last executing test programs: 35.141764584s ago: executing program 0 (id=377): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x22002, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1bb8}]}}]}, 0x60}}, 0x44080) memfd_create(&(0x7f0000000580)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x01\x00\x00\x80h\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\x89\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\'.\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0xc) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r4, 0x1, 0xd7, 0x6, @multicast}, 0x14) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r11, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x1005, 0x400, 0x20303159, 0x2, 0x8, 0x46, 0x8, 0x3, 0x1, 0x7, 0x0, 0x7}}) 34.992107288s ago: executing program 0 (id=378): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010015, 0xbc9faef6, 0x200bf}]}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xf) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r7, 0x406, r9) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r8, 0xb) listen(r7, 0x50) close_range(r6, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x1b5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r10 = geteuid() mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), 0x1000, &(0x7f0000000240)={[{@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@euid_gt={'euid>', r10}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 34.807639644s ago: executing program 0 (id=379): syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x1, 0x2003) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfa6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8f}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000001c0)={0x4b, r1, 'id0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x37}, @val={0x8, 0x3, r4}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r5, &(0x7f00000003c0)="96e1a9454eb85703d6560d46de9a232ef1e749fb0a9b58ea676954570104087cf43bda6ac47c51163a365c2c59a01413766897d552ff72c3473c5ef45f8340aa24e0e38f6c14d7753d8b5b9ded269714ecac23cdbf8943292a09093a54b3a4b14b344f32aa2a1b063cb402b970316e260cd7fe7aa9bf0bedfd8da2a4fe18e2e7b8834883c1054a5a5df01be10916c3300343fa7c59065661ea84658f0a48b74defa18aff98c2af1006c433a67b9fba3e3289e3b78408d74b66d8aa28084a6d16f189c05e999151d1e2338d56636afd0c43b55b21c922b02b8e80880128f1276586a8e75898655e399f69f020", 0xec) r6 = open_tree(r1, &(0x7f00000004c0)='./file0\x00', 0x100) r7 = accept(r6, 0x0, &(0x7f0000000500)) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r7) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r8, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20000880) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x22}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000088}, 0x48000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r2, &(0x7f0000000780)="ee6661271167f973b8e12cc312bd0062f8a4d89a87dbefc2bbb0d43a028344952a143e98cdeb63567d00f51a5f330bd8aea7784dd4f1f9440bc897bc2996f406dc86c6232ea1504af9c704602c0e247d6a3a0e06f3cc88d0dcc94fab53aa0f25b792266f1c0b4ae62417b41453c7e6d515a8675a22d96aae1c785c29e5b653f2a9a881c25ba38540a0adac5b472843fae4e287adf9bd7448a4b51e834ba11df2e3007c02b5364c003472a2ad18b7dcc959bfb184b199b1237c173ef8db4f2fb2067eb7147075f933e1dc05af58d60628eb0fe929577b1ece3969f04e95b5d342c17dde30eeeefe7f373322a7", &(0x7f0000000880)=@buf="937178f752e6bd91201f5b9d1df4d5089f6a9d014c755e6ed836f0c74435c23fcdf87c245715abf4f011e88324fd4265f202ec90e8777d7ac25472834a0848783ca6b3f9d7ff74470d0108cc66c60bb500b7f2e564c67bb9a3a559e98d0cca815d40f1c3307256ab6bc3e9b58bbb8fad7e932c356b79756f29742faee4f313ff457a621df785f82f17aa083f17ec6add"}, 0x20) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000980), 0x4003) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$BLKRRPART(r10, 0x125f, 0x0) write$qrtrtun(r2, &(0x7f0000000a00)="64ef55f8bbf2ed890b1b403b7bb305c5c2ea3475ba34e6141c35bee19254edc3b907d05727e520579c44740a1576dbb4b65624c95263ca2a023341d1b9bbb61f4114b8ada594359f4d301b9fa1030e9b40de8d82d0a637628f7107f53d7331ed1a9cc7ce5faf1889421184e4025f3b0a960280555bfc7e734d5d846b907e3f8f5a187c06734e112508d8e249bfc5d28ddf69a5ebe39f320013ccc0773a1e1dafc08a1aefa41f8e32bbb1f8b8e8be67022b2ae60f8d9786fc728c1e8751572db3115b3b3020fdae313129893e14831330085adb76300cc4677222c41985bd8a43364f87de348578ba0b0c798ed207f189728f890ceb5b5ce49d935f2e2adae0b2c9244f19d3d212ab0bab8f2cc361b638cfaed6790f6f064050f2f056e3e20e279f2c9951ee175ecccb70276889131648663e477104d441677fdf3e58ed9c24d4712a9fc87f71e615cc202525d236bd6c558e14ec1f48414d5729f9755e5287c035f2010a990f9e12b2bf240e74f488a16313cfa9ab645e705f493a70f4eb899385b5d1b9be4b4a1428209f46e86fae2e7d5997b43995f6d513436976bb37bd24739cfac60b3f3c4ff4e8d560e2d71f69251ef9f22595e7d3677ef0c5b164e2bf17d61ed721761aabf9b4f1108a3ee7152a8ed5fd859380f93a7aa1c5e4c77cea2f7da2e87839d82b2d7ed8c5d178a2ef09b2092a848e6e05c7d68ed6cec3cb22fbc83bf5cfd510e8a02c40dec2560f4b2b3e93788e0380f79e1fabd5a7267fadbdc7deed2417ae1d2dbbd035925327646b7298870c7f8c763f7cbb6936e4e4558879629e6dbc63af4a43cf0a33ad99c053af34212fd7d282804152606bedf9215cab86cfde0cd24d689765742864184aaa6a67bc3f8023bb4871a0b76261b841a8336af78eccbbfab5d35350e6cf9f3fe9a97f231d88764d4769f259019f8ef04235063d486f3543052fe20a79cad3fe03001fca6d43a2ccc1fcde12d313c53a06eded58a23e1e29e5eb63f225ec6e79c1982c79d39fe968087e1f828ec9ce422da795484c97b889d21dc4608ab6545c53d5698588aa39ecf7eef512e4ee27637924a1ae4a13c02ab7c08f769