last executing test programs: 4.049502941s ago: executing program 3 (id=949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x7fffffff, 0xffffffff80099070, 0x0, 0x1, 0x9, 0x100000}}, 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0xe0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, 0x0) chdir(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000040)) getpriority(0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e08007b0cafbd522383f280"], 0xb) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x64}}, 0x200080c4) 3.178741098s ago: executing program 3 (id=964): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001a00100029bd7000000000000a0000000000ff0000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="080010f598040100430000000000"], 0x34}}, 0x20000000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) accept4(r0, &(0x7f00000000c0)=@rc={0x1f, @none}, &(0x7f0000000040)=0x80, 0xc00) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r1, 0xe1bd4000) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r3, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf5}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000002b80)=0xfffffff4, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="814f0400000000002000128008000100687372001400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) sendmmsg$inet(r4, &(0x7f0000002bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000000500)="166e7cb35adfc858e8ec399d2dd6ab3d03007b3bc643c08168b8dfe8b856ed924bb41066bdc8497a9d297f6cc30755582e046131221343c71d7d1d9088fc4747d9b582b900f6802c639dd4096aad5b169b85f86045df1d539a5477726df1b52fcec3101640aca54591b4b43384d0ddbbdbc8b7f991531885651568d4d25ac3ebce269d8dd781f3e0949b10de6d1db7be4430ec8f365876d0b441a707a71e2abd4e79dedbc9fd21e3aa0694f5e1ed96bc79c5259592463085b211716953d2204b708663137c2512d38d46e9842e9323976d283deaeda3596ab7ff82f3", 0xdc}, {&(0x7f0000000200)="30f5e0850b347866162df01e203a7c839a109b2b36e79e7b9aecf9e19e9e66a6d86b51fb15ff3c4f9a44ea38d19de2981aaf54b123d344901f89083f4d11924adf1a27b3fa41e666c6355e50e4000f9a098743790937f768d3fa54c5d30f9fa8e2f5fa0cee0fd14b40861ef80ec6e563663005a4cc8e", 0x76}, {&(0x7f0000000300)="0c2d3752b3bbde445a95d533f7cf5b635d9759a6f987a73069d2d404eb1aaeed5449e3f4bf79860d3a9fa0c5c01153a2ba4347b0e4ace887904ff1e69161b54f311469795d3d64b70627a6e3a1035bf6436f7273c71a95d53c036d1db4b7d057921e2f4285c7a2822ce8821859830645abbc95348e247f242f2fb62aa8df13362ed77208ec26183d2bc25b", 0x8b}, {&(0x7f0000000280)="27d0c796159d", 0x6}, {&(0x7f0000000600)="5d880601ca6816abf3f122c867fe79977428992e803c8e1ae012c90ab2122088214b1cf065d7f36c7bc6f444becc5ac75582cf68024c20ab7eceedc75938f4454ad291b297d78b53a54d1a930bff218a1bc41d4d3da9fc94092dd6f005f4344e002d94b0e390d23c406964147105ddc179d5adb9feac5756377745ca64285ef8e244d5d19c76b851c41b3d8011fde71af3e4793991cd34954c16d3b5a6fc14d1b5119cd1c2d804d87020d8d4d0ac2cf4c23c1209f1dd128d18ed061ed327b9", 0xbf}, {&(0x7f00000006c0)="fe87ebc2bf56f54bbbe2e0647d4a64994d1aadca5afd620c4751b41363827d4be4e1136c71096c5b1491678f520f4e4bcdbd8dab9cbfa7d13fb5e025a4", 0x3d}, {&(0x7f0000000700)="175291ecf4d7db116e9ebdbbb0360ed767e2cbc88af955fa8518a9559536103a4d2ec0c66d13ccf284335e85326bf9a8af306d8beac7f9c2b0797251eff2347ec0b956a5a58a627e50e03cdeae243b2b579ce7103da181956c3acd8883bb9bb7ef5334db259780020e748f6c9a0c", 0x6e}, {&(0x7f0000000780)="a9af1fdf6c812ba136b2539ef771ce87d08c433d77e03fb793dcf7733e1309f8d01383dd7e86226c", 0x28}], 0x9, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x85}}, @ip_retopts={{0x50, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0xa4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @multicast1, @multicast2, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @ra={0x94, 0x4}, @generic={0x88, 0x7, "794751abef"}, @noop, @rr={0x7, 0xb, 0xbd, [@loopback, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8005}}], 0x98}}, {{&(0x7f0000000940)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="373bad285890eef4bd87605bc3b5dc8fe1bc6ef82be18b741af2f28f5b917c12680e21db89ecf87c", 0x28}, {&(0x7f00000019c0)="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", 0xff}], 0x3, &(0x7f0000001b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9340}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x30}}, {@multicast2, 0x7}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x53, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbe4}, {@broadcast, 0x6}, {@empty, 0xe}, {@rand_addr=0x64010100, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @generic={0x94, 0x3, "e5"}, @timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010102, 0x72b}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe103}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xd7, [@empty, @broadcast, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, @local]}]}}}], 0x140}}, {{&(0x7f0000001c40)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001c80)="d488424168e098533a7bf1281786120ba4f9b57293c73a105b29b5928cacc2d9ab15129ab05d37ff56e908467a8419ea00fc5ffd140f3bbcd04d522b9e3432ebbf1a4a50a8d665f51880260b001b139c3f5ac250be2cec4b6ec4d5904eaae64fcc5062b14e6e1b4abb072d49f53f8c238c3c23059c02e858dc3005ab44256816f4e6e6fc062c28f254b356acb2988380e51875724580a6328f5add8c4fa724", 0x9f}, {&(0x7f0000001d40)="793169f5dea23a5b", 0x8}], 0x2, &(0x7f0000001dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x499f6c2f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @private=0xa010100}}}], 0x98}}, {{&(0x7f0000001e80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000002300)=[{&(0x7f0000001ec0)="0f37ed598ea9b7c30ddc73aa6b5400c2cede9c42836c1eed1e836ccf8bae203ac53c768a0599cce97f486eb8f111e8e8bdfb6360854fb1a438cddacb38b3a9186fa21f3c91479aeb7f027ea382a7b8f69217ccfbc3c956843c4d79ff4ca4ffd7cf13f0462f1709099cd9a718a2f1687d633e0fef7d35edd1f84eb47b96ec306b12a392972f884dde62893bb46d6c2d1987e785d5fd240623952ba1c1b762c21c49508c592f8be3d440dca98b6bcc4f4adf02e9021f", 0xb5}, {&(0x7f0000001f80)="ec9670ecdcdfa2d6a69b6227860bde74d170743e34e023927b57c104a9b996587a696d2ea7c508ccef06fb99815ce7d101471132697d", 0x36}, {&(0x7f0000001fc0)="e8d96520b5079bc03d193ba849c8a35a43cdc5950687491a4b0679c0d1502076e82b522eae8111ca1e4cbc3f154c7d9ddea7e4415597a7a1c1554d76f7e5e9ece3ea379ca04928ce8c5e88831a962f6726f7ea2130aeb8ae3920dbcd1a6f2a57cba49b8ce1358e8656e8db766513196f8536758022b85a7b70516216ec7e0af64ce81fe24954b54f8691ff0fe9933c82d5be4e9532297f055deedf675367fdf8c78e1fdc38fe7ca203b77e74f99292ee5dd3cdce3849c0aa84da1de5e10afec2fb92c3c5", 0xc4}, {&(0x7f00000020c0)="33bb237b97164f", 0x7}, {&(0x7f0000002100)="7842406a7ae3f01ed76639fedc11f5c3982014711e40a66d25469b5b915f20f90f433e0cb25095153751a8254aabf1f611aa74e6083c8c4f32f280b7ef9c83d0dd7db83d364fe2de32d621dcd57f1a216e0f98c45430c40831e615923f906ec555408f56e239c785277ff2deeaca3313fd1480c7f5ed5a4a9637bfbf6b56dc0f9566133e93629bb7b9c0ad40deb629d88ad8141743f3419ab98c", 0x9a}, {&(0x7f00000021c0)="7f624425334544a4436af90153307728e1f80cc8b9e29f0fd7dee740dd11372644476cd6edb8ae33d3febd3f8211f8d15137e636439d46d7624ddf282693116cd6a01703206777237d7f21a739252cef24aabb58969724bd850e238426c1e4b9d911b241c1dace82cee0dbd4c66dff94b3b5e28af6782d3c7231a59a6e536969efb5885ac7a9614f81c9e12293b3c9751946a6ce0c684430487c37d7eeb36b4293fb7d50413558bb491835da9dbfcf02cf9f6cd2fc8e627423e652cb0eb6c3b27c1b7d49f41b773926a1394766c63824", 0xd0}, {&(0x7f00000022c0)="c9fef925ae5ca335b3cf45faabd9d12fac7f716898f6346b7d00b43f032f3eb575b61c1ad954a0b4f3610976e338f9f6", 0x30}], 0x7}}, {{&(0x7f0000002380)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000002ac0)=[{&(0x7f00000023c0)="53e1c6566e61b6b640697cf4c5bf9ff1090e7a46b0983334b6d5f621122831a3738d02d701605d45c29da72739772fd157734bff869c6ebaf541033bc4a245b390019d05aad467fd1d9f38465faae031d9b84f7f39f65f869b1340efaf26f9d1230b2e84d15572dbe3af003b168873301f28a1ad41cf208501c1ba6762b643a83700a8def2848060968c455b647619739d45b105dacc56", 0x97}, {&(0x7f0000002480)="be69048f8d4015b9675fee043cb072b30e45d56917af136709466542bdb9040c93d5a83fb39d5d653ab7e094c680e3c2589845b3f773070bab764472da865cf590a59cd0e2d9216579a42445675efdb7a3dc86ff1b332ef3536abc32d28a143ddff5fe5a680637e433cd2566702e280b9dc1f00cbdce26a9c3001ef48936a81f534728d8bdb471d00467a1fb2f6af476404dfd22bd98b7b1216572b81a1df2027b5e50120107e66fb63e402055fa9b5711839e09c778f8d5a6e06fa3d6bb2d94c71a3f6b72991479c8265d21363c97d2", 0xd0}, {&(0x7f0000002580)="1cfce68ad23e02838e94f4ecdb815173fdbfb6cd660004fb21f74718122e91077aba6310ae24265d142bba86c37c6a0520cfb00ac103", 0x36}, {&(0x7f00000025c0)="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", 0xfe}, {&(0x7f00000026c0)="495abe0adb14e652a9685a413c2d7384ec", 0x11}, {&(0x7f0000002700)="39be7489f55b4a690c8bb2a4bcb21eac5f4a6de71336c9eee54a988fddedc7d6d839ced9d17bef9ea74001224de679089ce8f85f1f498d5216c048d0069af8313cb32e5b36dd76d80fc7fa0a93b82d118edc93a2e57fcbd6cdb90ec803edd4ae989bc41801c15c66feed34de90994df9760ba094ddc774c29c917eda044e0b4866fefb31a6a29e7e8e40036b75e6c21100", 0x91}, {&(0x7f00000027c0)="c667083d47a8d7b1c0b9065ee40ec04de706194ff57aeeb75cdaf58fca64a8fbc7c51dbf4909cc5c033578f1b0659793cd4dacf66173eefb4a6252dcf26d6a01772295f11bf87dfec7590df254cdcaaab486e057a6a7f56477459a9eecfcfbc5251f0c8d2472d1803fdd21d94946867f662230809e5d63b01cbfc9dcc856ba5a14c79a4dec9b20a691983470205c0a24b47937cdea0642e0a7f01c58dd52f332e980a015fcbb6cbca81162e30ebdb8a86ae14cc4661411c5e6a92390acf4847d771b19ad18d9a0fd290400ef0c46d0a1ca2624474ed7953ad572635638c9353f60c17618e7c0", 0xe6}, {&(0x7f00000028c0)="3dd0bfd8628ea4702a0368b418db4814cc86", 0x12}, {&(0x7f0000002900)="1f1f401fc4613be861088a42a0358df341c0a956cf808e56a6b8f299a9626f5fb21c6f962473be5328c5acbe0b4d39ea3a65c3131d3c629db125d8a6ffa50a08ead4b8a7b6a7936eec1d197fdcc168a505deb64aad0af741a4f926303fc14a9b7dec913757f5d52fdbc4bc451ef389199d161fe44b21d04acde8a5e966aeb329a3", 0x81}, {&(0x7f00000029c0)="e2a93f2fb350c2abb3148931162bcea071dab1cd707637259bef39c32a214eccdfbd6d54e23069c33e0f8c2b7f3d9796346f10c1cdb516671b3df8f40f6111c42289f2da99fe553e3b5d4e207d7ad8c1842638ca7e5cb048b15f39792de4d893150991e76773279d483c8f06a207bb4f5f1e59e8e2f2748c466da7d1c1adeefd7c1929fce8e2e20cfdc3e317dc55fdb7f8d42836f3f4c0b7542f1221962740742d9c399c1faaa6c64742fd3478b4deccfc2261f232b95ef9b88259da7e182d38d5bacee177b574e3ee66a305399177572545e896da6204dc91dc30108ccb46bf87f5b2cff265b22d8f23d00ae965f2aa864c70c4e6", 0xf5}], 0xa, &(0x7f0000002b80)}}], 0x5, 0x10) 3.171331996s ago: executing program 3 (id=965): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x14, 0x32, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) 3.089989245s ago: executing program 3 (id=966): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000068000100030010000000008000000000000000000c00020001000000150000000c000c80f2ffffffffffffff0600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xdb) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = dup2(r2, r3) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@empty, @multicast2, 0x0}, &(0x7f0000000200)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x7, 0x0}, 0x8) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r7, 0x4) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r10, &(0x7f0000000800)=""/4096, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500bdea7d54000086000000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x10, 0x0, 0x0, 0x40f00, 0x1, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x400, 0x10c}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000380)=[r9, 0xffffffffffffffff, r10], &(0x7f00000003c0)=[{0x4, 0x5, 0x7, 0x4}, {0x4, 0x1, 0x7, 0x9}, {0x2, 0x5, 0x0, 0xc}, {0x3, 0x2, 0xb, 0x8}, {0x4, 0x1, 0x7, 0x2}, {0x5, 0x4, 0x4, 0xb}, {0x0, 0x4, 0x0, 0x6}, {0x3, 0x1, 0xe, 0xb}, {0x0, 0x1, 0xa, 0x5}, {0x1, 0x3, 0x0, 0x5}], 0x10, 0xffffffff}, 0x94) 2.967646296s ago: executing program 3 (id=967): bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_emit_ethernet(0x2e, &(0x7f0000000c00)={@broadcast, @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f00000000c0)={0x2, 0x6, 0xfffffffc, 0x7, 'syz0\x00', 0x27}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000100)=0x4) 2.840060937s ago: executing program 3 (id=973): r0 = socket(0x2, 0x5, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x9}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe}, {0xf, 0xffe0}, {0x8, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) write(r3, &(0x7f00000001c0)="469a323df59e9eff198802f6ba3c59", 0xfffffffffffffd44) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[], 0xb}, 0x4c850) socket$packet(0x11, 0x1, 0x300) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) syz_open_dev$loop(&(0x7f0000000080), 0x402, 0x2d80) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) r6 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.829575012s ago: executing program 2 (id=1002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x80a0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x48000000000, r2}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x10002, 0x4, 0x3000, 0x2000, &(0x7f0000314000/0x2000)=nil, 0x0, r2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000140)={@host, 0x8001}) capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, 0x0) 1.667148533s ago: executing program 2 (id=1009): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x45c8c0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000180)={{0xdddd1000, 0x4000, 0xb, 0x4, 0xf6, 0xc0, 0x4, 0x7, 0x3, 0x2, 0x6, 0x7f}, {0x4000, 0xc000, 0xf, 0x6, 0x6, 0x99, 0xf9, 0xff, 0xa, 0x9, 0xc, 0x7}, {0x1, 0xffff1000, 0xd, 0x8, 0x6, 0x7, 0xb, 0x33, 0x3, 0x1, 0x6}, {0x8080000, 0xeeee8000, 0x0, 0x6, 0x6, 0x4, 0x0, 0x3, 0x56, 0x3, 0x9, 0x6f}, {0x9000, 0x3000, 0x0, 0xcb, 0x6, 0x5, 0x3, 0xc6, 0x7f, 0x8, 0x80, 0x8}, {0xddddb000, 0x3000, 0xb, 0x9, 0x5, 0xf7, 0x53, 0x0, 0xf, 0xfa, 0x1, 0xf4}, {0x25000, 0x1, 0x10, 0x4, 0x4, 0x2, 0x7, 0x0, 0x9e, 0x0, 0xe8, 0x6}, {0x6000, 0xdddd0000, 0x9, 0x40, 0x78, 0x0, 0x9, 0x5, 0xf, 0x3c, 0x6, 0x2}, {0x0, 0x6}, {0xdddd1000, 0x4}, 0x40050010, 0x0, 0x54000, 0x40000, 0x9, 0x4000, 0x0, [0x1, 0x66d54b49, 0xc, 0x10001]}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000034000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000800000063000000080026006c0900000800270001008b"], 0x38}}, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x1, 0x3, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) 1.289980504s ago: executing program 0 (id=1014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r6 = eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={0xffffffffffffffff, 0x8, 0x2, r6}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f00000002c0)) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100ffffffff000000000c00000014000380040004000400010008000200000000001800018014000200768000000000000000626f6e64000000"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x8880) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x4004af07, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) pwritev(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)="6f0c41f9a1897851c0725fa1f4fdc5d9639e8c44fda28cf6970f2a3431ee966f26cee1ff31e719d0710dbb0c0bf498e4d70934e3647e2a68ddc8ebb25dbaee32dca0b8a2626adb3f3793e644114b6b5a75abab923284d457cf33613e8abef3777bbf9e1ca1d990155de14a4352889b1eb68160f369ce306e180207b8f328df1990f7", 