:00:00:00/40 tag 30 ncq dma 737280 out [ 87.170617][ T1131] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 87.174735][ T40] audit: type=1400 audit(1778820111.160:416): avc: denied { append } for pid=6467 comm="syz.1.159" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.178559][ T1131] ata1.00: status: { DRDY } [ 87.178578][ T1131] ata1.00: error: { ABRT } [ 87.179819][ T1131] ata1.00: configured for UDMA/100 [ 87.195897][ T1131] ata1: EH complete [ 87.250309][ T40] audit: type=1400 audit(1778820111.240:417): avc: denied { create } for pid=6473 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 87.277959][ T6474] all: renamed from bridge_slave_1 (while UP) [ 87.278793][ T40] audit: type=1400 audit(1778820111.260:418): avc: denied { ioctl } for pid=6473 comm="syz.0.166" path="socket:[11249]" dev="sockfs" ino=11249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 87.354803][ T6485] overlayfs: upper fs does not support tmpfile. [ 87.361531][ T6485] Cannot find add_set index 0 as target [ 87.458015][ T6497] netlink: 100 bytes leftover after parsing attributes in process `syz.3.172'. [ 87.463075][ T6497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.172'. [ 87.552041][ T6499] loop4: detected capacity change from 0 to 7 [ 87.566114][ T6499] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 87.567974][ T6499] loop4: partition table partially beyond EOD, truncated [ 87.572453][ T6499] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 87.578718][ T2321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.601095][ T6499] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 87.718859][ T5808] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 87.738754][ T2321] usb 5-1: Using ep0 maxpacket: 32 [ 87.743159][ T2321] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.749862][ T2321] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.753733][ T2321] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.757273][ T2321] usb 5-1: Product: syz [ 87.759481][ T2321] usb 5-1: Manufacturer: syz [ 87.761489][ T2321] usb 5-1: SerialNumber: syz [ 87.766711][ T2321] usb 5-1: config 0 descriptor?? [ 87.771032][ T6483] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.778886][ T2321] hub 5-1:0.0: bad descriptor, ignoring hub [ 87.782100][ T2321] hub 5-1:0.0: probe with driver hub failed with error -5 [ 87.880125][ T5808] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 87.883703][ T5808] usb 8-1: config 0 has no interface number 0 [ 87.886109][ T5808] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 87.892260][ T5808] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 42239, setting to 64 [ 87.903197][ T5808] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 87.906875][ T5808] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 87.910265][ T5808] usb 8-1: Product: syz [ 87.911982][ T5808] usb 8-1: SerialNumber: syz [ 87.919736][ T5808] usb 8-1: config 0 descriptor?? [ 87.922676][ T6497] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 87.928280][ T5808] cm109 8-1:0.8: invalid payload size 64, expected 4 [ 87.931661][ T5808] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input7 [ 87.979444][ T6483] xt_hashlimit: size too large, truncated to 1048576 [ 88.130171][ C2] cm109 8-1:0.8: cm109_urb_irq_callback: urb status -71 [ 88.358351][ T5854] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 88.374273][ C2] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 88.374406][ T5712] usb 8-1: USB disconnect, device number 2 [ 88.376604][ C2] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 88.386314][ T5712] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 88.415323][ T6517] batman_adv: batadv0: Adding interface: dummy0 [ 88.417384][ T6517] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.425275][ T6517] batman_adv: batadv0: Interface activated: dummy0 [ 88.439752][ T6518] bond1: entered promiscuous mode [ 88.522018][ T6506] overlayfs: empty lowerdir [ 88.525923][ T5854] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 88.531534][ T5854] usb 6-1: can't read configurations, error -71 [ 88.542409][ T6525] netlink: 68 bytes leftover after parsing attributes in process `syz.2.181'. [ 88.595124][ T6527] tmpfs: Unknown parameter 'mpom' [ 88.720583][ T6508] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 88.873031][ T6508] usb 5-1: device firmware changed [ 88.880455][ T1345] usb 5-1: USB disconnect, device number 3 [ 89.018396][ T1345] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.168322][ T1345] usb 5-1: Using ep0 maxpacket: 32 [ 89.172359][ T1345] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.180341][ T5808] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 89.182300][ T1345] usb 5-1: string descriptor 0 read error: -22 [ 89.186743][ T1345] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.190143][ T1345] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.198373][ T1345] usb 5-1: config 0 descriptor?? [ 89.201270][ T6483] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 89.205107][ T1345] hub 5-1:0.0: bad descriptor, ignoring hub [ 89.208635][ T1345] hub 5-1:0.0: probe with driver hub failed with error -5 [ 89.348253][ T5808] usb 8-1: Using ep0 maxpacket: 16 [ 89.424298][ T1345] IPVS: starting estimator thread 0... [ 89.434082][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 89.437163][ T6537] netlink: 'syz.3.183': attribute type 5 has an invalid length. [ 89.440010][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 89.452651][ T6537] geneve2: entered promiscuous mode [ 89.454395][ T6537] geneve2: entered allmulticast mode [ 89.457270][ T46] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 89.461259][ T46] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 89.465220][ T46] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 89.482689][ T46] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 89.518277][ T6538] IPVS: using max 27 ests per chain, 64800 per kthread [ 89.527893][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 89.532134][ T6542] netlink: 'syz.2.187': attribute type 15 has an invalid length. [ 89.536065][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 89.538309][ T6529] usb 5-1: USB disconnect, device number 4 [ 89.539167][ T5808] usb 8-1: unable to get BOS descriptor or descriptor too short [ 89.539782][ T5808] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 89.547281][ T5808] usb 8-1: can't read configurations, error -71 [ 89.553523][ T46] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2048 - 0 [ 89.554857][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 89.556869][ T46] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2048 - 0 [ 89.560139][ T6542] netlink: 'syz.2.187': attribute type 15 has an invalid length. [ 89.562702][ T46] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2048 - 0 [ 89.565125][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 89.571696][ T46] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2048 - 0 [ 89.697110][ T6549] 9pnet_virtio: no channels available for device syz [ 90.167693][ T6570] tls_set_device_offload_rx: netdev not found [ 90.172547][ T6569] 9p: Bad value for 'rfdno' [ 90.246879][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 90.299378][ T6586] batman_adv: batadv0: Adding interface: dummy0 [ 90.301995][ T6586] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.312419][ T6586] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 90.319061][ T6586] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.331494][ T6588] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.353165][ T6590] syzkaller0: entered promiscuous mode [ 90.355810][ T6590] syzkaller0: entered allmulticast mode [ 90.372474][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.377103][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.379933][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.382579][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.385188][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.387759][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.390552][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.393206][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.395889][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.398545][ T6590] tc action pedit offset must be on 32 bit boundaries [ 90.401261][ T6590] 0: reclassify loop, rule prio 0, protocol 800 [ 90.441096][ T6593] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 90.444977][ T6599] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.103940][ T6645] 9pnet_fd: p9_fd_create_unix (6645): problem connecting socket: ./file0: -111 [ 91.142368][ T6647] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 91.313371][ T6653] /dev/nullb0: Can't open blockdev [ 91.340462][ T6664] program syz.3.