435c5f64ce2d8c88d56d28374bfb39235ef0a20a6676fb3763d35b221275dbf59ba578808993e0ef9e97f2140f2d556f21d975eb4f250cd0d84399782b80b8d70276d57e412854ef9caa10042a972fae4135f62e5a2c908f34283de2e106d15c12126c8d03324963fe54d234059ed4957368cb77743bb56d49d4dee2c6fd92acb79a91f7fefa46fccd0343bdaf32c41ed0ba411698971fe94049e426d6d8ec48fbe0ce47f562226868abc8c6dffa4415d018a09f0040ab9d90c55548be60a52065bb4284dd69699bd00af7d721f5b57deae80f32e9351eac51eb41188a8c408f13df74c9cc55ccfde426ccccc3b937f9847dbc7f94d9c74c5c4f92ed5cc4ed7e904584d827317c74431e628a8a88540da77f5ddcd6bb9f93fa701cb3766d03ed01d0535af7c64f447f7366f2dc3ed4186d6a48605aa82b647d214ac9f18b7a6ce950ca110be1dd55b7c8a006e118fd9503b49691f1f07542309b3422c83873451f45e8ba1781b570b743922fdd9e5153c40cfe490ae2049adee037bde108e809c7e9af72910cac8d560148d6be7d8100eafce3198e28e122c2f7f7e7faafe5fee86cbf8c09daaa0d667861e83bfcdfab289e068900526013358d82524d374cda6754b347358c1493afdc89dc52c9d6cb3bf9c5d5bb8cd256579fb6451c66f42277ded6a9dadb76f733b6bfb7b7a02c6a8802e3a82a302a43e148672fcaf450c4a6c45dec8181809b86791bb2ab3de21ebaf3e5e3a6fcbb906625bcb140b9bab2d49f1b775f9e48c9929100a4a57e85f079f6033dd45c5b08cff81098cf12477f8db32f85c6f300a6081be0b9b952a9c94f6f886c5b26d68e81ca641c0fd87240f1632964bf7e894abf58c2801e016bd245b1505f2102c919441265b495b993ecf94c9d87dcebd1a322d0f436db366819d34dd4fea7addd74d0ff79745767549387c06b3441e3187ddce30c227f1a4e2724ee8b09a89a69ee25945b52ff1d58f1cd952b09bb49c65e6817b187e121ccb03322cc2772fae95e787ecf40d9f5668e65dde1c4d002799f599b4d6587d085c4dcc8f57f30eac4b73117dd9690a3f9285b465ad91a4ca882ffba0f472a1f1a30dd47536e3d3d2f2150dbc1da13405e57da0d78b34d00889b9b5e0ceeb70637959ad3c1f4ac7e3a9aa4d3a98b30e60d99cffebfdf93915a3f3f8cc4d442071bcbfd4a32b45f8e4f5ce5aaf93d8e96d13a0ed437af9dc7ab199ce444eea463d629b04f4ff0105f1283cadc1c48ed21ee7db2a91c48257057389cbb1531e379d2015741bce82ff8505ec46d9af5b255a3416aad5ed0d074f3953d70f66a8d54fc68582e626d34b72559190105d46af26f5d6d1d98a29b6e1b2121c7b438e140612d0ebbde25fbcfe4a54e9fc5a280d93b94a9e2956d242f783f5fb1457dce6af6518b48f77ffdb1354c97517348056ddf6e219c44ff59daf82b2f93001993704f11b651cf5b3b7a5fee10720c5c7e66e97185908e98ea51d0cefddab82493ea1b9a519fd334302f56e02b51a31955ab28bf74717dacd013657e51649b613b5d5085aca396ea1fcde53b8796bc8fd8a2dbb2905b26b445e019c5d6015d946b70b58c3de4b7de9c5958013f59a585a85f26aab8cbb6af8e6918a514cb70b1c773126863b5e6e0a470891730ad43e4542ae95fb476c773db309e586ab52744485c2ef2a0e309a9f7a6f3755fa19d06330f95fddb818321ebbe01e4b1eb9123d5c6d4a51ebd7cc9a564876f33977c59e2853d6a699c33bb11dd63077642d6a0e8f8e31ed28ed14d1b01a4492ed925ace5130e7e21f68d3953062f022fa373f2624394f44cbca5fd99b3c92dcf8ae5ff36fc620ca6d16b8aa4f1d8c7f5d209ed8e4b272c9451c80183c3b0493dbd1b9219fa6871683364a346b9ceb07b78b72af9db70058869e0ae8794da96863f0b2c052475abcbf78cb136c850d4f596ddd69ee2d3b8f9e3b963f165017aa197db70d4c9d88f89a6a804ef24e4f35f3c385c8befe4b18e8ac0531dc903cd78ce56b1a7d51ce25723957a71febfb8a3f57195eb6ff6e699e73b27021a9d840363e2a5eb29962dc6e882977192b09069a480317a1929463d1b7193710e41ccb0ce348e45c434875e2b05924a0cad142a48c96fc3b48684ac168463b3623c3775113889069c3a4dbc215fa1c20e96d1ca2543b2f1e18b669c8463b1f0885f38133577eef4c1a10211e56f316bb4d4faf573b3d73fa82960c88507574a89971767cb848ab6b9dfd10f39ceec30fc03100a833ad9fd105bf3ca5fa352547c066601feb0cc98c939a191dd694a898fc00a398648ae9c54463bfd9b42b82b86a66156f1e35c4d88646949888c93b5c2340f5559bc6f5ae0542a2f5ceae8344615005502558e07b49f5932fc27907683375532042f821ef85ab995fe0da538573a375f60855a38b7128731c0ab81072be0639560f85e2690a5d4128ec72ee0c9a3fffa0f3a389090c3e211e3cb0ffc99a35698318ffbf1682ca84d350bba02c323ddb16e3d2d8abd043b0b639a6fa451ca96ecac6580e5258eeb30b5db5758b583f683673b76b297df56e82fa64f7ff26d0123a4595db5c976bfcf8ebf1495e314188271cd965c7d02930d0c401934bd811d6a3e7c7d83a9c8b25fe076d9fdd54531f930201ffcfb9e7dea4798f658838e260985f123003dcd866e37db02fe42ad8f851f858faafe60fd1d5915e7aa045eac4360ef619774a4f8bb019a0067661b71bc70fbd669c351cc5d840021a1f2f690890c3d4f5977ba27c3239abf355119cd844d3034b694a426a112bf347d893c2fce2d37244d0c601c7afb249ce61896820b60d1dd17ff202f7aba93a653c5cd033c225bc6187552426ce246d8d8f0672c24fee337d11e4a83cbd2bf8da8b27bc7d332f4188d7193ae22368a9c8a31d5ce0adf5240aa8b4345d3c35d4cea1955fdab03a8b58febde0c7259b3275db1cf1ddf5832af11ea50c4dad520f91133073e615bd1914ad301bea9817ff38b60f5062ea2c77309bdf784d3bf9238e894b71f673cf3220178523b024df9898eb7cb916b7164e5e4b13fdf6bcd7936b7d33da2f348f6c537c46f298214b06061412bb677c7fba62b7755b43279fdcb0c7a7625f4f75ae8f6b5b71c1c00d664ada858f88f39c8c60893195bf52c6e243ef55b4353dcebcc890cc091b1f3cadacb13fa9311a18984aca165a994f78eea5f2a17ebebc7c02cbd7c194f8c65a2c7fc68d6120581b0638ab7de953e9472cd5c0055a9304470f2303bc7d081d987e7e4e2f9cb28689d3cdfa008c57ecdb791b86aa57b2ef32d78e1505f65d49ae23e068e094ffce54c394643cdfff03d69bfb10108674f6f5424073e929e09e68f33bc4510b8ac9e796c4e5f1e0d1243e114454607e1a28423ac9888a9284abf06eafe6c8b3a7692a3a5b9d0df4a5aa89d697bebc8ef45b4cf1abf6b610f6e1ad20f29cbebc014c0ef53324a577c35c23df52df25e85f4e4357f4fe429a594b953eb9051ac6f56251747e48523a163b5073ee82bde527e705cd903c6198783c03f6c66ec84e062d96c96caea09ddfad7db74ef19c03df4011320f941aa20bb3ef7f6406a9bd46cd7ae29f01f3876c39c9744bae2f95f2e32c119db34df91b8d943b81e75cdd9e660893796d45278f3310df5711102b7f86f8cda493fbc73b0a35aadaa5eeca0dbf0c04568018fda1068414603d381357258ab64aea8963ad2371632b0182d2d5632a7254251c25e70b96437f6381cf3fba0a6f6edd20d3033acd06b462b0402b0f4c4de37ebde8ceb97fbe0f4546a364e1f58339197ed41a41dcfeb2b4b09a8377863d10510204bd48f13f342210a5d1bf6623a2643f900fda5c5b95613087d28bc573f3d37790d5526f23c704761139c495718c046b025ef5d3e85e6b3cd39d3e366418a43a585550cf6e74fa48f8829699e945b3a138be2bb484cb60ad03805efa73e984ef5ecaaa8fa0460c68090cbb7b094efb73b5487a9f134fd13eb8898e708d9acf490d4ce26fd82bd69c921b6d23d02445766146cbe1bd9197bb4246981f4298baee9516b4f8db9c7c24ac878ac2d8db181510c3fc3203dbed9f596c722bc262c7d3dc4cf54f4724305b16d71d734d7510a32442808a1591ae003455c88dd86a6e6a78c0dfb3e98d5eb963305de6db62e8741a317ddd6027f0da4571b8a48ae875f97dd8f0ddd80ec33a249179bac7b1f97be3a3253c2c03862e9a6eb8552a08944411b44eeca0b0f6df4aaf15c68ffc7d66fb3bc5c11f0a90b81d7b64fff00e99f811ade8cc6aa61afa302fea30e25acfb430390270c10b33b64a44908bcd0dea2a6594e20a0664f1480c51c4b6ef722c1f48a95fe949a561d25e6b5e2ffa51a03589f098ed8e950cb766a08e5c00c9fb67c2494fd83647f324a2bfb136907fc4e2560ec4822faf2d9b9b8257ca2ed6b35df94806335ce246396a79016d62d9ce9f824a8d707eb20a83913c9983c976afc1ef6ae130d02e800efa7de0b0ecbaba383258535fe227a1d980ba4d95316b6535a682f5898e8f7b29c7233c623d5b7ae61620b6913d9d6003316bfb6fef7471d9a6a1495308d991960f88bbeb0eecce1f62ee3a69bb9084556d547928c3082967484c8255a10360370b5afc63a90eb96535b4bb84d16450331cff70e7380a8c6e12538ae77e", 0x1000) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf, 0x28}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x24000091) fremovexattr(r5, &(0x7f0000001b00)=@random={'trusted.', ']\x00'}) process_vm_writev(r0, &(0x7f0000002c80)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/46, 0x2e}, {&(0x7f0000002b80)=""/251, 0xfb}], 0x3, &(0x7f0000003f40)=[{&(0x7f0000002cc0)=""/38, 0x26}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/229, 0xe5}, {&(0x7f0000003e00)=""/85, 0x55}, {&(0x7f0000003e80)=""/170, 0xaa}], 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x28, 0x140c, 0x300, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x28000000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f00000040c0)={{@host, 0x5}, 0x100000001, 0x6, 0x1d2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000004100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000004140)="5b92d67480ea7836cd0757639b7cadef190082065daa10014fcc6dd2da9e31309914872b448069c01f147d6577e20967e1495344528ed7b36c441ea2b1be47ee0cf5f3d63783d26d77afcdf609276035817837b807ccc1bff8472f25", 0x5c) socket$inet_sctp(0x2, 0x5, 0x84) 34.787436032s ago: executing program 0 (id=380): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r1, &(0x7f0000000440)=0xffffffff, 0x12) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x6}) 34.713355836s ago: executing program 0 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r0, 0x0, 0x7}, 0x38) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 34.456959973s ago: executing program 0 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x20, 0xfffffffc, 0xfc, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x20, 0xfffffffc, 0xfc, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x28}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="ff"], 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r6], 0x20) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603240095258000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff0000380046"], 0x78) r8 = socket(0x1, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) close(r1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) 19.473642333s ago: executing program 32 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x20, 0xfffffffc, 0xfc, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x20, 0xfffffffc, 0xfc, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x28}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="ff"], 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) (async) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r6], 0x20) write$P9_RLERRORu(r4, &(0x7f0000000100)=ANY=[], 0xe) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603240095258000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff0000380046"], 0x78) r8 = socket(0x1, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) close(r1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) 3.305146278s ago: executing program 2 (id=763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CEC_G_MODE(0xffffffffffffffff, 0x80046108, &(0x7f0000000040)) ioperm(0x6, 0x1, 0x95d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa00, 0x21) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x80, 0x48) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x4000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fa30817db8b4f31a24001280110001006272696467655f736c617665000000000c0005800500050005000000351c40006272696467655f736c617665dca57059"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 3.220182899s ago: executing program 2 (id=764): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x0, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) (async) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x56}, 0x20) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x38) (async) renameat(r4, 0x0, r4, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) (async, rerun: 64) openat$audio1(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) (async, rerun: 64) r5 = socket(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000280), &(0x7f0000000000)=r7}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r8, 0x25, 