0x82}, {&(0x7f00000001c0)="4c6d4814aa7880a843dca68457ec9c2737a3a35ec01962af41ea4054f677af01ea41a6cce1e95538ce328199c7416eb2c54f056875ddb5a86b140ec4fc54fa629b52d5fe27ee8e13ec4fa54a959776333b20d1d65bb6d9eb8e236353c091070f5f3daef79147d89a87c9f115c751a54a5a7a49d91e0d36cfda7cbd6f0bd151de5f2375a928ca66dfca069037d12937d02023871af466f650095eba83073fda23e6126cf45c84a7683a11fa6ba79b46b8852ce95da30e033d4b32c3ca31e3af810f73abbecc049854f1b9b3ccb5867cded35e3a15242e", 0xd6}, {&(0x7f0000000740)="075afa17e4768a0d90a982256c73a2692fecb45207d0925c109acfe61c12f8f094ffeb9f6b4193dfef89d83bb5d4279424a6cde3744a08caf1fa9689c2ce195cacdd95dbeeb0766883600ed69878c917bfbc56bf2373589a323974ff72b5b5ec840e393c24f6606a2a080e8c4d9679252934497da56aa124099fc7e94253158e64999909", 0x84}], 0x3, 0x6, 0x6) (async) ioctl$VHOST_SET_VRING_NUM(r7, 0x4008af10, &(0x7f0000000000)={0x1, 0x1c000000}) 1.159935062s ago: executing program 0 (id=1015): mount(&(0x7f0000000040)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='nfs\x00', 0x80, 0x0) 1.159683538s ago: executing program 0 (id=1016): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="3088ac761a2ed2fd1227568ab6d3a5c6883adfc392ba139e5f2d8bb80c42866616f402e2d201a501e08e3f60c123bad4541541b2458c16911aac149d01c85f16041827d546e44d0f1f5536c9066e659eac21340a1f15453b1c0b0e45313b5b70", 0x60, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="3088ac761a2ed2fd1227568ab6d3a5c6883adfc392ba139e5f2d8bb80c42866616f402e2d201a501e08e3f60c123bad4541541b2458c16911aac149d01c85f16041827d546e44d0f1f5536c9066e659eac21340a1f15453b1c0b0e45313b5b70", 0x60}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 1.089779743s ago: executing program 0 (id=1017): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000080)={0xce, 0x0, r1}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x100) 926.350984ms ago: executing program 0 (id=1018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0xf, 0x1, {0x6, @usage=0x4, 0x0, 0xa5, 0x7fff, 0x5e6a, 0x100000001, 0x86, 0x1, @struct={0x3, 0x2}, 0xffffffff, 0x7, [0x1ff, 0x5, 0xffffffff, 0x2, 0xffffffffffff8798, 0x5]}, {0x8000000000000001, @usage=0x2, 0x0, 0x8001, 0x10001, 0x7, 0x7f, 0x80000001, 0x22, @usage=0x7, 0x50b4, 0x10001, [0x8001, 0x3, 0xf, 0x5, 0x4b0aa026]}, {0x2000000000, @struct={0x5e1, 0x1}, 0x0, 0x70a, 0x800, 0x8, 0xce, 0x0, 0x0, @struct={0xfff, 0x7}, 0xffff, 0xffffff80, [0xa, 0x6, 0x948, 0xf780, 0xffff, 0x347]}, {0x6, 0x3, 0x10001}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000c40)={0x0, 0xbac, 0x4}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001040)={0x1, 0x3, {0x4000000000000000, @struct={0x2, 0x4}, r4, 0xe, 0x101, 0x9, 0x7, 0xffff, 0x202, @usage=0x9, 0x3, 0x800, [0x8, 0x94f, 0x6, 0x4, 0x9, 0x7f]}, {0x6, @usage=0x4, r5, 0x6, 0x9, 0xf, 0xfffffffffffffffe, 0x7, 0x1, @usage=0x7fffffffffffffff, 0x2, 0x3, [0x0, 0x7, 0x2, 0x6, 0x10001, 0x7]}, {0x4, @usage, r6, 0x5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x6, 0x7, 0x20, @struct={0x2, 0x6334}, 0x5, 0x7ff, [0x800, 0x5, 0x7fffffff, 0x2a9, 0x5]}, {0x2}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 829.59819ms ago: executing program 1 (id=1019): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x26, 0x1, 0x0, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x47504a4d}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xc, @sdr={0x66656536, 0x2}}) 824.498873ms ago: executing program 1 (id=1020): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="001283d0f1629fbb0000000000000000000000000000000000000000000000000000008182e8192871214bb49d33351bfa91a075f06e77f5eaf4430976f9aac3845454ae1aafb4d9bab4a84336"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000004ef215d5eb2a3469e65e1d2c7c9e61544d29aa34c9fbdfb176638a57cf7ed7e5e0715fea308d6f917ec018b51ff3e1ffe204972117dbe1391c19520e6d244d724cf8d7393f1b36f480844191ddefa4ec45f75ac3be5c8a96fc24a340fcaebf234964d529be9f6bf6b76a5cd5896de33bcc679c9273793a2e85f14f78602b71c22dc3b202080000008a754598f424c21c3e665142b94c48be23ba5bddbaa8b2025c0842438366ba4f7ad81ad0de495a2af2d7e7652ffd8d18", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}}]}, 0x88}}, 0x0) semget(0x2, 0x1, 0x200) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000018000000b9af0ed90000010400"/24], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[], 0xe) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x80) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 719.667182ms ago: executing program 2 (id=1021): r0 = syz_io_uring_setup(0x892, &(0x7f00000003c0)={0x0, 0xaee2, 0x10, 0x400002, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x15, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x1, 0x20}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x15, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x1, 0x20}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x81) 579.512006ms ago: executing program 2 (id=1022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) flock(r1, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 527.394703ms ago: executing program 1 (id=1023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@upd={0xe0, 0x12, 0x201, 0x70bd2b, 0x25dfdbfc, {{'ctr-twofish-avx\x00'}, '\x00', '\x00', 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x0) 526.486482ms ago: executing program 2 (id=1024): openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x4d0101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="260f3a0fd4ff66b81b018ed8c4e2412fa6475e0000660fc735fe7c0000ea5c41000039016666660f38820cb8c4c22929700f0f20e035004000000f22e0dbf7b9800000c00f3235000100000f30", 0x4d}], 0x1, 0xc, &(0x7f0000000140)=[@dstype3={0x7, 0xd}, @dstype0={0x6, 0xe}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000780)="f7790066baa00066b06b426664fafaba420066b8d80066efb805000000b9397800000f01c1c4e2b1ba8c88d9000000666666440f38826b410f01f8a9770707010000006e0154c4033921820f47a753fd", 0x50}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) getdents64(r5, &(0x7f0000002fc0)=""/4108, 0x100c) 379.006988ms ago: executing program 1 (id=1025): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5897601d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 376.995638ms ago: executing program 1 (id=1026): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @initdev}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000340)) accept$ax25(r0, 0x0, 0x0) 288.683463ms ago: executing program 1 (id=1027): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x101000, 0x108) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x10) listen(r3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ef509da1d80a9f46"], 0x0) syz_emit_ethernet(0xf2, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xbc, 0x6, 0x0, @remote, @local, {[@dstopts={0x1, 0x11, '\x00', [@pad1, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x59, 0x7ff, [0x1152, 0x8, 0x3, 0x7, 0x9, 0x0]}}, @generic={0x8}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0xc, 0x28, "1cf16d5483b74f016e5057703138341e322ccd567b93e350c147b9578e1bfa8e2be22b2d643e0039"}, @enc_lim={0x4, 0x1, 0xff}]}, @fragment={0xa0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x68}, @fragment={0x6, 0x0, 0xa, 0x0, 0x0, 0xd, 0x64}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) poll(&(0x7f0000000040)=[{r3, 0x40c0}, {0xffffffffffffffff, 0x400}, {r1, 0x4}, {r4, 0x6}, {0xffffffffffffffff, 0x90}], 0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r7, 0x40, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYBLOB="8040010000000100050010000500000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004004) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0xffffffff, 0x7, 0x5, 0x4, 0x4]}, &(0x7f0000000140)=0x54) 108.194292ms ago: executing program 2 (id=1028): r0 = socket$kcm(0xa, 0x2, 0x73) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x8000}}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e22, @empty=0xf5ff}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000010c0)}, 0x0) 0s ago: executing program 0 (id=1029): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usbip_server_init(0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a879e7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) syz_usbip_server_init(0x5) ioctl$EVIOCGREP(r0, 0x80084522, &(0x7f0000001f40)=""/231) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58856' (ED25519) to the list of known hosts. [ 45.871388][ T40] audit: type=1400 audit(1768457834.334:62): avc: denied { name_bind } for pid=5838 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.919685][ T40] audit: type=1400 audit(1768457834.384:63): avc: denied { execute } for pid=5839 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.929569][ T40] audit: type=1400 audit(1768457834.384:64): avc: denied { execute_no_trans } for pid=5839 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.455774][ T40] audit: type=1400 audit(1768457836.924:65): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.464595][ T40] audit: type=1400 audit(1768457836.934:66): avc: denied { mount } for pid=5839 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.466832][ T5839] cgroup: Unknown subsys name 'net' [ 48.606372][ T5839] cgroup: Unknown subsys name 'cpuset' [ 48.610802][ T5839] cgroup: Unknown subsys name 'rlimit' [ 48.813337][ T5872] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.521716][ T5839] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.607142][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 52.607155][ T40] audit: type=1400 audit(1768457841.074:85): avc: denied { execmem } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.822221][ T40] audit: type=1400 audit(1768457841.284:86): avc: denied { create } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.838122][ T40] audit: type=1400 audit(1768457841.284:87): avc: denied { read write } for pid=5926 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.847283][ T40] audit: type=1400 audit(1768457841.284:88): avc: denied { open } for pid=5926 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.858592][ T40] audit: type=1400 audit(1768457841.304:89): avc: denied { ioctl } for pid=5926 comm="syz-executor" path="socket:[6700]" dev="sockfs" ino=6700 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.860060][ T5290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.871450][ T5290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.874146][ T5290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.875145][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.877044][ T5290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.879352][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.881983][ T5290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.886001][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.886191][ T5290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.889291][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.892853][ T5290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.897292][ T5290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.901145][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.901219][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.904835][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.913551][ T5930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.920988][ T40] audit: type=1400 audit(1768457841.384:90): avc: denied { read } for pid=5931 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.929825][ T40] audit: type=1400 audit(1768457841.384:91): avc: denied { open } for pid=5935 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.929887][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.937903][ T40] audit: type=1400 audit(1768457841.384:92): avc: denied { mounton } for pid=5935 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.947144][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.956088][ T5937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.963961][ T5937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.150150][ T40] audit: type=1400 audit(1768457841.614:93): avc: denied { module_request } for pid=5931 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.181634][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 53.205187][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 53.291461][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 53.359687][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 53.364655][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.367977][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.370991][ T5935] bridge_slave_0: entered allmulticast mode [ 53.374239][ T5935] bridge_slave_0: entered promiscuous mode [ 53.383929][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.386722][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.389563][ T5935] bridge_slave_1: entered allmulticast mode [ 53.392648][ T5935] bridge_slave_1: entered promiscuous mode [ 53.438063][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.441143][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.444162][ T5931] bridge_slave_0: entered allmulticast mode [ 53.446747][ T5931] bridge_slave_0: entered promiscuous mode [ 53.476776][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.479724][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.482521][ T5931] bridge_slave_1: entered allmulticast mode [ 53.485900][ T5931] bridge_slave_1: entered promiscuous mode [ 53.488795][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.491564][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.494739][ T5926] bridge_slave_0: entered allmulticast mode [ 53.497965][ T5926] bridge_slave_0: entered promiscuous mode [ 53.502799][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.521134][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.524259][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.527351][ T5926] bridge_slave_1: entered allmulticast mode [ 53.530947][ T5926] bridge_slave_1: entered promiscuous mode [ 53.537074][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.581940][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.585896][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.589997][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.593164][ T5940] bridge_slave_0: entered allmulticast mode [ 53.597776][ T5940] bridge_slave_0: entered promiscuous mode [ 53.624438][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.628476][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.631647][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.634876][ T5940] bridge_slave_1: entered allmulticast mode [ 53.638777][ T5940] bridge_slave_1: entered promiscuous mode [ 53.644889][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.649614][ T5935] team0: Port device team_slave_0 added [ 53.669427][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.674641][ T5935] team0: Port device team_slave_1 added [ 53.707289][ T5931] team0: Port device team_slave_0 added [ 53.711111][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.726763][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.741142][ T5931] team0: Port device team_slave_1 added [ 53.753887][ T5926] team0: Port device team_slave_0 added [ 