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.568238][ T10] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 91.707043][ T6673] xt_CONNSECMARK: invalid mode: 0 [ 91.733157][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 91.739371][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 91.742134][ T10] usb 7-1: can't read configurations, error -71 [ 92.135687][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 92.135706][ T40] audit: type=1400 audit(1778820116.120:455): avc: denied { write } for pid=6676 comm="syz.1.231" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.147431][ T40] audit: type=1400 audit(1778820116.130:456): avc: denied { ioctl } for pid=6676 comm="syz.1.231" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.175942][ T40] audit: type=1400 audit(1778820116.160:457): avc: denied { read } for pid=6678 comm="syz.1.232" name="msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.181135][ T6679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.186289][ T40] audit: type=1400 audit(1778820116.160:458): avc: denied { open } for pid=6678 comm="syz.1.232" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.191695][ T6679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.195206][ T40] audit: type=1400 audit(1778820116.170:459): avc: denied { ioctl } for pid=6678 comm="syz.1.232" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 92.235047][ T6684] xt_hashlimit: size too large, truncated to 1048576 [ 92.458266][ T40] audit: type=1400 audit(1778820116.440:460): avc: denied { bind } for pid=6697 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.461988][ T6698] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 92.469359][ T6698] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 92.576409][ T40] audit: type=1400 audit(1778820116.560:461): avc: denied { ioctl } for pid=6710 comm="syz.0.241" path="socket:[16409]" dev="sockfs" ino=16409 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.600394][ T6712] syzkaller0: entered promiscuous mode [ 92.605043][ T6712] syzkaller0: entered allmulticast mode [ 92.705085][ T6720] xt_hashlimit: size too large, truncated to 1048576 [ 92.763543][ T40] audit: type=1400 audit(1778820116.750:462): avc: denied { ioctl } for pid=6719 comm="syz.1.243" path="socket:[16421]" dev="sockfs" ino=16421 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.916829][ T1223] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.932860][ T6728] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 92.939685][ T46] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 92.942936][ T46] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 93.178965][ T6529] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 93.246918][ T6741] fuse: Bad value for 'fd' [ 93.328740][ T6529] usb 6-1: Using ep0 maxpacket: 8 [ 93.332950][ T6529] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.336776][ T6529] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.340497][ T6529] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.343643][ T6529] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.347613][ T6529] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.350600][ T6529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.412758][ T6744] __nla_validate_parse: 4 callbacks suppressed [ 93.412771][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 93.427068][ T40] audit: type=1400 audit(1778820117.410:463): avc: denied { read write } for pid=6740 comm="syz.3.250" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.448205][ T40] audit: type=1400 audit(1778820117.410:464): avc: denied { open } for pid=6740 comm="syz.3.250" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 93.558548][ T6529] usb 6-1: usb_control_msg returned -32 [ 93.560422][ T6529] usbtmc 6-1:16.0: can't read capabilities [ 94.130865][ T6752] ======================================================= [ 94.130865][ T6752] WARNING: The mand mount option has been deprecated and [ 94.130865][ T6752] and is ignored by this kernel. Remove the mand [ 94.130865][ T6752] option from the mount to silence this warning. [ 94.130865][ T6752] ======================================================= [ 94.144617][ T6752] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 94.244717][ T6756] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 94.764720][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'. [ 94.938338][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.938453][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 95.255754][ T6809] netlink: 'syz.2.269': attribute type 5 has an invalid length. [ 95.309749][ T6812] binder: BINDER_SET_CONTEXT_MGR already set [ 95.312487][ T6814] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.315852][ T6812] binder: 6811:6812 ioctl 4018620d 200000000100 returned -16 [ 95.359469][ T6817] evm: overlay not supported [ 95.563420][ T6829] tipc: Started in network mode [ 95.565618][ T6829] tipc: Node identity 4, cluster identity 4711 [ 95.568272][ T6829] tipc: Node number set to 4 [ 95.923267][ T2321] usb 6-1: USB disconnect, device number 5 [ 95.958424][ T6849] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.278'. [ 96.082011][ T6859] fuse: Bad value for 'group_id' [ 96.083628][ T6859] fuse: Bad value for 'group_id' [ 96.229877][ T6872] xt_TPROXY: Can be used only with -p tcp or -p udp [ 96.465418][ T6879] netlink: 'syz.1.290': attribute type 7 has an invalid length. [ 96.468179][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 96.478123][ T6879] netlink: 'syz.1.290': attribute type 7 has an invalid length. [ 96.478228][ T46] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.481133][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 96.484772][ T46] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.484802][ T46] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.495152][ T46] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.703727][ T6885] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 96.707114][ T6885] batman_adv: batadv0: Interface deactivated: dummy0 [ 96.715041][ T6885] batman_adv: batadv0: Removing interface: dummy0 [ 96.722757][ T6885] team0: Port device dummy0 added [ 96.726988][ T6886] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 96.727028][ T6885] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 96.749131][ T6886] team0: Port device dummy0 removed [ 96.754770][ T6886] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.798185][ T2321] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 96.854243][ T6895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6895 comm=syz.2.297 [ 96.948401][ T2321] usb 6-1: Using ep0 maxpacket: 8 [ 96.953421][ T2321] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 96.956377][ T2321] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.959788][ T2321] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.962904][ T2321] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.966229][ T2321] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.971310][ T2321] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.974354][ T2321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.050629][ T6904] No buffer was provided with the request [ 97.057527][ T6904] policy can only be matched on NF_INET_PRE_ROUTING [ 97.057544][ T6904] unable to load match [ 97.060015][ T6899] could not allocate digest TFM handle cryptd(blake2b-160) [ 97.108695][ T5825] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 97.255151][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 97.255168][ T40] audit: type=1400 audit(1778820121.240:490): avc: denied { ioctl } for pid=6906 comm="syz.0.300" path="socket:[16635]" dev="sockfs" ino=16635 