0x2, @void}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x72, &(0x7f0000000540)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x5}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4c592a6ce391f7f2edf1b39f7d42600a8df3bf4509678aa6", "45eb4f14ac72a2fe9ee865eb1be2d21865daa64683b62ba4ba164c0691ccfbb3"}}}}}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000300), 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.219165099s ago: executing program 2 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) sendto$netrom(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @bcast, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="86f39d6dc59d7eff89181b411bce8bbd9fad5e9ad243033145cadfe8e4b50165fca201ae05af91dc0900000071446bd52615108c71208a40231c2c35ea59b286eef72e3e88b53f545082fb96ff7cacddd046fa54a54db1aa2207a43dc946c870d35f1e17f2d897f8222d38063ff646299dada0eb72f6c231b054e6c486b178f7ad84484bc6b6318ae17458d8f0f2a8d8a54ac05bacb3b041e5506d44dcb133e043d010d2d1bc195062e055ceaa64cabd6fbb8fd365106fb7afe4f5710e501f300de3b55f53445b366c1015da4a0208ea24dbc75f", 0xd4}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caff030000875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0xfffffffffffffd98}, {&(0x7f0000001480)="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", 0x1001}], 0x3) (async) close_range(r0, r1, 0x2) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4) (async) close_range(r2, r1, 0x0) 3.145731245s ago: executing program 2 (id=766): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$cont(0x20, r1, 0x1, 0x3) ptrace(0x10, r0) ptrace$getenv(0x4201, r0, 0x2000000000009, &(0x7f00000003c0)) 3.080542355s ago: executing program 2 (id=767): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r0, 0xf) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0xa145c7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_adjtime(0x17, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x5, 0x0, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x9) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x41, 0x10}, 0xc) mmap(&(0x7f00000c1000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r3, 0xf5c97000) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000140)={0x5, 0x9}) 3.080218223s ago: executing program 2 (id=768): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0xffffff89, &(0x7f0000000280)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0xfffffffe, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r2) 1.347253373s ago: executing program 4 (id=793): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1e, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x2}}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x1002010, &(0x7f0000000340)='debug') 1.273527879s ago: executing program 4 (id=794): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x50) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) 1.21996814s ago: executing program 4 (id=795): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x7, 0xffff9337}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x5}}, 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x19, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x9, 0x34, &(0x7f0000000400)=""/52, 0x41100, 0x44, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x7, 0x8, 0x7}, 0x10, 0x0, r5, 0x4, 0x0, &(0x7f0000000b80)=[{0x4, 0x2, 0xc, 0xb}, {0x3, 0x4, 0x3, 0x1}, {0x1, 0x1, 0x4}, {0x4, 0x2, 0x4, 0x3}]}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x1d, 0x2, 0x6) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x800, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x7, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r10, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c020000160008002abd7000fedbdf257f0000010000000000000000000000007f0000010000000000000000000000004e2000004e2300010200800016000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="00000000000000000000000000000000000004d333000000ffffffff0000000000000000000000000200000000000000050000000000000004000000000000000900000000000000ffffffffffffffff090000000000000081ffffffffffffff63a400000000000007000000000000000a00000000000000ffffffff00000000040000000000000005000000050000000400000026bd7000073500000a0007041800000000000000000000000200000010000a002cbd70002abd70000800000028001a0000000000000000000000ffff00000000ac1414aa0000000000000000000000000a0007a808001d00040000000c001c00", @ANYRES32=r10, @ANYBLOB="000000002c00130000000000000000000000000000000001fc000000000000000080000000000000000000000000000014000d0000000000000000000000000000000000930003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580200006a0d970f70ef8d498e91c34ed69284989acc40ac2e12744558ac035aa641abb4ed319042a4e08bc9e40b3526364e97259ac50669167bc560d6ec900f438d004f0fbbb20e2e2b4af8ceb3fc0008001600810000000c000f000800000000000000"], 0x22c}}, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async) setsockopt$inet6_buf(r11, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) pipe2(&(0x7f00000003c0), 0x0) (async) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r13, @ANYBLOB=',wfdno=', @ANYRESHEX=r14, @ANYBLOB="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"]) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0xc114) 922.171518ms ago: executing program 1 (id=800): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x108, &(0x7f0000000340)={@local, @random="c4e106000086", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0xd2, 0x2b, 