53.767354][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.769603][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.777777][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.793684][ T5926] team0: Port device team_slave_1 added [ 53.815777][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.818030][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.826208][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.830183][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.833199][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.843964][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.850219][ T5940] team0: Port device team_slave_0 added [ 53.869029][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.872076][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.883072][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.890152][ T5940] team0: Port device team_slave_1 added [ 53.893117][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.895416][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.903871][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.908631][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.910841][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.919548][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.956665][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.959006][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.967546][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.977472][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.979851][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.988617][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.995929][ T5935] hsr_slave_0: entered promiscuous mode [ 53.998335][ T5935] hsr_slave_1: entered promiscuous mode [ 54.018043][ T5926] hsr_slave_0: entered promiscuous mode [ 54.020905][ T5926] hsr_slave_1: entered promiscuous mode [ 54.024293][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 54.026744][ T5926] Cannot create hsr debugfs directory [ 54.048841][ T5931] hsr_slave_0: entered promiscuous mode [ 54.052152][ T5931] hsr_slave_1: entered promiscuous mode [ 54.055196][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 54.057420][ T5931] Cannot create hsr debugfs directory [ 54.112427][ T5940] hsr_slave_0: entered promiscuous mode [ 54.114916][ T5940] hsr_slave_1: entered promiscuous mode [ 54.117071][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 54.118901][ T5940] Cannot create hsr debugfs directory [ 54.411396][ T5926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.418519][ T5926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.422873][ T5926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.435293][ T5926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.469863][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.476345][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.481501][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.489627][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.558452][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.564601][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.569117][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.574930][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.630776][ T5931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.640404][ T5931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.647370][ T5931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.654360][ T5931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.685348][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.706909][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.713413][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.718380][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.732459][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.735157][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.749145][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.754155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.757070][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.765934][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.779523][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.781780][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.785214][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.787514][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.798552][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.800803][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.806018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.808318][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.844053][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.869596][ T40] audit: type=1400 audit(1768457843.334:94): avc: denied { sys_module } for pid=5926 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.887556][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.906281][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.908652][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.918529][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.921403][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.957674][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.974296][ T5937] Bluetooth: hci2: command tx timeout [ 54.974310][ T5936] Bluetooth: hci0: command tx timeout [ 54.976653][ T5290] Bluetooth: hci1: command tx timeout [ 54.981411][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.030098][ T5926] veth0_vlan: entered promiscuous mode [ 55.049363][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.054007][ T5937] Bluetooth: hci3: command tx timeout [ 55.055892][ T5935] veth0_vlan: entered promiscuous mode [ 55.059918][ T5926] veth1_vlan: entered promiscuous mode [ 55.072350][ T5935] veth1_vlan: entered promiscuous mode [ 55.095243][ T5926] veth0_macvtap: entered promiscuous mode [ 55.102826][ T5926] veth1_macvtap: entered promiscuous mode [ 55.124671][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.129420][ T5940] veth0_vlan: entered promiscuous mode [ 55.134470][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.139870][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.142586][ T5935] veth0_macvtap: entered promiscuous mode [ 55.156469][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.162157][ T5935] veth1_macvtap: entered promiscuous mode [ 55.166877][ T5940] veth1_vlan: entered promiscuous mode [ 55.169684][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.172367][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.179829][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.204140][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.221535][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.239109][ T63] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.242063][ T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.251839][ T5931] veth0_vlan: entered promiscuous mode [ 55.262738][ T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.270450][ T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.280902][ T5940] veth0_macvtap: entered promiscuous mode [ 55.292589][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.295157][ T5931] veth1_vlan: entered promiscuous mode [ 55.296322][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.298584][ T5940] veth1_macvtap: entered promiscuous mode [ 55.341538][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.348422][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.360431][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.363934][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.372264][ T1228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.378815][ T1228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.379497][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.386999][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.392531][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.401291][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.408348][ T5931] veth0_macvtap: entered promiscuous mode [ 55.414685][ T5926] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.435594][ T5931] veth1_macvtap: entered promiscuous mode [ 55.448827][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.450504][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.451499][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.480862][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.492985][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.503595][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.520282][ T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.543680][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.549439][ T63] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.561842][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.569444][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.572110][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.657897][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.660832][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.688377][ T6032] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.8'. [ 55.691035][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.694899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.702132][ T6034] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 55.712377][ T6034] gre1: entered promiscuous mode [ 55.726066][ T6036] netlink: 'syz.3.9': attribute type 9 has an invalid length. [ 55.769532][ T6036] can: request_module (can-proto-0) failed. [ 55.818352][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 55.831066][ T6051] team_slave_0: entered promiscuous mode [ 55.833132][ T6051] team_slave_1: entered promiscuous mode [ 55.840034][ T6051] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 55.861628][ T6055] netlink: 'syz.2.13': attribute type 29 has an invalid length. [ 55.864430][ T6055] netlink: 'syz.2.13': attribute type 3 has an invalid length. [ 55.867145][ T6052] evm: overlay not supported [ 55.867234][ T6055] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13'. [ 55.968064][ T6067] afs: Unknown parameter '+Ké$èôÉ°Š”î'·Ê!Øú' [ 55.970675][ T6067] netlink: 'syz.1.17': attribute type 6 has an invalid length. [ 55.975652][ T6067] Bluetooth: MGMT ver 1.23 [ 56.040400][ T6075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.052110][ T6082] block device autoloading is deprecated and will be removed. [ 56.056407][ T6075] syzkaller0: entered promiscuous mode [ 56.058863][ T6075] syzkaller0: entered allmulticast mode [ 56.098439][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 56.102105][ T6075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.119011][ T6086] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 56.122703][ T6090] binder: 6089:6090 ioctl c018620c 200000002740 returned -1 [ 56.174123][ T6092] process 'syz.3.24' launched '/dev/fd/3' with NULL argv: empty string added [ 56.290211][ T6101] netlink: 188 bytes leftover after parsing attributes in process `syz.0.29'. [ 56.296932][ T6103] loop4: detected capacity change from 0 to 524288000 [ 56.363633][ T34] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 56.488455][ T6125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.34'. [ 56.491349][ T6125] Zero length message leads to an empty skb [ 56.493581][ T6125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.34'. [ 56.520855][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35'. [ 56.526899][ T34] usb 7-1: not running at top speed; connect to a high speed hub [ 56.529013][ T6134] program syz.1.36 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.530371][ T34] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 56.535381][ T34] usb 7-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 56.539045][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.545537][ T34] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.548403][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.550910][ T34] usb 7-1: Product: Ñ— [ 56.552257][ T34] usb 7-1: Manufacturer: з [ 56.554745][ T34] usb 7-1: SerialNumber: 馾ワ઎ [ 56.615999][ T6144] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 56.654361][ T6146] raw_sendmsg: syz.1.40 forgot to set AF_INET. Fix it! [ 56.751113][ T6155] netlink: 152 bytes leftover after parsing attributes in process `syz.1.42'. [ 56.763103][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.766966][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.871036][ T6163] openvswitch: netlink: Unknown key attributes 2 [ 56.874557][ T6163] block nbd1: NBD_DISCONNECT [ 56.905228][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.965295][ T6168] mkiss: ax0: crc mode is auto. [ 56.990163][ T34] usb 7-1: 0:2 : does not exist [ 57.024411][ T34] usb 7-1: USB disconnect, device number 2 [ 57.046591][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 57.053775][ T5937] Bluetooth: hci2: command tx timeout [ 57.053890][ T5290] Bluetooth: hci1: command tx timeout [ 57.058823][ T6170] capability: warning: `syz.1.46' uses deprecated v2 capabilities in a way that may be insecure [ 57.066919][ T5290] Bluetooth: hci0: command tx timeout [ 57.133864][ T5290] Bluetooth: hci3: command tx timeout [ 57.156115][ T6175] xt_ecn: cannot match TCP bits for non-tcp packets [ 57.160889][ T6172] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.248822][ T6183] qrtr: Invalid version 0 [ 57.428552][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 57.545136][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.548093][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.553289][ T1154] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.560750][ T1154] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.601909][ T6211] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 57.611769][ T6211] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 57.616181][ T6211] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 57.619384][ T6211] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 57.635223][ T6213] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 57.673931][ T6213] sp0: Synchronizing with TNC [ 57.706907][ T40] kauditd_printk_skb: 134 callbacks suppressed [ 57.706916][ T40] audit: type=1400 audit(1768457846.174:229): avc: denied { ioctl } for pid=6218 comm="syz.0.64" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.742045][ T40] audit: type=1400 audit(1768457846.204:230): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 57.758846][ T40] audit: type=1400 audit(1768457846.214:231): avc: denied { ioctl } for pid=6222 comm="syz.2.66" path="socket:[11392]" dev="sockfs" ino=11392 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.772822][ T40] audit: type=1400 audit(1768457846.214:232): avc: denied { write } for pid=6222 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.904590][ T40] audit: type=1400 audit(1768457846.374:233): avc: denied { create } for pid=6239 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.923588][ T40] audit: type=1400 audit(1768457846.374:234): avc: denied { bind } for pid=6239 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.923615][ T40] audit: type=1400 audit(1768457846.374:235): avc: denied { setopt } for pid=6239 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.923633][ T40] audit: type=1400 audit(1768457846.374:236): avc: denied { accept } for pid=6239 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.972148][ T40] audit: type=1400 audit(1768457846.434:237): avc: denied { setopt } for pid=6233 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.987130][ T40] audit: type=1400 audit(1768457846.454:238): avc: denied { read } for pid=6233 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.113614][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 58.128891][ T6257] trusted_key: syz.1.74 sent an empty control message without MSG_MORE. [ 58.285325][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 58.287852][ T10] usb 5-1: config 0 has no interface number 0 [ 58.289791][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 58.303574][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 58.307028][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 58.309996][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.315025][ T10] usb 5-1: config 0 descriptor?? [ 58.317731][ T6225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.326050][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 58.535129][ T59] usb 5-1: USB disconnect, device number 2 [ 58.535215][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 58.638006][ T6307] gfs2: error -5 reading superblock [ 58.745229][ T6317] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 58.781881][ T6317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.954864][ T6328] qrtr: Invalid version 0 [ 59.027355][ T6339] overlayfs: statfs failed on './file0' [ 59.103052][ T6347] MINIX-fs: unable to read superblock [ 59.111688][ T6350] omfs: Invalid superblock (0) [ 59.127923][ T6350] 9pnet_virtio: no channels available for device syz [ 59.133629][ T5937] Bluetooth: hci2: command tx timeout [ 59.133659][ T5936] Bluetooth: hci1: command tx timeout [ 59.134441][ T5290] Bluetooth: hci0: command tx timeout [ 59.142605][ T6350] capability: warning: `syz.1.111' uses 32-bit capabilities (legacy support in use) [ 59.213661][ T5936] Bluetooth: hci3: command tx timeout [ 59.291310][ T6358] qrtr: Invalid version 0 [ 59.462466][ T6371] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 59.515692][ T6374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.579478][ T6378] sd 0:0:0:0: PR command failed: 1026 [ 59.581564][ T6378] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 59.584353][ T6378] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 59.646696][ T6390] erspan1: entered promiscuous mode [ 59.662997][ T6394] macvlan0: entered allmulticast mode [ 59.665541][ T6394] veth1_vlan: entered allmulticast mode [ 59.673683][ T6396] pim6reg: entered allmulticast mode [ 59.676212][ T6397] veth1_vlan: left allmulticast mode [ 59.689143][ T6397] macvlan0 (unregistering): left allmulticast mode [ 59.712855][ T6398] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.717927][ T6398] block device autoloading is deprecated and will be removed. [ 59.852105][ T6406] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 59.888247][ T6417] geneve2: entered promiscuous mode [ 59.892942][ T6417] geneve2: entered allmulticast mode [ 60.077553][ T6433] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 60.175857][ T6438] netlink: 'syz.0.135': attribute type 137 has an invalid length. [ 60.696910][ T6460] __nla_validate_parse: 16 callbacks suppressed [ 60.696921][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 60.701893][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 60.706026][ T6460] netlink: 'syz.3.143': attribute type 7 has an invalid length. [ 60.766023][ T6463] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 60.783741][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.808965][ T6466] input: syz1 as /devices/virtual/input/input5 [ 60.946223][ T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 60.950145][ T29] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 60.953568][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 60.956455][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 60.959960][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 60.964784][ T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 60.967852][ T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 60.970376][ T29] usb 7-1: Product: syz [ 60.971680][ T29] usb 7-1: Manufacturer: syz [ 60.974927][ T6468] binder: 6467:6468 ioctl 4018620d 0 returned -22 [ 60.977511][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 60.979257][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 60.982441][ T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 60.984451][ T29] cdc_wdm 7-1:1.0: Unknown control protocol [ 61.145984][ T6487] ISOFS: Unable to identify CD-ROM format. [ 61.180636][ T6491] qrtr: Invalid version 0 [ 61.200787][ T6453] bond1: Removing last ns target with arp_interval on [ 61.214092][ T5290] Bluetooth: hci0: command tx timeout [ 61.216409][ T5937] Bluetooth: hci2: command tx timeout [ 61.218907][ T5936] Bluetooth: hci1: command tx timeout [ 61.238544][ T830] usb 7-1: USB disconnect, device number 3 [ 61.285461][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 61.311951][ T5936] Bluetooth: hci3: command tx timeout [ 61.368329][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 61.678550][ T6524] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 61.681092][ T6524] PKCS7: Only support pkcs7_signedData type [ 61.889072][ T6554] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.167'. [ 61.892539][ T6554] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 61.964848][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 61.968757][ T6562] comedi comedi0: Cannot bond this driver to itself! [ 62.033332][ T6567] loop6: detected capacity change from 0 to 524288000 [ 62.155595][ T6574] gtp0: entered promiscuous mode [ 62.201401][ T6581] netlink: 'syz.0.179': attribute type 1 has an invalid length. [ 62.238108][ T6588] autofs4:pid:6588:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 62.244086][ T6588] autofs4:pid:6588:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 62.258469][ T6581] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 62.263367][ T6581] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 62.268165][ T6588] autofs4:pid:6588:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 62.273449][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'. [ 62.310268][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.180'. [ 62.312424][ T6598] gretap1: entered promiscuous mode [ 62.320660][ T6598] bond2: (slave gretap1): making interface the new active one [ 62.327089][ T6598] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 62.340336][ T6581] macvlan2: entered promiscuous mode [ 62.342459][ T6581] macvlan2: entered allmulticast mode [ 62.345131][ T6581] bond2: entered promiscuous mode [ 62.348113][ T6581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.355393][ T6581] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 62.362146][ T6581] bond2: left promiscuous mode [ 62.514045][ T6591] cgroup: fork rejected by pids controller in /syz2 [ 62.630405][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.185'. [ 62.634019][ T6637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.185'. [ 62.759440][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 62.759452][ T40] audit: type=1400 audit(1768457851.224:357): avc: denied { watch } for pid=6666 comm="syz.3.189" path="/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.777705][ T40] audit: type=1400 audit(1768457851.224:358): avc: denied { watch_sb watch_reads } for pid=6666 comm="syz.3.189" path="/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.793140][ T40] audit: type=1400 audit(1768457851.224:359): avc: denied { ioctl } for pid=6666 comm="syz.3.189" path="socket:[11763]" dev="sockfs" ino=11763 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.801984][ T40] audit: type=1400 audit(1768457851.254:360): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.812907][ T40] audit: type=1400 audit(1768457851.254:361): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.823307][ T40] audit: type=1400 audit(1768457851.254:362): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.837026][ T40] audit: type=1326 audit(1768457851.274:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.0.191" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc31e38f7c9 code=0x0 [ 62.849397][ T40] audit: type=1400 audit(1768457851.314:364): avc: denied { unlink } for pid=5940 comm="syz-executor" name="file8" dev="tmpfs" ino=303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 63.007345][ T40] audit: type=1400 audit(1768457851.474:365): avc: denied { listen } for pid=6681 comm="syz.2.194" lport=59045 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.015267][ T40] audit: type=1400 audit(1768457851.484:366): avc: denied { accept } for pid=6681 comm="syz.2.194" lport=59045 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.162105][ T6685] erspan0: entered promiscuous mode [ 63.210369][ T6687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20224 sclass=netlink_route_socket pid=6687 comm=syz.1.196 [ 63.303635][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 63.370300][ T6698] netlink: 'syz.1.200': attribute type 21 has an invalid length. [ 63.375023][ T6698] netlink: 'syz.1.200': attribute type 21 has an invalid length. [ 63.456818][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.461080][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.468656][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.472123][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.481418][ T6683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.496401][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.758829][ T6723] ======================================================= [ 63.758829][ T6723] WARNING: The mand mount option has been deprecated and [ 63.758829][ T6723] and is ignored by this kernel. Remove the mand [ 63.758829][ T6723] option from the mount to silence this warning. [ 63.758829][ T6723] ======================================================= [ 63.915332][ T6744] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 63.917907][ T6744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.983195][ T6748] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 63.986848][ T6748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.996980][ T6752] netlink: get zone limit has 4 unknown bytes [ 63.998933][ T6748] syz.1.216 uses obsolete (PF_INET,SOCK_PACKET) [ 64.195630][ T6767] macvlan0: entered allmulticast mode [ 64.198499][ T6767] veth1_vlan: entered allmulticast mode [ 64.202856][ T6775] loop2: detected capacity change from 0 to 7 [ 64.203227][ T6774] pim6reg: entered allmulticast mode [ 64.208464][ T6775] Dev loop2: unable to read RDB block 7 [ 64.211027][ T6775] loop2: AHDI p1 p2 p3 [ 64.213189][ T6775] loop2: partition table partially beyond EOD, truncated [ 64.218268][ T6775] loop2: p1 start 1601398130 is beyond EOD, truncated [ 64.221224][ T6775] loop2: p2 start 1702059890 is beyond EOD, truncated [ 64.273317][ T6771] overlayfs: failed to resolve '/': -2 [ 64.381942][ T6792] binder: 6789:6792 ioctl c018620c 200000002740 returned -1 [ 64.633608][ T5869] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 64.785120][ T5869] usb 8-1: not running at top speed; connect to a high speed hub [ 64.788489][ T5869] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 64.791331][ T5869] usb 8-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 64.794887][ T5869] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.799567][ T5869] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.802414][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.804978][ T5869] usb 8-1: Product: Ñ— [ 64.806298][ T5869] usb 8-1: Manufacturer: з [ 64.807761][ T5869] usb 8-1: SerialNumber: 馾ワ઎ [ 65.015472][ T6792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.018879][ T6792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.028888][ T5869] usb 8-1: 0:2 : does not exist [ 65.045354][ T5869] usb 8-1: USB disconnect, device number 2 [ 65.060978][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 65.540690][ T6840] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 65.738693][ T6851] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 65.773443][ T6853] qrtr: Invalid version 0 [ 66.026848][ T24] usb 7-1: USB disconnect, device number 4 [ 66.415822][ T6883] __nla_validate_parse: 9 callbacks suppressed [ 66.415839][ T6883] netlink: 92 bytes leftover after parsing attributes in process `syz.0.245'. [ 66.629956][ T6889] qrtr: Invalid version 0 [ 66.837809][ T6896] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 66.840965][ T6896] UDF-fs: Scanning with blocksize 2048 failed [ 66.846837][ T6896] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 66.849874][ T6896] UDF-fs: Scanning with blocksize 4096 failed [ 66.920198][ T6905] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.252'. [ 66.924371][ T6905] netlink: Conntrack attr has 4 unknown bytes [ 66.996051][ T6909] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 67.014247][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 67.176517][ T6919] qrtr: Invalid version 0 [ 67.232788][ T74] IPVS: starting estimator thread 0... [ 67.324068][ T6922] IPVS: using max 45 ests per chain, 108000 per kthread [ 67.476502][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.260'. [ 67.480265][ T6935] netlink: 'syz.1.260': attribute type 7 has an invalid length. [ 67.483897][ T6935] netlink: 'syz.1.260': attribute type 8 has an invalid length. [ 67.486588][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 67.492586][ T6939] xt_nfacct: accounting object `syz0' does not exist [ 67.501675][ T6937] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 67.523563][ T74] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 67.540021][ T6937] warning: `syz.0.261' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.555486][ T6937] bridge_slave_0: left allmulticast mode [ 67.557951][ T6937] bridge_slave_0: left promiscuous mode [ 67.560549][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.574352][ T6937] bridge_slave_1: left allmulticast mode [ 67.576889][ T6937] bridge_slave_1: left promiscuous mode [ 67.579501][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.592065][ T6937] bond0: (slave bond_slave_0): Releasing backup interface [ 67.617113][ T6952] qrtr: Invalid version 0 [ 67.620050][ T6937] bond0: (slave bond_slave_1): Releasing backup interface [ 67.637134][ T6937] team_slave_0: left promiscuous mode [ 67.642353][ T6937] team0: Port device team_slave_0 removed [ 67.643345][ T6954] binder: 6953:6954 ioctl c018620c 200000002740 returned -1 [ 67.649205][ T6937] team_slave_1: left promiscuous mode [ 67.653049][ T6937] team0: Port device team_slave_1 removed [ 67.655938][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.658762][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.662518][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.665625][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.669141][ T6937] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.676798][ T74] usb 8-1: unable to get BOS descriptor or descriptor too short [ 67.682077][ T74] usb 8-1: not running at top speed; connect to a high speed hub [ 67.692333][ T74] usb 8-1: config 1 has an invalid interface number: 2 but max is 0 [ 67.696318][ T74] usb 8-1: config 1 has no interface number 0 [ 67.698878][ T74] usb 8-1: config 1 interface 2 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.704533][ T74] usb 8-1: config 1 interface 2 has no altsetting 0 [ 67.708700][ T74] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 7.40 [ 67.712481][ T74] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 67.716432][ T74] usb 8-1: Product: syz [ 67.718250][ T74] usb 8-1: SerialNumber: syz [ 67.836103][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 67.836114][ T40] audit: type=1400 audit(1768457856.304:399): avc: denied { map } for pid=6960 comm="syz.0.269" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 67.896234][ T6965] overlayfs: failed to resolve './file1': -2 [ 67.903644][ T29] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 67.930257][ T74] usb 8-1: bad CDC descriptors [ 67.943292][ T74] usb 8-1: USB disconnect, device number 3 [ 67.981527][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 68.066344][ T29] usb 7-1: not running at top speed; connect to a high speed hub [ 68.074031][ T29] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 68.077513][ T29] usb 7-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 68.081657][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.088803][ T29] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.092065][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.095131][ T29] usb 7-1: Product: Ñ— [ 68.096602][ T29] usb 7-1: Manufacturer: з [ 68.098206][ T29] usb 7-1: SerialNumber: 馾ワ઎ [ 68.198139][ T40] audit: type=1400 audit(1768457856.664:400): avc: denied { write } for pid=6979 comm="syz.1.274" name="psched" dev="proc" ino=4026532942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.206602][ T40] audit: type=1400 audit(1768457856.684:401): avc: denied { module_load } for pid=6979 comm="syz.1.274" path="/69/bus" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 68.214039][ T6980] Invalid ELF header magic: != ELF [ 68.251791][ T40] audit: type=1400 audit(1768457856.714:402): avc: denied { setattr } for pid=6983 comm="syz.1.275" name="admmidi2" dev="devtmpfs" ino=1334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 68.307348][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.310772][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.325619][ T29] usb 7-1: 0:2 : does not exist [ 68.342166][ T29] usb 7-1: USB disconnect, device number 5 [ 68.361111][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.489349][ T7002] No control pipe specified [ 68.500260][ T7002] tmpfs: Unknown parameter '1844674407370955161518446744073709551615184467440737095516150177777777777777777777718446744073709551615' [ 68.505088][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 68.605967][ T7008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35856 sclass=netlink_route_socket pid=7008 comm=syz.1.283 [ 68.633261][ T7013] overlay: Bad value for 'metacopy' [ 68.634804][ T7014] overlay: Bad value for 'metacopy' [ 68.835819][ T7028] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 68.878727][ T7038] netlink: 124 bytes leftover after parsing attributes in process `syz.2.294'. [ 68.882540][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 68.886372][ T40] audit: type=1400 audit(1768457857.344:403): avc: denied { getopt } for pid=7032 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.003983][ T40] audit: type=1400 audit(1768457857.474:404): avc: denied { read } for pid=7050 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.063614][ T5936] Bluetooth: hci0: command 0x0c20 tx timeout [ 69.076694][ T40] audit: type=1400 audit(1768457857.544:405): avc: denied { read } for pid=7054 comm="syz.2.301" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.090346][ T7056] FAT-fs (nullb0): bogus number of reserved sectors [ 69.093836][ T40] audit: type=1400 audit(1768457857.554:406): avc: denied { open } for pid=7054 comm="syz.2.301" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.113621][ T7056] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 69.145699][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 69.148402][ T7061] openvswitch: netlink: Missing key (keys=40, expected=80) [ 69.152515][ T7059] syzkaller0: entered promiscuous mode [ 69.163570][ T7059] syzkaller0: entered allmulticast mode [ 69.175994][ T7059] fuse: Unknown parameter '000000000000000000000060x0000000000000008' [ 69.210320][ T40] audit: type=1400 audit(1768457857.674:407): avc: denied { lock } for pid=7068 comm="syz.1.304" path="socket:[16417]" dev="sockfs" ino=16417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 70.109755][ T7086] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 70.133044][ T7086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.138844][ T7083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=7083 comm=syz.2.308 [ 70.143155][ T7086] bond1: (slave erspan1): making interface the new active one [ 70.147179][ T7086] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 70.149103][ T40] audit: type=1400 audit(1768457858.614:408): avc: denied { read } for pid=7089 comm="syz.0.310" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.295872][ T7110] qrtr: Invalid version 0 [ 70.357564][ T7115] vcan0: tx address claim with different name [ 70.406791][ C0] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.411011][ C0] sr 2:0:0:0: [sr0] tag#3 CDB: opcode=0x99 99 2d d5 98 73 88 7d fa e0 d8 32 71 [ 70.465398][ T7115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7115 comm=syz.3.316 [ 70.547541][ T7145] qrtr: Invalid version 0 [ 70.767707][ T830] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.780951][ T7169] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 70.923584][ T830] usb 8-1: Using ep0 maxpacket: 8 [ 70.930224][ T830] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 70.932777][ T830] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.936217][ T830] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.939351][ T830] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.942834][ T830] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.947628][ T830] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.950551][ T830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.052104][ T7187] random: crng reseeded on system resumption [ 71.155588][ T7195] binder: 7194:7195 ioctl c018620c 200000002740 returned -1 [ 71.272474][ T7198] qrtr: Invalid version 0 [ 71.327395][ T7200] batman_adv: batadv0: Adding interface: dummy0 [ 71.330090][ T7200] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.343166][ T7200] batman_adv: batadv0: Interface activated: dummy0 [ 71.360122][ T7200] batadv0: mtu less than device minimum [ 71.363936][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.369321][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.374699][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.380034][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.385306][ T7200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.403678][ T29] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 71.476558][ T7207] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 71.483012][ T7207] netlink: 'syz.1.338': attribute type 10 has an invalid length. [ 71.486310][ T7207] __nla_validate_parse: 5 callbacks suppressed [ 71.486319][ T7207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.338'. [ 71.491943][ T7207] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 71.494364][ T7207] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 71.541109][ T5869] IPVS: starting estimator thread 0... [ 71.563613][ T29] usb 7-1: not running at top speed; connect to a high speed hub [ 71.567998][ T29] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 71.572840][ T29] usb 7-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 71.577402][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.583110][ T29] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.587317][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.591765][ T29] usb 7-1: Product: Ñ— [ 71.596418][ T29] usb 7-1: Manufacturer: з [ 71.598375][ T29] usb 7-1: SerialNumber: 馾ワ઎ [ 71.633776][ T7211] IPVS: using max 28 ests per chain, 67200 per kthread [ 71.806952][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.812116][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.830300][ T29] usb 7-1: 0:2 : does not exist [ 71.840886][ T29] usb 7-1: USB disconnect, device number 6 [ 71.854359][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.990873][ T830] usb 8-1: USB disconnect, device number 4 [ 72.040346][ T7231] qrtr: Invalid version 0 [ 72.532068][ T7280] qrtr: Invalid version 0 [ 72.593094][ T7287] binder: 7285:7287 ioctl c018620c 200000002740 returned -1 [ 72.658764][ T7290] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 72.843617][ T29] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 72.974495][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 72.974505][ T40] audit: type=1400 audit(1768457861.444:438): avc: denied { read write } for pid=7322 comm="syz.3.363" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 72.984817][ T40] audit: type=1400 audit(1768457861.454:439): avc: denied { open } for pid=7322 comm="syz.3.363" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 73.004629][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 73.014063][ T40] audit: type=1400 audit(1768457861.484:440): avc: denied { append } for pid=7326 comm="syz.2.365" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.015160][ T29] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 73.025148][ T29] usb 5-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 73.028393][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.030209][ T40] audit: type=1400 audit(1768457861.484:441): avc: denied { mount } for pid=7326 comm="syz.2.365" name="/" dev="configfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.032789][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'. [ 73.040181][ T40] audit: type=1400 audit(1768457861.484:442): avc: denied { search } for pid=7326 comm="syz.2.365" name="/" dev="configfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.045583][ T7330] netem: invalid attributes len -22 [ 73.045675][ T29] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.045691][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.045700][ T29] usb 5-1: Product: Ñ— [ 73.045707][ T29] usb 5-1: Manufacturer: з [ 73.045714][ T29] usb 5-1: SerialNumber: 馾ワ઎ [ 73.063547][ T40] audit: type=1400 audit(1768457861.484:443): avc: denied { search } for pid=7326 comm="syz.2.365" name="/" dev="configfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.072347][ T40] audit: type=1400 audit(1768457861.484:444): avc: denied { search } for pid=7326 comm="syz.2.365" name="/" dev="configfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.073591][ T7330] netem: change failed [ 73.136388][ T7340] efs: cannot read volume header [ 73.256173][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.259401][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.269379][ T29] usb 5-1: 0:2 : does not exist [ 73.291493][ T29] usb 5-1: USB disconnect, device number 3 [ 73.294567][ T7351] netlink: 'syz.2.371': attribute type 39 has an invalid length. [ 73.303913][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.240643][ T40] audit: type=1400 audit(1768457862.704:445): avc: denied { append } for pid=7365 comm="syz.0.375" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.255926][ T7366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.375'. [ 74.263127][ T7369] JFS: discard option not supported on device [ 74.267935][ T7369] Mount JFS Failure: -5 [ 74.286185][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.377'. [ 74.308857][ T40] audit: type=1400 audit(1768457862.774:446): avc: denied { setattr } for pid=7371 comm="syz.1.378" path="socket:[15727]" dev="sockfs" ino=15727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.327815][ T7378] binder: 7377:7378 ioctl c018620c 200000002740 returned -1 [ 74.375920][ T7385] fuse: Bad value for 'user_id' [ 74.377746][ T7385] fuse: Bad value for 'user_id' [ 74.574330][ T830] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 74.639606][ T40] audit: type=1400 audit(1768457863.104:447): avc: denied { create } for pid=7396 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 74.736068][ T830] usb 8-1: not running at top speed; connect to a high speed hub [ 74.739813][ T830] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 74.742561][ T830] usb 8-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 74.746117][ T830] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.750648][ T830] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.753894][ T830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.756640][ T830] usb 8-1: Product: Ñ— [ 74.757990][ T830] usb 8-1: Manufacturer: з [ 74.759524][ T830] usb 8-1: SerialNumber: 馾ワ઎ [ 74.816831][ T7404] overlayfs: failed to clone upperpath [ 74.966451][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.969937][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.984614][ T830] usb 8-1: 0:2 : does not exist [ 74.996316][ T830] usb 8-1: USB disconnect, device number 5 [ 75.010366][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.021176][ T7411] ip6t_srh: unknown srh invflags 51E8 [ 75.228820][ T7415] syz_tun: entered allmulticast mode [ 75.234584][ T7415] dvmrp8: entered allmulticast mode [ 75.250652][ T7418] syz_tun: left allmulticast mode [ 75.253066][ T7418] dvmrp8: left allmulticast mode [ 75.283628][ T53] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.365963][ T7420] overlayfs: missing 'lowerdir' [ 75.445792][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.450273][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.454904][ T53] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 75.458580][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.465092][ T53] usb 5-1: config 0 descriptor?? [ 75.603322][ T7443] fuse: Bad value for 'fd' [ 75.678196][ T7448] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 75.688608][ T7447] netlink: 'syz.1.405': attribute type 13 has an invalid length. [ 75.697784][ T7447] gretap0: refused to change device tx_queue_len [ 75.700740][ T7447] net_ratelimit: 17 callbacks suppressed [ 75.700756][ T7447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.886338][ T53] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 75.897885][ T53] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input7 [ 75.978102][ T53] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 76.090166][ T29] usb 5-1: USB disconnect, device number 4 [ 76.258584][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.260902][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.364535][ T5936] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 76.469088][ T7484] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.414'. [ 76.742948][ T7506] netlink: zone id is out of range [ 76.745367][ T7506] netlink: zone id is out of range [ 76.747514][ T7506] netlink: zone id is out of range [ 76.749309][ T7506] netlink: zone id is out of range [ 76.751067][ T7506] netlink: zone id is out of range [ 76.752770][ T7506] netlink: zone id is out of range [ 76.755478][ T7506] netlink: zone id is out of range [ 76.757443][ T7506] netlink: get zone limit has 4 unknown bytes [ 77.056920][ T7557] netlink: 'syz.0.438': attribute type 21 has an invalid length. [ 77.068230][ T7560] IPv6: Can't replace route, no match found [ 77.405632][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 77.457706][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 77.587297][ T7639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.461'. [ 77.612680][ T7642] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 77.620019][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.623439][ T7642] bond0: (slave team0): Enslaving as an active interface with an up link [ 77.633383][ T7642] netlink: 'syz.1.462': attribute type 4 has an invalid length. [ 77.636167][ T7642] netlink: 152 bytes leftover after parsing attributes in process `syz.1.462'. [ 77.638078][ T7644] SELinux: failed to load policy [ 77.650088][ T7642] .