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.268822][ T5825] usb 8-1: Using ep0 maxpacket: 8 [ 97.270148][ T5825] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.270162][ T5825] usb 8-1: config 179 has no interface number 0 [ 97.270180][ T5825] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 97.270193][ T5825] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 97.270206][ T5825] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.270219][ T5825] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 97.270232][ T5825] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 97.270252][ T5825] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 97.270263][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.272255][ T6897] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.384102][ T40] audit: type=1400 audit(1778820121.370:491): avc: denied { read write } for pid=5733 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.393193][ T40] audit: type=1400 audit(1778820121.370:492): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.401561][ T40] audit: type=1400 audit(1778820121.370:493): avc: denied { ioctl } for pid=5733 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.410168][ T40] audit: type=1400 audit(1778820121.390:494): avc: denied { ioctl } for pid=6880 comm="syz.1.291" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.412263][ T6916] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 97.418515][ T40] audit: type=1400 audit(1778820121.400:495): avc: denied { write } for pid=6915 comm="syz.2.303" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.418544][ T40] audit: type=1400 audit(1778820121.400:496): avc: denied { open } for pid=6915 comm="syz.2.303" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.418568][ T40] audit: type=1400 audit(1778820121.400:497): avc: denied { ioctl } for pid=6915 comm="syz.2.303" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 ioctlcmd=0x6f2b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.441020][ T40] audit: type=1400 audit(1778820121.430:498): avc: denied { read } for pid=6918 comm="syz.0.304" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.448511][ T6916] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 97.458558][ T40] audit: type=1400 audit(1778820121.450:499): avc: denied { allowed } for pid=6918 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.487104][ T6925] netlink: 'syz.2.306': attribute type 22 has an invalid length. [ 97.490161][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 97.505102][ T6925] netlink: 'syz.2.306': attribute type 22 has an invalid length. [ 97.509258][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 97.516655][ T46] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 97.520685][ T46] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 97.523963][ T46] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 97.528179][ T46] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 97.529590][ T6925] capability: warning: `syz.2.306' uses 32-bit capabilities (legacy support in use) [ 97.667352][ T6936] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 97.670677][ T6936] SELinux: failed to load policy [ 97.683195][ T6529] usb 8-1: USB disconnect, device number 5 [ 97.683307][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 97.688737][ C2] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 97.692973][ T6936] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 97.695511][ T6936] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.701222][ T6936] vhci_hcd vhci_hcd.0: Device attached [ 97.706160][ T6938] vhci_hcd: connection closed [ 97.710145][ T1167] vhci_hcd vhci_hcd.2: stop threads [ 97.714198][ T1167] vhci_hcd vhci_hcd.2: release socket [ 97.716021][ T1167] vhci_hcd vhci_hcd.2: disconnect device [ 97.748814][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 97.755497][ T6940] usbtmc 6-1:16.0: simple usb_control_msg returned 0 [ 97.958249][ T5825] usb 6-1: USB disconnect, device number 6 [ 98.336894][ T6949] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 98.399080][ T6960] netlink: 'syz.3.318': attribute type 2 has an invalid length. [ 98.444855][ T6966] overlay: ./file0 is not a directory [ 98.451576][ T6967] overlayfs: failed to resolve './file0': -2 [ 98.500964][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'. [ 98.567428][ T6976] syzkaller0: entered promiscuous mode [ 98.577208][ T6976] syzkaller0: entered allmulticast mode [ 98.582009][ T6982] SELinux: failed to load policy [ 99.037694][ T6998] dvmrp0: entered allmulticast mode [ 99.491519][ T7011] could not allocate digest TFM handle sha224-ni [ 99.494704][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 99.893132][ T7031] netlink: 'syz.3.339': attribute type 8 has an invalid length. [ 99.986564][ T7048] netlink: 10 bytes leftover after parsing attributes in process `syz.1.342'. [ 100.066549][ T7057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.345'. [ 100.161614][ T7064] kAFS: unable to lookup cell '(,c¾Ģ' [ 100.166357][ T7064] Can't find a SQUASHFS superblock on nullb0 [ 100.560974][ T7094] loop7: detected capacity change from 0 to 7 [ 100.566500][ T7094] Dev loop7: unable to read RDB block 7 [ 100.570358][ T7094] loop7: AHDI p1 p2 p3 [ 100.572229][ T7094] loop7: partition table partially beyond EOD, truncated [ 100.575720][ T7094] loop7: p1 start 1601398130 is beyond EOD, truncated [ 100.582773][ T7097] binder: 7096:7097 ioctl c0306201 200000000080 returned -14 [ 100.583011][ T7094] loop7: p2 start 1702059890 is beyond EOD, truncated [ 100.586937][ T7097] binder: 7096:7097 ioctl c0306201 2000000003c0 returned -14 [ 100.591460][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 100.740280][ T7118] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.753209][ T7116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 100.756105][ T7116] netem: invalid attributes len -17 [ 100.757855][ T7116] netem: change failed [ 100.791145][ T7124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.368'. [ 100.943332][ T7143] netem: change failed [ 101.083000][ T7156] netlink: 'syz.3.376': attribute type 3 has an invalid length. [ 101.087258][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 101.290231][ T7174] EXT4-fs (nbd1): unable to read superblock [ 101.439937][ T770] Bluetooth: Error in BCSP hdr checksum [ 101.442314][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 101.446298][ T7190] Bluetooth: Error in BCSP hdr checksum [ 101.779136][ T7196] openvswitch: netlink: Unknown key attributes 2 [ 102.354014][ T40] kauditd_printk_skb: 151 callbacks suppressed [ 102.354035][ T40] audit: type=1400 audit(1778820126.340:651): avc: denied { name_bind } for pid=7216 comm="syz.1.393" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 102.437694][ T7221] netlink: 'syz.1.396': attribute type 4 has an invalid length. [ 102.508527][ T7224] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 102.511914][ T7224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.397'. [ 102.518406][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.525072][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.526335][ T40] audit: type=1326 audit(1778820126.510:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7226 comm="syz.1.398" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc6f99ce59 code=0x0 [ 102.527569][ T7224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.579867][ T40] audit: type=1400 audit(1778820126.570:653): avc: denied { write } for pid=7226 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.738566][ T40] audit: type=1400 audit(1778820126.720:654): avc: denied { connect } for pid=7236 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.747336][ T40] audit: type=1400 audit(1778820126.730:655): avc: denied { write } for pid=7236 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.789538][ T40] audit: type=1400 audit(1778820126.780:656): avc: denied { getopt } for pid=7236 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.863521][ T40] audit: type=1400 audit(1778820126.850:657): avc: denied { create } for pid=7249 comm="syz.3.403" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.872767][ T40] audit: type=1400 