0xff, @remote, @local, {[], {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"0f3802e19066364e7100cb0e02c7cfe727836d6d7dd7e27654f068db56150a1b1f2df671021771139e6b1f71007c7ae358a2923312f162fa2ed40f9e6a4225f38c582dcb1251490b21e6d6cff609eb245ed78fe6333306bd2385e731c8c6192253766f2bfe998f1989bc487ac72227c468ade1286e03454ad1760811d0f0d3fbc103b47fb38a205af074c27142fc36086dc92ae4e046f77cd330daca4aab935567b0f9b641dbc7a0f98ba206000000e7bd000043bc20e27dae1c5aa6914e"}}}}}}}, 0x0) syz_io_uring_setup(0x6812, &(0x7f0000000140)={0x0, 0xf5b1, 0x4000, 0xd, 0x21d}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_complete(r1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) 833.699145ms ago: executing program 3 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="bad33075218151db00316f3a277f953286ddd1dc", 0x14, 0x2000041, &(0x7f0000000080)={0x11, 0xf5, r2, 0x1, 0xda, 0x6, @remote}, 0x14) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) (async) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0xfffffffd, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x17, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x57, &(0x7f0000000480)=""/87, 0x41100, 0x2f, '\x00', r2, @fallback=0x32, r4, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x5, &(0x7f0000000500)=[r0, r0], &(0x7f0000000540)=[{0x0, 0x2, 0x7}, {0x3, 0x4, 0xe, 0x3}, {0x0, 0x3, 0x0, 0xa}, {0x0, 0x1, 0xe, 0x3}, {0x5, 0x5, 0x5, 0x8}], 0x10, 0xd13d}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}}], 0x1, 0x2404c0c0) (async, rerun: 32) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) (async) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r12, 0x117, 0x5, 0x0, 0x8) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 833.342215ms ago: executing program 1 (id=803): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0xd, '\x00', @st={0x4, [{0x2, @uvalue=0xfff}, {0x0, @uvalue=0x1ff}, {0x3, @uvalue=0xfffffffffffffffb}, {0x0, @svalue=0x47b6cc5d}]}, 0x9}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\xff$\xdcG|x\xe2\xe8El;\xa5\x87\x91\xbd1\xc2\xb1\x00\xadSP\xb3\x8cH\x9d\xd2\x1f,\xc6\xea\x1fj\xac\xa35\x86\xe5\xechC\x0fz\'\xa9\xb3\xa8\r&\"\xe6\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\xe0\x81\x9e\x12\xed\xd3%\"\x19\x93\xb1\x11!I4\x06\x00L\x10\xbd\x8b(\xc6\x1f\x95\xa6\xce*\xb1$D:^\xee\x91s\x17](A!\xfbF\x84\x8fu2\x13<4vk\x1b\x9d\x1f\x1f\xa2\x17\xc9\xd2\x91R\x11TnJk\x85WAp\xe9T2\xbf\xce\xa8\xf9\x19F\x06\xb0\xb4`ck~\a\xaf#\xc7\tt\xe1w*\xc1\x81\xf4^\xf6\xb6\x12z\x99[\xe9\xc1xiO\xc0\xa5\xcb\xa6\xf5a\x90`\x81\x82\xefH`\xd8\xed~?\xf63\x18\x97\xa2\xdc\x99\x1d*\x8aTnX\x8b\xcb\xe8\xff\xb7%\x0f\xf77KQ2Z\xc8e~\x19\x9d\xb63zt\xc7\x1b\xa6[\x8b\xecj\xe3\vJ\xa0\x11-\x86\xaf^\x14\xab\x1b\xccp\xbe7\x9d\xb8\xa5\xe8G\xf4\xd5s\x91\x00\x00\x00\xe0z2S^\xccS\x96\'[QcJ\xb0\xb5\xaa\x9e\r\xc8\x1d\xc6\x8c\xc38\xa5o!\xd5\xc1\xcb!\x14', 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) 764.395999ms ago: executing program 1 (id=804): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) (async) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x6) (async) read$FUSE(r1, &(0x7f00000016c0)={0x2020}, 0x2020) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x0, r1}) (async) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) 763.376365ms ago: executing program 1 (id=805): r0 = syz_clone(0x82801000, &(0x7f0000000000)="dbad2b6900daaf9e1aa532c11c7efb5745e9b143806e9b", 0x17, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="43165ef596057e48c64385cde0ea2943bc043e623e9f4f08be0e4f5bd5bcc9abee90d8c6f7f25be20e871b94edf03c50b4ac411c79be0d7191d2d860a2196d8038ee3f4b194b483da70536ad26e0d569b665b19bddb57a47d0c9266a8534cf23787f77ab1b1c2d31f13a16db0e01f3d03e11e29627a4f8390c139eca526cedd98fe91e924ce3f5115b46ff208bb93630991098259c1e7f59e523281c80fd9317a70b2fb854bc959d6ffff755b5640a4abf5fece214b91a846b0cfb67de9de64e4f9494") capget(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000200)={0x2, 0x0, 0x5b, 0x2, 0x0, 0x7fff}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) fdatasync(r3) r4 = socket$inet6(0xa, 0x2, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) fchdir(r3) capset(&(0x7f0000002300)={0x19980330, r0}, &(0x7f0000002340)={0x6, 0x5, 0x172, 0x8, 0x7f, 0x9}) capget(&(0x7f0000002380)={0x19980330, r2}, &(0x7f00000023c0)={0x401, 0x7fffffff, 0x1, 0x800, 0xfffffbbe, 0x6}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000002400)={{0x89, @rand_addr=0x64010102, 0x4e21, 0x0, 'lc\x00', 0x2, 0x602, 0x10}, {@loopback, 0x4e23, 0x4, 0x6, 0x0, 0xa7}}, 0x44) capget(&(0x7f0000002480)={0x19980330, r2}, &(0x7f00000024c0)={0x8, 0x7, 0x5, 0xdf15, 0x9, 0x7}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000002500)=0xffffffffffffffff) connect$unix(r1, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$TIOCSCTTY(r1, 0x540e, 0x800) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000025c0)={0x0, @frame_sync}) capset(&(0x7f0000002680)={0x20080522, r0}, &(0x7f00000026c0)={0x9d2, 0x100, 0x400, 0x8, 0x2e, 0x3ff}) capget(&(0x7f0000002700)={0x19980330, r2}, &(0x7f0000002740)={0x9, 0x3, 0x8001, 0x2, 0x8, 0x4}) socketpair(0x3, 0x800, 0x1, &(0x7f0000002780)={0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f00000027c0)) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000002880)={0x0, 0x8, 0x0, [0x0, 0x9, 0x9, 0x1, 0x80000001], [0x2, 0x5, 0x3, 0x8, 0x4, 0x4aadc0a2, 0x3f, 0x7, 0x800, 0xfffffffffffffff6, 0x747, 0xffff, 0x3, 0xa475, 0x80000001, 0x0, 0x4, 0x2c49, 0x3ff, 0x1, 0x40000, 0x101, 0x800, 0x10, 0x4, 0x9, 0x8, 