`: renamed from bond0 (while UP) [ 77.709179][ T7647] fuse: Bad value for 'fd' [ 77.785904][ T7650] netlink: 5 bytes leftover after parsing attributes in process `syz.1.465'. [ 77.789918][ T7650] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 78.378914][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 78.378934][ T40] audit: type=1400 audit(1768457866.844:468): avc: denied { write } for pid=7653 comm="syz.0.467" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.389213][ T40] audit: type=1400 audit(1768457866.844:469): avc: denied { write } for pid=7653 comm="syz.0.467" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.400967][ T7664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.470'. [ 78.406824][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.470'. [ 78.410839][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.470'. [ 78.473631][ T6027] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 78.504351][ T7670] netlink: 'syz.3.472': attribute type 13 has an invalid length. [ 78.509817][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 78.605096][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 78.635365][ T6027] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 78.639896][ T6027] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 78.644358][ T6027] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 78.651754][ T6027] usb 7-1: string descriptor 0 read error: -22 [ 78.654575][ T6027] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.658557][ T6027] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.666738][ T7652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.758142][ T40] audit: type=1400 audit(1768457867.224:470): avc: denied { connect } for pid=7689 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.797108][ T40] audit: type=1400 audit(1768457867.264:471): avc: denied { getopt } for pid=7695 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.870068][ T7691] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.911058][ T6027] cdc_ncm 7-1:1.0: bind() failure [ 78.926432][ T6027] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 78.929333][ T6027] cdc_ncm 7-1:1.1: bind() failure [ 78.967224][ T6027] usb 7-1: USB disconnect, device number 7 [ 79.065477][ T7722] tmpfs: Bad value for 'mpol' [ 79.378621][ T7739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7739 comm=syz.3.492 [ 79.381508][ T7740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=7740 comm=syz.3.492 [ 79.436453][ T7740] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.523992][ T40] audit: type=1400 audit(1768457867.994:472): avc: denied { remount } for pid=7750 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.591579][ T40] audit: type=1400 audit(1768457868.054:473): avc: denied { setopt } for pid=7758 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.639467][ T7762] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 79.779497][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.876169][ T40] audit: type=1400 audit(1768457868.344:474): avc: denied { bind } for pid=7785 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.957163][ T7798] binder: 7796:7798 ioctl c018620c 200000002740 returned -1 [ 80.163003][ T40] audit: type=1400 audit(1768457868.624:475): avc: denied { mounton } for pid=7803 comm="syz.2.512" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 80.179798][ T7805] hpfs: hpfs_map_sector(): read error [ 80.228268][ T6026] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 80.303937][ T40] audit: type=1400 audit(1768457868.774:476): avc: denied { read } for pid=7822 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.387486][ T6026] usb 5-1: not running at top speed; connect to a high speed hub [ 80.391515][ T40] audit: type=1400 audit(1768457868.854:477): avc: denied { lock } for pid=7827 comm="syz.2.519" path="socket:[18101]" dev="sockfs" ino=18101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.392593][ T6026] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 80.404678][ T6026] usb 5-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 80.409197][ T6026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.422398][ T6026] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.426445][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.429307][ T6026] usb 5-1: Product: Ñ— [ 80.430991][ T6026] usb 5-1: Manufacturer: з [ 80.432978][ T6026] usb 5-1: SerialNumber: 馾ワ઎ [ 80.503813][ T7836] mmap: syz.1.521 (7836) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.641787][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.645578][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.673640][ T6026] usb 5-1: 0:2 : does not exist [ 80.689200][ T6026] usb 5-1: USB disconnect, device number 5 [ 80.707930][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.280668][ T7869] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 81.287501][ T7870] erspan1: entered allmulticast mode [ 81.290523][ T7869] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 81.516328][ T7886] net_ratelimit: 2 callbacks suppressed [ 81.516342][ T7886] openvswitch: netlink: IP tunnel dst address not specified [ 81.567044][ T7891] Dead loop on virtual device ip6_vti0, fix it urgently! [ 81.783547][ T7902] openvswitch: netlink: IP tunnel TTL not specified. [ 82.445232][ T7971] openvswitch: netlink: Flow actions attr not present in new flow. [ 82.677978][ T7988] could not allocate digest TFM handle hmac(streebog512) [ 83.043770][ T8019] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 83.077937][ T8019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.175059][ T141] cfg80211: failed to load regulatory.db [ 83.297035][ T8050] __nla_validate_parse: 15 callbacks suppressed [ 83.297055][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 83.340413][ T8049] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 83.343681][ T8049] netlink: 224 bytes leftover after parsing attributes in process `syz.3.586'. [ 83.409782][ T8056] ubi0: attaching mtd0 [ 83.412332][ T8056] ubi0: scanning is finished [ 83.416119][ T8056] ubi0: empty MTD device detected [ 83.430896][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 83.430925][ T40] audit: type=1400 audit(1768457871.894:487): avc: denied { getopt } for pid=8058 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.441267][ T8059] pimreg: entered allmulticast mode [ 83.471046][ T40] audit: type=1400 audit(1768457871.934:488): avc: denied { mounton } for pid=8055 comm="syz.3.587" path="/132/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 83.529816][ T8056] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 83.533112][ T8056] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 1689 bytes [ 83.543607][ T8056] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 83.546232][ T8056] ubi0: VID header offset: 2343 (aligned 2343), data offset: 2407 [ 83.549049][ T8056] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 83.551233][ T8056] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 9 [ 83.554425][ T8056] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 645746154 [ 83.557817][ T8056] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 83.562287][ T8066] ubi0: background thread "ubi_bgt0d" started, PID 8066 [ 83.608897][ T40] audit: type=1400 audit(1768457872.074:489): avc: denied { mount } for pid=8068 comm="syz.1.590" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 83.628265][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 83.645819][ T40] audit: type=1400 audit(1768457872.114:490): avc: denied { bpf } for pid=8076 comm="syz.1.594" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.652553][ T40] audit: type=1400 audit(1768457872.114:491): avc: denied { perfmon } for pid=8076 comm="syz.1.594" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.660219][ T8074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.684986][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 83.700962][ T8079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.964253][ T40] audit: type=1400 audit(1768457872.434:492): avc: denied { module_request } for pid=8092 comm="syz.2.599" kmod="net-pf-10-proto-94-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 83.993211][ T40] audit: type=1400 audit(1768457872.454:493): avc: denied { ioctl } for pid=8081 comm="syz.1.595" path="socket:[18388]" dev="sockfs" ino=18388 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.026728][ T8102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.068189][ T8097] pim6reg: entered allmulticast mode [ 84.112794][ T40] audit: type=1400 audit(1768457872.574:494): avc: denied { mount } for pid=8105 comm="syz.2.601" name="/" dev="rpc_pipefs" ino=18771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 84.142474][ T40] audit: type=1400 audit(1768457872.604:495): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 84.202673][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.605'. [ 84.221506][ T8114] overlayfs: upper fs does not support file handles, falling back to index=off. [ 84.244467][ T8119] ip6gre1: entered promiscuous mode [ 84.246330][ T8119] ip6gre1: entered allmulticast mode [ 84.255720][ T1146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.258920][ T1146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.263909][ T40] audit: type=1400 audit(1768457872.724:496): avc: denied { write } for pid=8118 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.272012][ T8126] loop4: detected capacity change from 0 to 524287936 [ 84.284475][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.325177][ T46] pim6reg (unregistering): left allmulticast mode [ 84.640587][ T8162] netlink: 'syz.2.619': attribute type 29 has an invalid length. [ 84.644009][ T8162] netlink: 'syz.2.619': attribute type 29 has an invalid length. [ 84.647087][ T8162] netlink: 500 bytes leftover after parsing attributes in process `syz.2.619'. [ 84.673859][ T74] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.727399][ T8133] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 85.047355][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 85.085564][ T8207] netlink: 292 bytes leftover after parsing attributes in process `syz.0.631'. [ 85.110552][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 85.295377][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 85.445603][ T8240] netlink: 10 bytes leftover after parsing attributes in process `syz.0.644'. [ 85.526448][ T8245] netfs: Couldn't get user pages (rc=-14) [ 86.231505][ T8268] overlayfs: failed to clone upperpath [ 86.583412][ T8277] input: syz0 as /devices/virtual/input/input8 [ 87.535392][ T8327] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 87.546168][ T8327] bond0: Unable to set down delay as MII monitoring is disabled [ 87.550616][ T8327] bond0 (unregistering): Released all slaves [ 87.691614][ T8335] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.696357][ T8335] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 87.955466][ T8348] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 88.053247][ T8351] tipc: Started in network mode [ 88.056005][ T8351] tipc: Node identity ac14140f, cluster identity 4711 [ 88.058920][ T8351] tipc: New replicast peer: 255.255.255.255 [ 88.061689][ T8351] tipc: Enabled bearer , priority 10 [ 88.064463][ T8351] tipc: Disabling bearer [ 88.363065][ T8364] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 88.367488][ T8364] Error validating options; rc = [-22] [ 88.413716][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.433957][ T40] kauditd_printk_skb: 31314 callbacks suppressed [ 88.433970][ T40] audit: type=1326 audit(1768457876.894:31808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.444276][ T40] audit: type=1326 audit(1768457876.904:31809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.455576][ T40] audit: type=1326 audit(1768457876.904:31810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.468053][ T40] audit: type=1326 audit(1768457876.904:31811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.478741][ T40] audit: type=1326 audit(1768457876.904:31812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.488755][ T40] audit: type=1326 audit(1768457876.904:31813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.497018][ T40] audit: type=1326 audit(1768457876.904:31814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.506033][ T40] audit: type=1326 audit(1768457876.904:31815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.514079][ T40] audit: type=1326 audit(1768457876.904:31816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.521344][ T40] audit: type=1326 audit(1768457876.904:31817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.645" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31e38f7c9 code=0x50000 [ 88.575364][ T8380] overlay: Bad value for 'redirect_dir' [ 88.631929][ T8385] comedi comedi3: comedi_config --init_data is deprecated [ 88.757086][ T8394] netlink: 'syz.0.689': attribute type 4 has an invalid length. [ 88.762836][ T8398] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.767203][ T8398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.770358][ T8398] IPv6: NLM_F_CREATE should be set when creating new route [ 88.773935][ T8398] IPv6: NLM_F_CREATE should be set when creating new route [ 89.097486][ T8412] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_rx_wq": -EINTR [ 89.103744][ T8411] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_rx_wq": -EINTR [ 89.313015][ T8446] __nla_validate_parse: 14 callbacks suppressed [ 89.313027][ T8446] netlink: 68 bytes leftover after parsing attributes in process `syz.0.701'. [ 89.643662][ T141] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.776872][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 89.795022][ T141] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.798696][ T141] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.801900][ T141] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.805317][ T141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.814689][ T8452] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 89.821350][ T141] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.025468][ T8452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.029307][ T8452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.287778][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 90.290757][ T8482] netlink: 'syz.1.712': attribute type 11 has an invalid length. [ 90.293324][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 90.297157][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 90.301042][ T8482] netlink: 'syz.1.712': attribute type 11 has an invalid length. [ 90.304542][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 90.558424][ T8496] overlayfs: failed to resolve './file0': -2 [ 90.765038][ T8503] ip6erspan0: entered promiscuous mode [ 91.052085][ T8513] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 91.054458][ T8513] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 91.058217][ T8513] vhci_hcd vhci_hcd.0: Device attached [ 91.079171][ T8514] vhci_hcd: connection closed [ 91.081015][ T6644] vhci_hcd vhci_hcd.3: stop threads [ 91.085562][ T6644] vhci_hcd vhci_hcd.3: release socket [ 91.087481][ T6644] vhci_hcd vhci_hcd.3: disconnect device [ 91.199302][ T8530] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 91.223731][ T74] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 91.386873][ T74] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 91.389801][ T74] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.392983][ T74] usb 7-1: config 0 has no interfaces? [ 91.395211][ T74] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 91.398088][ T74] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.402963][ T74] usb 7-1: config 0 descriptor?? [ 91.617320][ T74] usb 7-1: string descriptor 0 read error: -71 [ 91.621976][ T74] usb 7-1: USB disconnect, device number 8 [ 91.894765][ T8551] netlink: 96 bytes leftover after parsing attributes in process `syz.3.735'. [ 91.898923][ T8551] netlink: 'syz.3.735': attribute type 4 has an invalid length. [ 92.121574][ T8574] bridge0: port 3(macsec0) entered blocking state [ 92.124838][ T8574] bridge0: port 3(macsec0) entered disabled state [ 92.126888][ T8574] macsec0: entered allmulticast mode [ 92.128444][ T8574] veth1_macvtap: entered allmulticast mode [ 92.131482][ T8574] macsec0: entered promiscuous mode [ 92.134358][ T8574] bridge0: port 3(macsec0) entered blocking state [ 92.136766][ T8574] bridge0: port 3(macsec0) entered forwarding state [ 92.384564][ T10] usb 5-1: USB disconnect, device number 6 [ 92.620138][ T8608] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 93.235567][ T8614] program syz.3.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.354991][ T8618] netlink: 48 bytes leftover after parsing attributes in process `syz.0.756'. [ 93.412192][ T8621] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 93.416295][ T8621] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 93.423875][ T8621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.432705][ T8621] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.595299][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 93.595313][ T40] audit: type=1400 audit(1768457883.071:31888): avc: denied { firmware_load } for pid=8626 comm="syz.1.759" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 93.616790][ T40] audit: type=1400 audit(1768457883.091:31889): avc: denied { bind } for pid=8626 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.633068][ T40] audit: type=1400 audit(1768457883.091:31890): avc: denied { name_bind } for pid=8626 comm="syz.1.759" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 93.640040][ T40] audit: type=1400 audit(1768457883.091:31891): avc: denied { node_bind } for pid=8626 comm="syz.1.759" saddr=d813:1000:728f:102:301:902:1200:100 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 93.856528][ T8632] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 93.860671][ T8632] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 93.864854][ T8632] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 93.868082][ T8632] UDF-fs: Scanning with blocksize 512 failed [ 93.871202][ T8632] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 93.876249][ T8632] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 93.880351][ T8632] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 93.884819][ T8632] UDF-fs: Scanning with blocksize 1024 failed [ 93.887527][ T8632] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 93.891982][ T8632] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 93.895376][ T8632] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 93.897992][ T8632] UDF-fs: Scanning with blocksize 2048 failed [ 93.900263][ T8632] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 93.903802][ T8632] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 93.907337][ T8632] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 93.909818][ T8632] UDF-fs: Scanning with blocksize 4096 failed [ 93.911882][ T8632] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 94.880023][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.883145][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.927047][ T40] audit: type=1400 audit(1768457884.401:31892): avc: denied { create } for pid=8662 comm="syz.0.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 94.950549][ T8663] binfmt_misc: register: failed to install interpreter file ./file1 [ 95.005328][ T40] audit: type=1400 audit(1768457884.481:31893): avc: denied { write } for pid=8668 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.015856][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.771'. [ 95.028600][ T40] audit: type=1400 audit(1768457884.501:31894): avc: denied { lock } for pid=8670 comm="syz.3.771" path="socket:[20230]" dev="sockfs" ino=20230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.112539][ T40] audit: type=1400 audit(1768457884.581:31895): avc: denied { setopt } for pid=8675 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 95.119014][ T40] audit: type=1400 audit(1768457884.581:31896): avc: denied { ioctl } for pid=8675 comm="syz.0.772" path="socket:[25718]" dev="sockfs" ino=25718 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 95.336394][ T40] audit: type=1400 audit(1768457884.811:31897): avc: denied { create } for pid=8681 comm="syz.0.774" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.535485][ T8691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.776'. [ 95.809325][ T8711] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 95.812763][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.778'. [ 96.075073][ T8725] (syz.2.783,8725,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 96.090169][ T8725] (syz.2.783,8725,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 96.101704][ T8725] (syz.2.783,8725,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 96.106635][ T8725] (syz.2.783,8725,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 96.267369][ T8742] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 96.360761][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 96.360894][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 96.364365][ T8742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.370939][ T8749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.430568][ T8754] netlink: 1424 bytes leftover after parsing attributes in process `syz.2.789'. [ 96.555228][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.560060][ T8627] syz.1.759 (8627) used greatest stack depth: 18408 bytes left [ 96.733827][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.776500][ T8781] netlink: 'syz.1.797': attribute type 33 has an invalid length. [ 96.779099][ T8781] netlink: 152 bytes leftover after parsing attributes in process `syz.1.797'. [ 96.990576][ T8804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.802'. [ 97.099477][ T8813] netlink: 'syz.3.804': attribute type 39 has an invalid length. [ 97.169790][ T8819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8819 comm=syz.1.805 [ 97.460892][ T8836] binder: 8835:8836 ioctl c0306201 200000000680 returned -14 [ 97.466015][ T8836] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 97.469574][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 97.473033][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 98.427131][ T8872] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 98.430051][ T8872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.443662][ T8872] vhci_hcd vhci_hcd.0: Device attached [ 98.605359][ T8892] overlayfs: failed to resolve './file0': -2 [ 98.693663][ T6026] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 98.696807][ T8896] bond4: Unable to set down delay as MII monitoring is disabled [ 98.702341][ T8896] bond4 (unregistering): Released all slaves [ 98.739986][ T8900] cgroup: Setting release_agent not allowed [ 98.796914][ T8905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.858375][ T8912] netlink: 'syz.2.837': attribute type 3 has an invalid length. [ 99.186518][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 99.186530][ T40] audit: type=1400 audit(1768457888.661:31924): avc: denied { map } for pid=8926 comm="syz.2.842" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.423659][ T8940] IPVS: nq: FWM 3 0x00000003 - no destination available [ 99.426462][ T6027] IPVS: starting estimator thread 0... [ 99.428855][ T8941] IPVS: nq: FWM 3 0x00000003 - no destination available [ 99.488322][ T40] audit: type=1400 audit(1768457888.961:31925): avc: denied { nlmsg_read } for pid=8944 comm="syz.2.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.498377][ T40] audit: type=1400 audit(1768457888.971:31926): avc: denied { bind } for pid=8944 comm="syz.2.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.510027][ T8945] netlink: 'syz.2.847': attribute type 28 has an invalid length. [ 99.523650][ T8943] IPVS: using max 44 ests per chain, 105600 per kthread [ 99.534417][ T5937] Bluetooth: hci3: command 0x0405 tx timeout [ 99.560789][ T8951] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 99.565597][ T8951] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 99.574295][ T40] audit: type=1326 audit(1768457889.051:31927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8950 comm="syz.2.849" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2a2b8f7c9 code=0x0 [ 99.655314][ T8957] overlayfs: failed to clone upperpath [ 99.735299][ T8877] vhci_hcd: connection closed [ 99.737283][ T6655] vhci_hcd vhci_hcd.0: stop threads [ 99.742036][ T6655] vhci_hcd vhci_hcd.0: release socket [ 99.744528][ T40] audit: type=1400 audit(1768457889.221:31928): avc: denied { remount } for pid=8954 comm="syz.2.851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 99.749960][ T6655] vhci_hcd vhci_hcd.0: disconnect device [ 100.005165][ T40] audit: type=1400 audit(1768457889.481:31929): avc: denied { map } for pid=8977 comm="syz.1.861" path="socket:[26013]" dev="sockfs" ino=26013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.012812][ T40] audit: type=1400 audit(1768457889.481:31930): avc: denied { accept } for pid=8977 comm="syz.1.861" path="socket:[26013]" dev="sockfs" ino=26013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.013664][ T6027] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.126724][ T8984] tmpfs: User quota inode hardlimit too large. [ 100.173637][ T6027] usb 5-1: Using ep0 maxpacket: 16 [ 100.178677][ T6027] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 100.181725][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.184549][ T6027] usb 5-1: Product: syz [ 100.186383][ T6027] usb 5-1: Manufacturer: syz [ 100.188100][ T6027] usb 5-1: SerialNumber: syz [ 100.194050][ T6027] r8152-cfgselector 5-1: Unknown version 0x0000 [ 100.196212][ T6027] r8152-cfgselector 5-1: config 0 descriptor?? [ 100.400341][ T40] audit: type=1400 audit(1768457889.871:31931): avc: denied { setopt } for pid=8964 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.426267][ T9003] SELinux: Context system_u:object_r:crontab_exec_t:s0 is not valid (left unmapped). [ 100.429950][ T40] audit: type=1400 audit(1768457889.901:31932): avc: denied { relabelto } for pid=9002 comm="syz.1.867" name="cpu.stat" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crontab_exec_t:s0" [ 100.439010][ T40] audit: type=1400 audit(1768457889.901:31933): avc: denied { associate } for pid=9002 comm="syz.1.867" name="cpu.stat" dev="tmpfs" ino=1643 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crontab_exec_t:s0" [ 100.537269][ T6027] r8152-cfgselector 5-1: Unknown version 0x0000 [ 100.539666][ T6027] r8152-cfgselector 5-1: bad CDC descriptors [ 100.553424][ T6027] r8152-cfgselector 5-1: USB disconnect, device number 7 [ 100.829607][ T9035] __nla_validate_parse: 11 callbacks suppressed [ 100.829627][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 100.854098][ T9035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.868018][ T9035] bond0: (slave batadv1): Opening slave failed [ 101.125833][ T9042] use of bytesused == 0 is deprecated and will be removed in the future, [ 101.129895][ T9042] use the actual size instead. [ 101.133397][ T9042] openvswitch: netlink: Key type 31 is not supported [ 101.211812][ T9047] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 101.213906][ T9047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.218112][ T9047] vhci_hcd vhci_hcd.0: Device attached [ 101.220568][ T9048] usbip_core: unknown command [ 101.222184][ T9048] vhci_hcd: unknown pdu 0 [ 101.223851][ T9048] usbip_core: unknown command [ 101.225680][ T6644] vhci_hcd vhci_hcd.0: stop threads [ 101.227977][ T6644] vhci_hcd vhci_hcd.0: release socket [ 101.230427][ T6644] vhci_hcd vhci_hcd.0: disconnect device [ 101.238418][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 101.625563][ T5937] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 101.628540][ T5937] Bluetooth: hci1: Injecting HCI hardware error event [ 101.631984][ T5936] Bluetooth: hci1: hardware error 0x00 [ 101.712559][ T9055] tmpfs: Unknown parameter 'yÑJ¢ ‚læd' [ 101.775937][ T9055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.881'. [ 101.780491][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 101.898159][ T9068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9068 comm=syz.1.885 [ 101.981941][ T9071] [U] [ 101.983399][ T9071] [U] [ 101.984571][ T9071] [U] [ 101.985775][ T9071] [U] [ 101.988405][ T9071] [U] [ 101.989520][ T9071] [U] [ 101.990453][ T9071] [U] [ 101.991592][ T9071] [U] [ 101.992900][ T9071] [U] [ 101.994072][ T9071] [U] [ 101.995316][ T9071] [U] [ 101.996494][ T9071] [U] [ 102.001708][ T9071] [U] [ 102.002834][ T9071] [U] [ 102.004032][ T9071] [U] [ 102.005390][ T9071] [U] [ 102.010717][ T9069] [U] [ 102.079472][ T9088] unsupported nla_type 4111 [ 102.145018][ T9098] netlink: 'syz.2.895': attribute type 10 has an invalid length. [ 102.148366][ T9097] netlink: 'syz.2.895': attribute type 10 has an invalid length. [ 102.156042][ T9098] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 102.196862][ T9102] netlink: 'syz.1.896': attribute type 11 has an invalid length. [ 102.197629][ T9104] sock: sock_set_timeout: `syz.2.897' (pid 9104) tries to set negative timeout [ 102.259175][ T9106] netlink: 'syz.0.898': attribute type 63 has an invalid length. [ 102.261687][ T9106] netlink: 5 bytes leftover after parsing attributes in process `syz.0.898'. [ 102.264861][ T9106] gretap0: entered allmulticast mode [ 102.267027][ T9106] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.347570][ T9117] Cannot find set identified by id 65534 to match [ 102.385570][ T9124] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 102.439212][ T9134] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 102.588227][ T9146] bond0: entered promiscuous mode [ 102.590002][ T9146] bond_slave_0: entered promiscuous mode [ 102.592129][ T9146] bond_slave_1: entered promiscuous mode [ 102.605378][ T9146] bond0: left promiscuous mode [ 102.607918][ T9146] bond_slave_0: left promiscuous mode [ 102.610550][ T9146] bond_slave_1: left promiscuous mode [ 102.752768][ T9158] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 102.784515][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.916'. [ 102.787648][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.916'. [ 102.816747][ T9163] : entered promiscuous mode [ 102.955115][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 102.983128][ T9177] .