audit(1778820126.850:658): avc: denied { mounton } for pid=7249 comm="syz.3.403" path="/116/file0" dev="tmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.949790][ T40] audit: type=1400 audit(1778820126.930:659): avc: denied { unlink } for pid=5735 comm="syz-executor" name="file0" dev="tmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.034455][ T7254] afs: Unknown parameter 'dyn’’’’’’' [ 103.377364][ T7256] 9pnet_virtio: no channels available for device syz [ 103.498342][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 103.501654][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 103.567485][ T40] audit: type=1400 audit(1778820127.550:660): avc: denied { mount } for pid=7269 comm="syz.0.410" name="/" dev="hugetlbfs" ino=17088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 103.711612][ T7281] capability: warning: `syz.0.415' uses deprecated v2 capabilities in a way that may be insecure [ 103.852807][ T7292] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 103.859791][ T7288] __nla_validate_parse: 76 callbacks suppressed [ 103.859819][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 103.877413][ T7288] openvswitch: netlink: VLAN attribute unexpected. [ 103.972717][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 104.470719][ T7316] syzkaller0: entered promiscuous mode [ 104.472690][ T7316] syzkaller0: entered allmulticast mode [ 104.715445][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 104.719499][ T7324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.752311][ T7324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.822124][ T7333] xt_hashlimit: size too large, truncated to 1048576 [ 104.870538][ T7341] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.920814][ T7337] overlay: ./file2 is not a directory [ 104.962749][ T7347] netlink: 'syz.2.433': attribute type 21 has an invalid length. [ 105.558527][ T7377] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 105.562185][ T7377] SELinux: failed to load policy [ 106.348493][ T7402] syzkaller0: entered promiscuous mode [ 106.351557][ T7402] syzkaller0: entered allmulticast mode [ 106.462685][ T7412] netlink: 'syz.3.457': attribute type 39 has an invalid length. [ 106.508783][ T7415] batadv_slave_0: entered promiscuous mode [ 106.517369][ T7414] batadv_slave_0: left promiscuous mode [ 106.740884][ T7431] input: syz1 as /devices/virtual/input/input8 [ 106.858984][ T39] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 106.879696][ T7438] 9pnet_virtio: no channels available for device syz [ 106.998266][ T39] usb 6-1: device descriptor read/64, error -71 [ 107.043682][ T7441] overlayfs: statfs failed on './file0' [ 107.043684][ T7440] overlayfs: statfs failed on './file0' [ 107.248453][ T39] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 107.378164][ T39] usb 6-1: device descriptor read/64, error -71 [ 107.399413][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 107.399428][ T40] audit: type=1400 audit(1778820131.380:730): avc: denied { name_bind } for pid=7453 comm="syz.0.470" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 107.488907][ T39] usb usb6-port1: attempt power cycle [ 107.524304][ T7459] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.528148][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 107.694784][ T40] audit: type=1400 audit(1778820131.680:731): avc: denied { ioctl } for pid=7458 comm="syz.0.472" path="socket:[20592]" dev="sockfs" ino=20592 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.710316][ T40] audit: type=1400 audit(1778820131.700:732): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 107.719113][ T40] audit: type=1400 audit(1778820131.700:733): avc: denied { mount } for pid=7458 comm="syz.0.472" name="/" dev="ramfs" ino=18405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.727555][ T40] audit: type=1400 audit(1778820131.710:734): avc: denied { mounton } for pid=7458 comm="syz.0.472" path="/file0" dev="ramfs" ino=18406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 107.735426][ T40] audit: type=1400 audit(1778820131.710:735): avc: denied { search } for pid=5443 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.743324][ T40] audit: type=1400 audit(1778820131.710:736): avc: denied { search } for pid=5443 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.750278][ T40] audit: type=1400 audit(1778820131.710:737): avc: denied { search } for pid=5443 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.758028][ T40] audit: type=1400 audit(1778820131.710:738): avc: denied { read } for pid=5443 comm="dhcpcd" name="n32" dev="tmpfs" ino=4268 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.765203][ T40] audit: type=1400 audit(1778820131.710:739): avc: denied { open } for pid=5443 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=4268 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.838271][ T39] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 107.858909][ T39] usb 6-1: device descriptor read/8, error -71 [ 108.098237][ T39] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 108.119061][ T39] usb 6-1: device descriptor read/8, error -71 [ 108.228534][ T39] usb usb6-port1: unable to enumerate USB device [ 108.396794][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.473'. [ 108.939709][ T7505] QAT: Stopping all acceleration devices. [ 108.998252][ T7509] openvswitch: netlink: Duplicate or invalid key (type 0). [ 109.000899][ T7509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.408263][ T39] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 109.538231][ T39] usb 8-1: device descriptor read/64, error -71 [ 109.778295][ T39] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 109.909874][ T39] usb 8-1: device descriptor read/64, error -71 [ 109.981731][ T7550] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 110.038699][ T39] usb usb8-port1: attempt power cycle [ 110.332584][ T7567] sg_write: data in/out 1166606809/134 bytes for SCSI command 0xf4-- guessing data in; [ 110.332584][ T7567] program syz.2.499 not setting count and/or reply_len properly [ 110.389325][ T39] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 110.410922][ T39] usb 8-1: device descriptor read/8, error -71 [ 110.648216][ T39] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 110.668978][ T39] usb 8-1: device descriptor read/8, error -71 [ 110.778515][ T39] usb usb8-port1: unable to enumerate USB device [ 111.127516][ T7589] tmpfs: Unknown parameter 'Šsrquotarb' [ 111.330947][ T7596] netlink: 'syz.2.509': attribute type 11 has an invalid length. [ 111.334313][ T7596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.509'. [ 111.447362][ T7607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7607 comm=syz.0.512 [ 111.480753][ T7609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.513'. [ 112.556892][ T7645] Failed to get privilege flags for destination (handle=0x2:0x5) [ 112.732609][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 112.732625][ T40] audit: type=1400 audit(1778820136.720:786): avc: denied { getopt } for pid=7663 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.965302][ T40] audit: type=1400 audit(1778820136.950:787): avc: denied { setopt } for pid=7673 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.997462][ T40] audit: type=1400 audit(1778820136.980:788): avc: denied { append } for pid=7675 comm="syz.2.532" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.011005][ T7676] kAFS: No cell specified [ 113.423227][ T40] audit: type=1400 audit(1778820137.410:789): avc: denied { name_bind } for pid=7691 comm="syz.2.539" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 113.461836][ T40] audit: type=1400 audit(1778820137.450:790): avc: denied { append } for pid=7695 comm="syz.2.540" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.554140][ T7703] netlink: 224 bytes leftover after parsing attributes in process `syz.1.543'. [ 113.722487][ T7713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'. [ 113.782463][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 113.807163][ T40] audit: type=1400 audit(1778820137.790:791): avc: denied { block_suspend } for pid=7719 comm="syz.0.547" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.868200][ T5854] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 113.880598][ T40] audit: type=1400 audit(1778820137.870:792): avc: denied { bind } for pid=7732 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.887500][ T40] audit: type=1400 audit(1778820137.870:793): avc: denied { read write } for pid=7727 comm="syz.1.549" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 113.894973][ T40] audit: type=1400 audit(1778820137.870:794): avc: denied { open } for pid=7727 comm="syz.1.549" path="/118/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 113.900536][ T7735] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.907453][ T7735] block device autoloading is deprecated and will be removed. [ 113.909259][ T40] audit: type=1400 audit(1778820137.870:795): avc: denied { listen } for pid=7732 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.033711][ T5854] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.039861][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.042757][ T5854] usb 7-1: Product: syz [ 114.044247][ T5854] usb 7-1: Manufacturer: syz [ 114.045950][ T5854] usb 7-1: SerialNumber: syz [ 114.056112][ T5854] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.057281][ T7743] binder: BINDER_SET_CONTEXT_MGR already set [ 114.066339][ T7743] binder: 7742:7743 ioctl 4018620d 200000004a80 returned -16 [ 114.094072][ T34] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.207440][ T7751] /dev/nullb0: Can't open blockdev [ 114.452450][ T7756] Process accounting resumed [ 114.476876][ T7761] netlink: 'syz.3.558': attribute type 7 has an invalid length. [ 114.479909][ T7761] netlink: 'syz.3.558': attribute type 8 has an invalid length. [ 114.483337][ T7761] netlink: 'syz.3.558': attribute type 7 has an invalid length. [ 114.486494][ T7761] netlink: 208784 bytes leftover after parsing attributes in process `syz.3.558'. [ 114.513107][ T5854] usb 7-1: USB disconnect, device number 4 [ 114.558478][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 114.597015][ T6529] libceph: connect (1)[c::]:6789 error -101 [ 114.601856][ T6529] libceph: mon0 (1)[c::]:6789 connect error [ 114.609212][ T6529] libceph: connect (1)[c::]:6789 error -101 [ 114.613448][ T6529] libceph: mon0 (1)[c::]:6789 connect error [ 114.627860][ T7768] ceph: No mds server is up or the cluster is laggy [ 114.660900][ T7776] 9pnet_virtio: no channels available for device syz [ 114.757080][ T7779] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.005669][ T7799] fuse: Bad value for 'fd' [ 115.031614][ T7800] overlay: ./file0 is not a directory [ 115.037016][ T7800] overlay: ./file0 is not a directory [ 115.044127][ T7800] tmpfs: Bad value for 'mpol' [ 115.312499][ T7831] netlink: 104 bytes leftover after parsing attributes in process `syz.2.578'. [ 115.312603][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 115.316465][ T7832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.577'. [ 115.330347][ T770] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.337434][ T770] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.341479][ T34] usb 7-1: Service connection timeout for: 256 [ 115.347023][ T34] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 115.352765][ T770] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.359137][ T34] ath9k_htc: Failed to initialize the device [ 115.361388][ T770] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.371010][ T5854] usb 7-1: ath9k_htc: USB layer deinitialized [ 115.449059][ T7844] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.500806][ T7854] fuse: Bad value for 'user_id' [ 115.503053][ T7854] fuse: Bad value for 'user_id' [ 115.589883][ T7861] loop5: detected capacity change from 0 to 4095 [ 116.663057][ T7885] __nla_validate_parse: 2 callbacks suppressed [ 116.663113][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 116.666122][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056451c00: rx timeout, send abort [ 116.669449][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 116.679877][ T7879] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.681205][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888056451c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.681890][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 116.681922][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 116.684425][ T7879] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.692826][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a45400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.695272][ T7879] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.710139][ T7879] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.724045][ T7889] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 116.729629][ T7891] netlink: 5 bytes leftover after parsing attributes in process `syz.2.592'. [ 116.739601][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.592'. [ 116.762851][ T7891] nbd: nbd2 already in use [ 116.764601][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 116.773990][ T7893] nbd: must specify an index to disconnect [ 116.780742][ T7885] netlink: 'syz.3.590': attribute type 3 has an invalid length. [ 116.783959][ T7885] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 116.787264][ T7885] netlink: 224 bytes leftover after parsing attributes in process `syz.3.590'. [ 116.792057][ T7885] NCSI netlink: No device for ifindex 33022 [ 116.849470][ T7900] fuse: Bad value for 'group_id' [ 116.851389][ T7900] fuse: Bad value for 'group_id' [ 116.996746][ T7911] xt_l2tp: invalid flags combination: 8 [ 117.045350][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 117.062223][ T7914] program syz.2.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.067057][ T7914] ata1.00: non-matching transfer count (32/0) [ 117.367247][ T7928] netlink: 212380 bytes leftover after parsing attributes in process `syz.2.597'. [ 117.371565][ T7928] openvswitch: netlink: Message has 6 unknown bytes. [ 117.376510][ T7929] rdma_op ffff8880268f69f0 conn xmit_rdma 0000000000000000 [ 117.376808][ T7928] rdma_op ffff8880577799f0 conn xmit_rdma 0000000000000000 [ 117.460287][ T7933] syzkaller1: entered promiscuous mode [ 117.462219][ T7933] syzkaller1: entered allmulticast mode [ 117.753958][ T184] Bluetooth: (null): Invalid header checksum [ 117.847448][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.858513][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.859745][ T7879] Bluetooth: (null): Invalid header checksum [ 117.862265][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.872401][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.881067][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.885642][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.890467][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.895422][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.901075][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.905756][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.910524][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.916883][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.924431][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.928881][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.935507][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.941759][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.945849][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.953181][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.956937][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.961227][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.964776][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.968170][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.971783][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.972174][ C2] vcan0: j1939_tp_rxtimer: 0xffff888056a44000: rx timeout, send abort [ 117.975639][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.978955][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a44000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.982175][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.986614][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e84d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.989971][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 