0xffffffffffff7568, 0x7, 0xffffffffffffffff, 0x8, 0x2, 0x0, 0xfff, 0x3, 0x101, 0x80000000, 0x3, 0x0, 0x10, 0x10000, 0x400, 0x0, 0x8, 0x1, 0xa00, 0x1d09, 0xd3, 0x0, 0x3, 0x2, 0x6, 0x8, 0x2, 0x4, 0x9, 0x2, 0xb72, 0xc, 0x7, 0x81, 0xff, 0x7, 0x1, 0xda, 0x8, 0x7e7, 0xcbfc, 0x1, 0x2, 0x7ff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xa, 0x0, 0x80000001, 0x1, 0x1607, 0x5, 0x2800000000, 0x8, 0x1000, 0x1, 0xff, 0x8000, 0x4961, 0x3, 0x85, 0xdb, 0x7fffffff, 0xb9d, 0x3, 0x2, 0x2, 0x5, 0x0, 0x8, 0x9, 0x4, 0x3, 0xb8, 0x8, 0x4, 0x0, 0x100000001, 0x8, 0xfffffffffffff800, 0x5, 0x101, 0x3, 0x9, 0x5, 0x4, 0x6b, 0x0, 0x8a7, 0x100000001, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000002cc0)={r8, 0x4, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000030c0)={r9, "c9cc6f95446d39169f256490604ec8c4"}) fcntl$lock(r6, 0x26, &(0x7f00000040c0)={0x0, 0x4, 0x6, 0x101, r2}) getsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000004100), &(0x7f0000004140)=0x4) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000004180)={0x9, 0xe, 0x9f4, 0x4, 0x5}) 695.069444ms ago: executing program 3 (id=806): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000020605000000000000000000000000019480d84c280699340682b05b9830fca0b93524cb9bc6"], 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)}], 0x1}, 0x40000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r1}, &(0x7f0000000300)=ANY=[@ANYBLOB="656e633d72617701686173683d736861332d3531320000dc52572ac473fe3bdd4f6db2d29db8ffe0d67ccefb5621000700"/88], 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4}}, 0x1c}}, 0x10) listen(r0, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f900f500180601fe8000000000000000000000000000aafe8000000090240000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000100)=0x3, 0x12) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 598.305605ms ago: executing program 1 (id=807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x4, 0x1, 0xe, 0x0, 0x8, 0x9, 0x6, 0x6, 0x0, 0x3, 0x9, 0xeb}, {0xffff1000, 0x80a0000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x14, 0x24, 0x5, 0x8, 0x3}, {0xf000, 0xeeef0000, 0xd, 0x8, 0x6, 0x9, 0x81, 0x3, 0x80, 0x8, 0x1, 0x6e}, {0x5000, 0x6000, 0x0, 0xfe, 0x6, 0xaa, 0xc3, 0x0, 0x0, 0x4, 0x80, 0xe}, {0xdddd1000, 0x2000, 0xa, 0xff, 0x8, 0x9, 0x6, 0xa, 0x5, 0x6, 0x8, 0xfc}, {0x6000, 0x0, 0x9, 0xb9, 0x5, 0xfd, 0x42, 0x6, 0x90, 0x3, 0x0, 0xd}, {0xeeef0000, 0x4, 0x0, 0x9, 0xc, 0x8, 0x4, 0x63, 0x2, 0x1, 0x14, 0xd}, {0xffff1000, 0xeeef0000, 0xa, 0x21, 0xc, 0x8, 0x9, 0x47, 0x7, 0x8, 0x43, 0x3}, {0x1000, 0x5}, {0xffff1000, 0x9}, 0x60000000, 0x0, 0x0, 0x200, 0x5, 0x8000, 0xeeee0c00, [0x1, 0x1004, 0x6, 0x5]}) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000180)={{0x1, 0x8080000, 0xb, 0xc, 0x66, 0x7, 0xf5, 0x42, 0x0, 0x7f, 0xc, 0x81}, {0x1000, 0x1, 0xd, 0x9, 0x10, 0x42, 0x40, 0xe, 0x6, 0x9, 0x2}, {0x3000, 0x8080000, 0xc, 0x3, 0x2, 0x9, 0x67, 0xf8, 0x8, 0x5, 0x4, 0xd}, {0x4000, 0xe6ef3000, 0xa, 0xa5, 0x41, 0x1, 0x24, 0x9, 0x6, 0xc, 0x8, 0x6}, {0x10000, 0x1, 0xf, 0x16, 0x33, 0x1, 0x2, 0xb, 0x4, 0x4d, 0xd, 0x7}, {0x8080000, 0x4, 0x10, 0x8, 0x1c, 0x3, 0xff, 0x7, 0x1, 0xb, 0xf, 0x9}, {0xeeee8000, 0xeeef0000, 0xa, 0xfb, 0x4, 0x9a, 0x8, 0xf8, 0x1, 0x0, 0x2, 0x4}, {0xd000, 0x8080000, 0xf, 0x9, 0x0, 0xfd, 0x0, 0x1, 0xf9, 0x5, 0x1, 0x9}, {0x1000, 0x7fff}, {0xf59ea94522b990c2, 0xb8ac}, 0x2000000, 0x0, 0x0, 0x10000, 0x10007, 0x9900, 0xfee00900, 0x0, [0x9, 0x4, 0x7ffffffb, 0xd0]}) (async) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e27, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/227, 0xe3}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 503.188193ms ago: executing program 3 (id=808): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x6a, 0x2, 0x0, &(0x7f0000000300)) (async) set_mempolicy(0x1, &(0x7f0000000280)=0x8, 0x10000000008001) r1 = syz_open_dev$audion(&(0x7f0000000040), 0xffffffff, 0x20081) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0xffffffff) r2 = io_uring_setup(0x6bef, &(0x7f00000001c0)={0x0, 0x10000000, 0x1880, 0x2, 0x32e}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000a, 0x20010, r2, 0x0) (async, rerun: 64) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 353.46004ms ago: executing program 1 (id=809): prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x7) syz_io_uring_setup(0x40cb, &(0x7f0000000000)={0x0, 0x8d45, 0x100, 0x3, 0x39e}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x748, &(0x7f0000000100)={0x0, 0x52d1, 0x0, 0x2}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}) prctl$PR_SET_DUMPABLE(0x4, 0x2) syz_open_dev$usbmon(&(0x7f0000000280), 0x10, 0x200) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x2) prctl$PR_SET_DUMPABLE(0x4, 0x0) 244.832235ms ago: executing program 4 (id=810): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = dup(r1) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r2, 0x46c1c000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400000000e59c887918dc1cb02fdf28443c5671bc0000000000000000", @ANYRES32=0x0, @ANYBLOB="08000200e09e01001c00128009000100626f6e64000000000c0002800800130002000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 171.165019ms ago: executing program 4 (id=811): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdd, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = dup3(r6, r5, 0x0) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1400000000002000290000000b0000000008000000000000"], 0x18}}], 0x1, 