`: (slave bond_slave_1): Releasing backup interface [ 103.071346][ T9185] syzkaller0: entered promiscuous mode [ 103.074358][ T9185] syzkaller0: entered allmulticast mode [ 103.110722][ T9188] vlan2: entered promiscuous mode [ 103.112876][ T9188] bridge0: entered promiscuous mode [ 103.351752][ T9206] netlink: 104 bytes leftover after parsing attributes in process `syz.3.928'. [ 103.675276][ T9217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.933'. [ 103.693628][ T5936] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 103.796027][ T9221] erspan2: entered promiscuous mode [ 103.843705][ T6026] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 104.116960][ T9229] loop6: detected capacity change from 0 to 2640 [ 104.121497][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.126068][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.128967][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.132089][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.136010][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.138637][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.141606][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.145521][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.148155][ T9229] ldm_validate_partition_table(): Disk read failed. [ 104.150701][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.153910][ T9229] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.156566][ T9229] Dev loop6: unable to read RDB block 0 [ 104.158490][ T9229] loop6: unable to read partition table [ 104.163903][ T9229] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 104.196412][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 104.196426][ T40] audit: type=1400 audit(1768457893.671:31952): avc: denied { create } for pid=9228 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.206888][ T40] audit: type=1400 audit(1768457893.681:31953): avc: denied { ioctl } for pid=9228 comm="syz.2.938" path="socket:[27054]" dev="sockfs" ino=27054 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 104.229942][ T40] audit: type=1400 audit(1768457893.701:31954): avc: denied { append } for pid=9224 comm="syz.0.935" name="event3" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.357298][ T40] audit: type=1400 audit(1768457893.831:31955): avc: denied { read write } for pid=9254 comm="syz.2.946" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.370589][ T40] audit: type=1400 audit(1768457893.841:31956): avc: denied { open } for pid=9254 comm="syz.2.946" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.381505][ T40] audit: type=1400 audit(1768457893.841:31957): avc: denied { ioctl } for pid=9254 comm="syz.2.946" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.392062][ T9256] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 104.394587][ T9256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.399100][ T9256] vhci_hcd vhci_hcd.0: Device attached [ 104.475898][ T9249] Process accounting resumed [ 104.487403][ T9269] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 104.520115][ T9271] macvlan1: entered promiscuous mode [ 104.522192][ T9271] macvlan1: entered allmulticast mode [ 104.524120][ T9271] veth1_vlan: entered allmulticast mode [ 104.580773][ T5936] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 104.601820][ T9279] netlink: get zone limit has 4 unknown bytes [ 104.643617][ T74] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 104.643889][ T830] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 104.644407][ T9282] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 104.803793][ T830] usb 7-1: Using ep0 maxpacket: 16 [ 104.806354][ T830] usb 7-1: too many configurations: 60, using maximum allowed: 8 [ 104.809705][ T830] usb 7-1: config 0 has no interfaces? [ 104.812417][ T830] usb 7-1: config 0 has no interfaces? [ 104.816656][ T830] usb 7-1: config 0 has no interfaces? [ 104.819233][ T830] usb 7-1: config 0 has no interfaces? [ 104.821773][ T830] usb 7-1: config 0 has no interfaces? [ 104.824972][ T830] usb 7-1: config 0 has no interfaces? [ 104.828846][ T830] usb 7-1: config 0 has no interfaces? [ 104.833376][ T830] usb 7-1: config 0 has no interfaces? [ 104.837541][ T830] usb 7-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 104.840573][ T830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 104.843198][ T830] usb 7-1: Product: syz [ 104.845822][ T830] usb 7-1: Manufacturer: syz [ 104.847560][ T830] usb 7-1: SerialNumber: syz [ 104.850385][ T830] usb 7-1: config 0 descriptor?? [ 105.042004][ T40] audit: type=1400 audit(1768457894.511:31958): avc: denied { ioctl } for pid=9300 comm="syz.1.958" path="socket:[25439]" dev="sockfs" ino=25439 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.057157][ T9258] usb 41-1: recv xbuf, 0 [ 105.058947][ T10] usb 7-1: USB disconnect, device number 9 [ 105.061205][ T6641] vhci_hcd vhci_hcd.2: stop threads [ 105.063005][ T6641] vhci_hcd vhci_hcd.2: release socket [ 105.065544][ T6641] vhci_hcd vhci_hcd.2: disconnect device [ 105.099009][ T9306] dvmrp1: entered allmulticast mode [ 105.123857][ T74] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 105.381952][ T9318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.383733][ T40] audit: type=1400 audit(1768457894.851:31959): avc: denied { map } for pid=9317 comm="syz.3.964" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 105.474756][ T40] audit: type=1400 audit(1768457894.951:31960): avc: denied { read } for pid=9323 comm="syz.3.966" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.482814][ T40] audit: type=1400 audit(1768457894.951:31961): avc: denied { open } for pid=9323 comm="syz.3.966" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.660864][ T9337] comedi comedi3: comedi_parport: I/O port conflict (0x1,3) [ 105.685586][ T9326] /dev/sr0: Can't open blockdev [ 106.002900][ T9356] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 106.006909][ T9350] Process accounting resumed [ 106.057990][ T9360] can: request_module (can-proto-0) failed. [ 106.120206][ T9368] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 106.362110][ T9394] fuse: Unknown parameter 'qG' [ 106.417511][ T9399] __nla_validate_parse: 3 callbacks suppressed [ 106.417527][ T9399] netlink: 152 bytes leftover after parsing attributes in process `syz.1.991'. [ 106.425082][ T9399] netlink: 'syz.1.991': attribute type 21 has an invalid length. [ 106.515271][ T9410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.527672][ T9410] xt_connbytes: Forcing CT accounting to be enabled [ 106.530793][ T9410] set match dimension is over the limit! [ 106.573617][ T9415] netlink: 124 bytes leftover after parsing attributes in process `syz.0.997'. [ 106.625466][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.999'. [ 106.626657][ T9421] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 106.846490][ T9441] openvswitch: netlink: IP tunnel dst address not specified [ 107.429078][ T9473] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1016'. [ 107.432722][ T9473] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 107.437827][ T9473] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1016'. [ 107.441736][ T9473] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 107.662799][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x3b9600000238 [ 107.673076][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x3b9600000238 [ 107.797212][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x3b9600000238 [ 107.805586][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x3b9600000238 [ 107.909042][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x3b9600000238 [ 107.921295][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x3b9600000238 [ 108.043967][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x3b9600000238 [ 108.055043][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x3b9600000238 [ 108.189589][ T9507] netlink: 'syz.1.1025': attribute type 2 has an invalid length. [ 108.192319][ T9507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1025'. [ 108.211200][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x3b9600000238 [ 108.220680][ T9480] kvm: kvm [9479]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x3b9600000238 [ 108.501174][ T9512] set match dimension is over the limit! [ 108.561802][ T9518] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 108.564580][ T9518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.568272][ T9518] vhci_hcd vhci_hcd.0: Device attached [ 108.581878][ T9518] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 108.604822][ T9518] 8021q: adding VLAN 0 to HW filter on device bond4 [ 108.618988][ T9518] vlan3: entered promiscuous mode [ 108.621029][ T9518] bond4: entered promiscuous mode [ 108.629311][ T9518] vhci_hcd vhci_hcd.0: port 0 already used [ 108.633246][ T9519] vhci_hcd: connection closed [ 108.633764][ T6641] vhci_hcd vhci_hcd.0: stop threads [ 108.637894][ T6641] vhci_hcd vhci_hcd.0: release socket [ 108.640120][ T6641] vhci_hcd vhci_hcd.0: disconnect device [ 108.654539][ T5936] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 108.657838][ T5936] Bluetooth: hci3: Injecting HCI hardware error event [ 108.661590][ T5937] Bluetooth: hci3: hardware error 0x00 [ 108.676546][ T8759] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 108.681444][ T8759] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 108.685208][ T8759] CPU: 0 UID: 0 PID: 8759 Comm: kbnepd Òξ Tainted: G L syzkaller #0 PREEMPT(full) [ 108.689615][ T8759] Tainted: [L]=SOFTLOCKUP [ 108.691405][ T8759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.695410][ T8759] RIP: 0010:klist_put+0x4d/0x1b0 [ 108.697510][ T8759] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 26 0d [ 108.705175][ T8759] RSP: 0018:ffffc9000172f930 EFLAGS: 00010202 [ 108.707665][ T8759] RAX: dffffc0000000000 RBX: ffff8880565fec60 RCX: ffffffff826a8dbd [ 108.710585][ T8759] RDX: 000000000000000b RSI: ffffffff8b6e0b05 RDI: 0000000000000058 [ 108.713673][ T8759] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 108.716509][ T8759] R10: 0000000000000000 R11: ffff88803387d4b0 R12: 0000000000000000 [ 108.719451][ T8759] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 108.722403][ T8759] FS: 0000000000000000(0000) GS:ffff8880d68f4000(0000) knlGS:0000000000000000 [ 108.725595][ T8759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.728257][ T8759] CR2: 0000200000001000 CR3: 000000002957b000 CR4: 0000000000352ef0 [ 108.731097][ T8759] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 108.733894][ T8759] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 108.737126][ T8759] Call Trace: [ 108.738252][ T8759] [ 108.739248][ T8759] device_del+0x1d8/0x9f0 [ 108.740823][ T8759] ? __pfx_device_del+0x10/0x10 [ 108.742876][ T8759] ? netdev_unregister_kobject+0x2da/0x540 [ 108.745051][ T8759] unregister_netdevice_many_notify+0x151e/0x2590 [ 108.747217][ T8759] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 108.749869][ T8759] ? __pfx___mutex_lock+0x10/0x10 [ 108.751718][ T8759] unregister_netdevice_queue+0x305/0x3c0 [ 108.753546][ T8759] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 108.756106][ T8759] ? rtnl_net_dev_lock+0x28/0x360 [ 108.757902][ T8759] ? rtnl_net_dev_lock+0x146/0x360 [ 108.759546][ T8759] ? rtnl_lock+0x9/0x20 [ 108.761253][ T8759] ? rtnl_net_dev_lock+0x146/0x360 [ 108.763344][ T8759] unregister_netdev+0x1f/0x60 [ 108.764879][ T8759] bnep_session+0x22db/0x2e10 [ 108.766484][ T8759] ? __pfx_bnep_session+0x10/0x10 [ 108.768572][ T8759] ? do_raw_spin_lock+0x12c/0x2b0 [ 108.770459][ T8759] ? __pfx_woken_wake_function+0x10/0x10 [ 108.772216][ T8759] ? rcu_is_watching+0x12/0xc0 [ 108.774091][ T8759] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 108.776440][ T8759] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.778083][ T8759] ? __kthread_parkme+0x19e/0x250 [ 108.779947][ T8759] ? __pfx_bnep_session+0x10/0x10 [ 108.782006][ T8759] kthread+0x3c5/0x780 [ 108.783702][ T8759] ? __pfx_kthread+0x10/0x10 [ 108.785619][ T8759] ? rcu_is_watching+0x12/0xc0 [ 108.787609][ T8759] ? __pfx_kthread+0x10/0x10 [ 108.789573][ T8759] ret_from_fork+0x983/0xb10 [ 108.791480][ T8759] ? __pfx_ret_from_fork+0x10/0x10 [ 108.793601][ T8759] ? __switch_to+0x7af/0x10d0 [ 108.795541][ T8759] ? __pfx_kthread+0x10/0x10 [ 108.797435][ T8759] ret_from_fork_asm+0x1a/0x30 [ 108.799428][ T8759] [ 108.800716][ T8759] Modules linked in: [ 108.802465][ T8759] ---[ end trace 0000000000000000 ]--- [ 108.805780][ T8759] RIP: 0010:klist_put+0x4d/0x1b0 [ 108.807860][ T8759] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 dc 26 0d [ 108.815454][ T8759] RSP: 0018:ffffc9000172f930 EFLAGS: 00010202 [ 108.818055][ T8759] RAX: dffffc0000000000 RBX: ffff8880565fec60 RCX: ffffffff826a8dbd [ 108.820888][ T8759] RDX: 000000000000000b RSI: ffffffff8b6e0b05 RDI: 0000000000000058 [ 108.824941][ T8759] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 108.828303][ T8759] R10: 0000000000000000 R11: ffff88803387d4b0 R12: 0000000000000000 [ 108.831662][ T8759] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 108.835632][ T8759] FS: 0000000000000000(0000) GS:ffff8880d68f4000(0000) knlGS:0000000000000000 [ 108.839490][ T8759] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.842216][ T8759] CR2: 0000200000001000 CR3: 00000000224c5000 CR4: 0000000000352ef0 [ 108.845679][ T8759] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 108.848698][ T8759] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 108.852064][ T8759] Kernel panic - not syncing: Fatal exception [ 108.855220][ T8759] Kernel Offset: disabled [ 108.856914][ T8759] Rebooting in 86400 seconds..