117.998110][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.001708][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.005021][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.008722][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.012837][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.016328][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.019874][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.023362][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.026720][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.030433][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.034309][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.037678][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.041127][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.044564][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.048142][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.052091][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.056131][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.062991][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.067395][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.072265][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.076237][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.080815][ T39] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 118.081267][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.088298][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.091946][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.095805][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.099433][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.103027][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.107004][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.110797][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.114327][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.117974][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.121463][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.125011][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.129037][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.133436][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.137102][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.140952][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.144808][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.148874][ T7950] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 118.238540][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 118.243073][ T39] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 118.249552][ T39] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 118.253668][ T39] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 118.257163][ T39] usb 7-1: Product: syz [ 118.259310][ T39] usb 7-1: Manufacturer: syz [ 118.261299][ T39] usb 7-1: SerialNumber: syz [ 118.266929][ T39] usb 7-1: config 0 descriptor?? [ 118.270232][ T7956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.276654][ T39] hub 7-1:0.0: bad descriptor, ignoring hub [ 118.279329][ T39] hub 7-1:0.0: probe with driver hub failed with error -5 [ 118.471590][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 118.471608][ T40] audit: type=1400 audit(1778820142.460:831): avc: denied { append } for pid=7964 comm="syz.0.609" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.484167][ T40] audit: type=1400 audit(1778820142.470:832): avc: denied { connect } for pid=7955 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.499462][ T40] audit: type=1400 audit(1778820142.490:833): avc: denied { read } for pid=7967 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.545093][ T40] audit: type=1400 audit(1778820142.520:834): avc: denied { create } for pid=7955 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.552142][ T40] audit: type=1400 audit(1778820142.530:835): avc: denied { setopt } for pid=7955 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.559960][ T40] audit: type=1400 audit(1778820142.540:836): avc: denied { bind } for pid=7955 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.697398][ T40] audit: type=1400 audit(1778820142.680:837): avc: denied { create } for pid=7985 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 118.705006][ T40] audit: type=1400 audit(1778820142.680:838): avc: denied { write } for pid=7985 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 118.725212][ T7986] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7986 comm=syz.3.616 [ 118.856497][ T7986] veth3: entered allmulticast mode [ 118.902624][ T7986] bond1: (slave veth3): Enslaving as an active interface with an up link [ 118.945718][ T7988] bond1 (unregistering): (slave veth3): Releasing backup interface [ 118.953593][ T7988] bond1 (unregistering): Released all slaves [ 119.107242][ T40] audit: type=1400 audit(1778820143.090:839): avc: denied { read write } for pid=7997 comm="syz.3.618" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 119.117534][ T40] audit: type=1400 audit(1778820143.090:840): avc: denied { open } for pid=7997 comm="syz.3.618" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 119.135597][ T7996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 119.224774][ T8005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.295314][ T8014] UHID_CREATE from different security context by process 400 (syz.1.621), this is not allowed. [ 119.361804][ T7880] raw-gadget.0 gadget.2: failed to queue suspend event [ 119.438286][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 119.460934][ T7879] raw-gadget.0 gadget.2: failed to queue suspend event [ 119.538380][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 119.563190][ T8032] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.563230][ T7879] raw-gadget.0 gadget.2: failed to queue suspend event [ 119.580504][ T8035] FAT-fs (loop0): unable to read boot sector [ 119.650380][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 119.682838][ T7880] raw-gadget.0 gadget.2: failed to queue suspend event [ 119.750385][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 119.780748][ T7880] raw-gadget.0 gadget.2: failed to queue suspend event [ 119.858312][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 119.880980][ T7879] raw-gadget.0 gadget.2: failed to queue suspend event [ 119.948345][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 119.969543][ T184] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.048181][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 120.069250][ T184] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.148622][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 120.169493][ T184] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.249412][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 120.270352][ T7880] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.350296][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 120.371876][ T184] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.438246][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 120.469481][ T184] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.538361][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 120.566133][ T7879] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.641752][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 120.672297][ T7879] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.738274][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 120.766819][ T7879] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.784184][ T8095] process '/newroot/164/file0' started with executable stack [ 120.807664][ T8099] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 120.812965][ T8099] Cannot find del_set index 2 as target [ 120.817679][ T8103] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 120.840478][ T7956] raw-gadget.0 gadget.2: failed to queue resume event [ 120.862760][ T7879] raw-gadget.0 gadget.2: failed to queue suspend event [ 120.891386][ T7956] raw-gadget.0 gadget.2: failed to queue disconnect event [ 120.999217][ T39] usb 7-1: USB disconnect, device number 5 [ 121.028560][ T8117] 9pnet_virtio: no channels available for device syz [ 121.096003][ T8121] CIFS: VFS: UNC: missing share name [ 121.110013][ T8121] CIFS: VFS: Malformed UNC in devname [ 121.113631][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.117468][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.122244][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.125901][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.130149][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.133195][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.135836][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.138997][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.142031][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.144990][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.147979][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.150924][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.154348][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.158218][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.161103][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.163736][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.166466][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.170403][ T8124] binder: 8122:8124 ioctl c0306201 200000000640 returned -22 [ 121.374725][ T8154] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 121.376703][ T8155] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 121.471519][ T8161] bond0: (slave dummy0): Releasing backup interface [ 121.478788][ T8161] batman_adv: batadv0: Adding interface: dummy0 [ 121.482172][ T8161] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.495194][ T8161] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 121.573552][ T8168] vivid-000: kernel_thread() failed [ 122.018304][ T8207] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 122.022299][ T8207] SELinux: failed to load policy [ 122.066717][ T8214] 9pnet_virtio: no channels available for device syz [ 122.096816][ T8220] netlink: 'syz.0.682': attribute type 4 has an invalid length. [ 122.105155][ T8221] netlink: 'syz.0.682': attribute type 17 has an invalid length. [ 122.108310][ T8220] overlayfs: failed to resolve './file0/file0': -2 [ 122.132022][ T8225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=8225 comm=syz.3.683 [ 122.193940][ T8229] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 122.209156][ T8229] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 122.277963][ T8218] mmap: syz.2.681 (8218) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.291505][ T8229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.331391][ T8239] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 122.406610][ T8236] bond2 (unregistering): Released all slaves [ 122.472335][ T8251] 9pnet_virtio: no channels available for device syz [ 122.548523][ T8262] 9pnet_virtio: no channels available for device syz [ 122.549979][ T8242] comedi comedi4: bad chanlist[0]=0x0000000a chan=10 range length=2 [ 122.583619][ T8263] __nla_validate_parse: 8 callbacks suppressed [ 122.583639][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 122.590694][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 122.755419][ T8281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8281 comm=syz.0.698 [ 122.764588][ T8281] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 122.838356][ T5825] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 122.942120][ T8292] 9pnet_virtio: no channels available for device syz [ 122.998731][ T5825] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 123.003893][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.008166][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 111, changing to 10 [ 123.016160][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 57734, setting to 1024 [ 123.020865][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.024032][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.024064][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 111, changing to 10 [ 123.024080][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 57734, setting to 1024 [ 123.024094][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.025056][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.040947][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 111, changing to 10 [ 123.040966][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 57734, setting to 1024 [ 123.040981][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.048228][ T8305] fuse: Unknown parameter '' [ 123.050869][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.058839][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 111, changing to 10 [ 123.062328][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 57734, setting to 1024 [ 123.065792][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.069978][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.073085][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 111, changing to 10 [ 123.076606][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 57734, setting to 1024 [ 123.080528][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.083447][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.086414][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 111, changing to 10 [ 123.090798][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 57734, setting to 1024 [ 123.094347][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.098686][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.101844][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 111, changing to 10 [ 123.105578][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 57734, setting to 1024 [ 123.109244][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.112447][ T5825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.115434][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 111, changing to 10 [ 123.119307][ T5825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 57734, setting to 1024 [ 123.122860][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.126623][ T5825] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.129878][ T5825] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.132508][ T5825] usb 6-1: Product: syz [ 123.133833][ T5825] usb 6-1: Manufacturer: syz [ 123.135323][ T5825] usb 6-1: SerialNumber: syz [ 123.142617][ T5825] usb 6-1: config 0 descriptor?? [ 123.149606][ T5825] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 123.323784][ T8324] 9pnet_virtio: no channels available for device syz [ 123.341249][ T8326] 9pnet_virtio: no channels available for device syz [ 123.362799][ T8265] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.377798][ T8265] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 123.444261][ T8332] BIDI support in bsg has been removed. [ 123.525413][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 123.525429][ T40] audit: type=1400 audit(1778820147.510:875): avc: denied { write } for pid=8339 comm="syz.0.717" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 123.580742][ T8346] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 123.583034][ T8346] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.586322][ T8346] vhci_hcd vhci_hcd.0: Device attached [ 123.591108][ T8347] vhci_hcd: cannot find the pending unlink 4 [ 123.623183][ T40] audit: type=1400 audit(1778820147.610:876): avc: denied { getopt } for pid=8343 comm="syz.0.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.623638][ T8351] netlink: 'syz.0.719': attribute type 2 has an invalid length. [ 123.632497][ T8351] netlink: 46 bytes leftover after parsing attributes in process `syz.0.719'. [ 123.642771][ T8351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.719'. [ 123.646525][ T8351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.719'. [ 123.739196][ T40] audit: type=1400 audit(1778820147.730:877): avc: denied { setopt } for pid=8357 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.739384][ T8358] openvswitch: netlink: Duplicate or invalid key (type 0). [ 123.749252][ T8358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.752916][ T8347] vhci_hcd: connection closed [ 123.753750][ T13] vhci_hcd vhci_hcd.3: stop threads [ 123.757514][ T13] vhci_hcd vhci_hcd.3: release socket [ 123.763508][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 123.763656][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 123.886728][ T8362] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 123.894964][ T8362] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 123.913004][ T8362] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 123.926065][ T8362] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 123.988588][ T40] audit: type=1400 audit(1778820147.970:878): avc: denied { write } for pid=8361 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.002342][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 124.002424][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 124.005115][ T8362] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 124.005179][ T8362] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 124.005221][ T8362] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 124.012754][ T8370] sit1: entered allmulticast mode [ 124.021387][ T8362] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.047449][ T8362] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 124.048956][ T8371] netlink: 14 bytes leftover after parsing attributes in process `syz.0.723'. [ 124.109971][ T8371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.126322][ T8371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.144658][ T8371] bond0 (unregistering): Released all slaves [ 124.179745][ T5825] syz1: Port: 1 Link DOWN [ 124.215091][ T46] smbdirect: ib_dev[syz1] removed [ 124.285824][ T8375] overlayfs: missing 'lowerdir' [ 124.550737][ T8377] block nbd3: shutting down sockets [ 125.326486][ T8397] xt_nat: multiple ranges no longer supported [ 125.422849][ C2] usb 6-1: yurex_control_callback - control failed: -2 [ 125.433613][ T10] usb 6-1: USB disconnect, device number 11 [ 125.469157][ T10] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 125.528451][ T8402] 9pnet_virtio: no channels available for device syz [ 125.673534][ T8409] macsec1: entered promiscuous mode [ 125.911796][ T40] audit: type=1400 audit(1778820149.900:879): avc: denied { getopt } for pid=8411 comm="syz.3.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.016989][ T40] audit: type=1400 audit(1778820150.000:880): avc: denied { read } for pid=8419 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.019626][ T8421] binder_alloc: 8419: binder_alloc_buf, no vma [ 126.087031][ T40] audit: type=1400 audit(1778820150.070:881): avc: denied { setopt } for pid=8426 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.101609][ T8429] netlink: 180 bytes leftover after parsing attributes in process `syz.3.743'. [ 126.111629][ T8429] netlink: 180 bytes leftover after parsing attributes in process `syz.3.743'. [ 126.176151][ T8435] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 126.221762][ T8435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.237485][ T40] audit: type=1400 audit(1778820150.220:882): avc: denied { accept } for pid=8437 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.245245][ T8435] vlan4: entered allmulticast mode [ 126.249666][ T8435] macsec0: entered allmulticast mode [ 126.252447][ T8435] veth1_macvtap: entered allmulticast mode [ 126.255837][ T8435] bond1: (slave vlan4): Error -34 calling dev_set_mtu [ 126.384412][ T40] audit: type=1400 audit(1778820150.370:883): avc: denied { accept } for pid=8437 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.696004][ C0] [ 126.697004][ C0] ============================= [ 126.698987][ C0] [ BUG: Invalid wait context ] [ 126.701264][ C0] syzkaller #0 Tainted: G L [ 126.704139][ C0] ----------------------------- [ 126.706186][ C0] syz.2.735/8404 is trying to lock: [ 126.708334][ C0] ffff88805a2752d0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x253/0xe80 [ 126.711731][ C0] other info that might help us debug this: [ 126.714157][ C0] context-{2:2} [ 126.715629][ C0] 1 lock held by syz.2.735/8404: [ 126.717705][ C0] #0: ffff88805a275850 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x245/0xe80 [ 126.722184][ C0] stack backtrace: [ 126.723893][ C0] CPU: 0 UID: 0 PID: 8404 Comm: syz.2.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.723919][ C0] Tainted: [L]=SOFTLOCKUP [ 126.723925][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.723933][ C0] Call Trace: [ 126.723943][ C0] [ 126.723951][ C0] dump_stack_lvl+0x100/0x190 [ 126.723978][ C0] __lock_acquire+0xfa4/0x2630 [ 126.723999][ C0] ? __lock_acquire+0x4a5/0x2630 [ 126.724017][ C0] ? xa_load+0x149/0x2c0 [ 126.724062][ C0] ? xa_load+0x149/0x2c0 [ 126.724085][ C0] lock_acquire+0x1b1/0x370 [ 126.724104][ C0] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 126.724126][ C0] _raw_read_lock_irqsave+0x46/0x90 [ 126.724147][ C0] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 126.724164][ C0] kvm_xen_set_evtchn_fast+0x253/0xe80 [ 126.724181][ C0] ? kvm_xen_set_evtchn_fast+0x245/0xe80 [ 126.724199][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 126.724282][ C0] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 126.724303][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 126.724327][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 126.724347][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 126.724369][ C0] xen_timer_callback+0x1db/0x2a0 [ 126.724387][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 126.724404][ C0] ? __hrtimer_run_queues+0x383/0xa00 [ 126.724429][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 126.724452][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 126.724469][ C0] __hrtimer_run_queues+0x142/0xa00 [ 126.724497][ C0] hrtimer_interrupt+0x3e5/0x940 [ 126.724518][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 126.724542][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 126.724565][ C0] [ 126.724570][ C0] [ 126.724576][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.724595][ C0] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 126.724618][ C0] Code: ff ff ff ff 65 0f c1 15 f1 b5 80 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e9 57 39 03 00 31 c0 [ 126.724633][ C0] RSP: 0018:ffffc90006fcfbb0 EFLAGS: 00000292 [ 126.724650][ C0] RAX: 0000000000000000 RBX: ffffffff8e7e5700 RCX: 0000000000000001 [ 126.724660][ C0] RDX: 0000000000000046 RSI: ffffffff8defc0c2 RDI: ffffffff8c1c3800 [ 126.724671][ C0] RBP: ffff888029cfca00 R08: 0000000000000005 R09: 0000000000000000 [ 126.724682][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 126.724691][ C0] R13: 0000000000000246 R14: 0000000000000000 R15: ffff888029cfca00 [ 126.724751][ C0] __might_resched+0x248/0x330 [ 126.724787][ C0] ? __pfx___might_resched+0x10/0x10 [ 126.724809][ C0] __might_fault+0x8b/0x140 [ 126.724831][ C0] _copy_from_user+0x29/0xd0 [ 126.724855][ C0] restore_sigcontext+0xcd/0x6a0 [ 126.724871][ C0] ? __pfx_restore_sigcontext+0x10/0x10 [ 126.724892][ C0] ? __pfx_restore_altstack+0x10/0x10 [ 126.724911][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.724930][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 126.724952][ C0] __do_sys_rt_sigreturn+0x229/0x2c0 [ 126.724968][ C0] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 126.724982][ C0] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 126.725003][ C0] ? rcu_is_watching+0x12/0xc0 [ 126.725027][ C0] do_syscall_64+0x10b/0xf80 [ 126.725044][ C0] ? clear_bhb_loop+0x40/0x90 [ 126.725059][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.725072][ C0] RIP: 0033:0x7ff55a73e1d9 [ 126.725084][ C0] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 126.725099][ C0] RSP: 002b:00007ffd91718380 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 126.725116][ C0] RAX: ffffffffffffffda RBX: 000000000001ea35 RCX: 00007ff55a73e1d9 [ 126.725126][ C0] RDX: 00007ffd91718380 RSI: 00007ffd917184b0 RDI: 0000000000000011 [ 126.725136][ C0] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 126.725145][ C0] R10: 00007ffd91719150 R11: 0000000000000246 R12: 00007ffd91719170 [ 126.725154][ C0] R13: 00007ff55aa15fac R14: 000000000001ea67 R15: 00007ffd91719150 [ 126.725170][ C0] [ 126.891548][ T40] audit: type=1400 audit(1778820150.880:884): avc: denied { read } for pid=8442 comm="syz.1.746" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1