0x810) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a000000005000000060000000000001104000000050000000f0000000000200901000000000000000300000d6c803023ff910000000400000006000000020000000400000002000000070000000000000903000000000000000900000d000000000e0000000000000001000000000000000000000000000000020000d98b00000008000000010000000500ffff0200000005000000010000000b000000050000000700000001000000002e5f00"/201], &(0x7f0000000640)=""/124, 0xbd, 0x7c, 0x0, 0x8}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r7}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r9, @ANYRES32=r0, @ANYRESOCT=r5, @ANYRESHEX=r9, @ANYRESDEC=r8, @ANYRES8=r3], 0x44}}, 0x20040054) 170.723915ms ago: executing program 3 (id=812): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000000180)=[{0x41, '\x00', @st={0x4, [{0x0, @uvalue=0x3}, {0x3, @uvalue=0xa}, {0x2, @uvalue=0x8}, {0x2, @svalue=0x40}]}, 0x3}, {0x3f, '\x00', @buffer={"8c7e955bf97c402a34dce4431f5a0640edb90bb17eaf7ff9372939ffcd3044fe", 0x20}, 0x10000}, {0x12, '\x00', @data=0x9, 0x9}]}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(r0, &(0x7f0000000440)='./file0\x00', 0x301080, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000500)) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f0000000200)={{[0x0, 0x80, 0x2, 0x800]}, 0x0, 0x0, 0xffff, 0x0, &(0x7f0000000100)=[{{@align=0x7f, {0x3, 0x7, 0x9, 0x7}}, 0x8000, 0x0, '/@{\x00'}]}) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000240)="4fce5daa69", 0x5}, {&(0x7f0000002080)="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", 0x1000}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x95, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2043, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, &(0x7f0000000180), 0x0}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x12, r3, {0x0, 0xe}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7ce}]}}]}, 0x40}}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r10) sendmsg$TIPC_NL_BEARER_DISABLE(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r11, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000005}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 105.872468ms ago: executing program 4 (id=813): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r2, 0x5421, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440), 0x0, 0x400000c1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000000c0)={r3, 0x0, 0x6, 0x7, 0xa}) close_range(r0, 0xffffffffffffffff, 0x0) 105.483529ms ago: executing program 3 (id=814): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250200000002000005000000000500130001", @ANYBLOB="bfbb338e4d296bc58e9703e479df305bad723402172bf81aa293a3f4974a340e6b76d2cb7cb3742e8fe885f2838e7be73387b5f6755623f05bcc9670835476b20253133e1fec7d30e678a545ad1d01d21ce756b1172b086d342ae492d59f67f8babe7ce8ffdb914c9d60b7c4241a1689a3d5d580f1f0d341f581671ddb736db1739174cecb", @ANYRESOCT=r1, @ANYRES64=r1], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x8080) r2 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r2, 0x2000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) accept4$tipc(r4, 0x0, 0x0, 0x800) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r2, 0x1f, 0x0, 0x1000000}) 0s ago: executing program 3 (id=815): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180086521b5d9600000100000000000000800020009500000000000000035f48fdac4ba7a47470d6"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getgroups(0x27, &(0x7f0000002540)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x9b}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800, 0x5000}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x440b0) kernel console output (not intermixed with test programs): sadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.778736][ T6192] team0: No ports can be present during mode change [ 67.812939][ T40] audit: type=1400 audit(1770925363.675:255): avc: denied { ioctl } for pid=6184 comm="syz.0.55" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.822887][ T6195] fuse: Bad value for 'group_id' [ 67.826234][ T6195] fuse: Bad value for 'group_id' [ 67.838717][ T40] audit: type=1400 audit(1770925363.675:256): avc: denied { set_context_mgr } for pid=6184 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.846583][ T6195] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 67.850690][ T6195] UDF-fs: Scanning with blocksize 2048 failed [ 67.853996][ T6201] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 67.854894][ T6195] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 67.860753][ T6195] UDF-fs: Scanning with blocksize 4096 failed [ 67.916098][ T6205] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 67.917995][ T6209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.926777][ T6209] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 68.184776][ T6236] netlink: 'syz.3.69': attribute type 23 has an invalid length. [ 68.377593][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.380416][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.383406][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.386847][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.386861][ T6244] Zero length message leads to an empty skb [ 68.399611][ T6244] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 68.402566][ T6244] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.407243][ T6244] vhci_hcd vhci_hcd.0: Device attached [ 68.415054][ T6246] vhci_hcd: connection closed [ 68.417338][ T1143] vhci_hcd vhci_hcd.3: stop threads [ 68.423173][ T1143] vhci_hcd vhci_hcd.3: release socket [ 68.425475][ T1143] vhci_hcd vhci_hcd.3: disconnect device [ 68.451042][ T5936] Bluetooth: hci1: command tx timeout [ 68.451711][ T5285] Bluetooth: hci2: command tx timeout [ 68.454247][ T5935] Bluetooth: hci0: command tx timeout [ 68.531298][ T5935] Bluetooth: hci3: command tx timeout [ 68.855271][ T6251] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 69.026262][ T6263] JFS: discard option not supported on device [ 69.030070][ T6263] Mount JFS Failure: -5 [ 69.039923][ T6265] JFS: discard option not supported on device [ 69.044838][ T6268] netlink: 'syz.0.79': attribute type 8 has an invalid length. [ 69.051604][ T6265] Mount JFS Failure: -5 [ 69.054723][ T6268] bond0: entered promiscuous mode [ 69.056945][ T6268] bond_slave_0: entered promiscuous mode [ 69.059516][ T6268] bond_slave_1: entered promiscuous mode [ 69.067230][ T6268] gretap0: entered promiscuous mode [ 69.070520][ T6268] dummy0: entered promiscuous mode [ 69.075757][ T6268] hsr1: entered promiscuous mode [ 69.246027][ T6283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6283 comm=syz.3.84 [ 69.318292][ T6286] XFS (nullb0): Invalid superblock magic number [ 69.335597][ T6284] cgroup: fork rejected by pids controller in /syz2 [ 69.594073][ T7422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.818882][ T8277] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.872518][ T8277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.017714][ T8287] netlink: 'syz.1.93': attribute type 12 has an invalid length. [ 70.138249][ T8295] tipc: Started in network mode [ 70.139919][ T8295] tipc: Node identity ac1414aa, cluster identity 4711 [ 70.144193][ T8295] tipc: Enabled bearer , priority 10 [ 70.202270][ T8298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.308676][ T8306] netlink: 'syz.0.98': attribute type 10 has an invalid length. [ 70.343699][ T8306] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 70.346282][ T8306] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.361556][ T8306] process 'syz.0.98' launched '/dev/fd/7' with NULL argv: empty string added [ 70.368921][ T8306] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 70.386530][ T8306] pimreg: entered allmulticast mode [ 70.391886][ T8306] pimreg: left allmulticast mode [ 70.532283][ T5935] Bluetooth: hci0: command tx timeout [ 70.532320][ T5285] Bluetooth: hci1: command tx timeout [ 70.542335][ T5285] Bluetooth: hci2: command tx timeout [ 70.613645][ T8318] __nla_validate_parse: 43 callbacks suppressed [ 70.613660][ T8318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.101'. [ 70.614148][ T5285] Bluetooth: hci3: command tx timeout [ 70.616566][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 70.616816][ T8317] Unsupported ieee802154 address type: 0 [ 70.628509][ T8317] xt_bpf: check failed: parse error [ 70.640221][ T8317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8317 comm=syz.3.102 [ 70.764100][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'. [ 70.766221][ T8325] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 70.770683][ T8324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.175866][ T8333] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.107'. [ 71.282644][ T29] tipc: Node number set to 2886997162 [ 71.334033][ T8340] QAT: failed to copy from user cfg_data. [ 71.396586][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 71.400562][ T8345] chnl_net:caif_netlink_parms(): no params data found [ 71.592527][ T8362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.117'. [ 71.654702][ T6024] block nbd64: NBD_DISCONNECT [ 71.738045][ T8374] netlink: 'syz.0.121': attribute type 4 has an invalid length. [ 71.755182][ T8370] NILFS (loop3): device size too small [ 71.775180][ T5934] udevd[5934]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 71.827325][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 71.835714][ T8386] syz.2.124: vmalloc error: size 4183572480, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 71.840454][ T8386] CPU: 3 UID: 0 PID: 8386 Comm: syz.2.124 Not tainted syzkaller #0 PREEMPT(full) [ 71.840469][ T8386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.840476][ T8386] Call Trace: [ 71.840480][ T8386] [ 71.840485][ T8386] dump_stack_lvl+0x100/0x190 [ 71.840505][ T8386] warn_alloc.cold+0x95/0x1c1 [ 71.840524][ T8386] ? __pfx_warn_alloc+0x10/0x10 [ 71.840543][ T8386] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.840559][ T8386] ? lockdep_hardirqs_on+0x78/0x100 [ 71.840574][ T8386] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.840591][ T8386] ? kasan_save_stack+0x3f/0x50 [ 71.840601][ T8386] ? kasan_save_stack+0x30/0x50 [ 71.840611][ T8386] ? kasan_save_track+0x14/0x30 [ 71.840623][ T8386] ? vb2_vmalloc_alloc+0x135/0x410 [ 71.840638][ T8386] __vmalloc_node_range_noprof+0x1252/0x1530 [ 71.840654][ T8386] ? __x64_sys_ioctl+0x18e/0x210 [ 71.840669][ T8386] ? do_syscall_64+0x106/0xf80 [ 71.840683][ T8386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.840697][ T8386] ? vb2_vmalloc_alloc+0x135/0x410 [ 71.840713][ T8386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 71.840735][ T8386] ? vb2_vmalloc_alloc+0x135/0x410 [ 71.840748][ T8386] vmalloc_user_noprof+0x9e/0xe0 [ 71.840767][ T8386] ? vb2_vmalloc_alloc+0x135/0x410 [ 71.840780][ T8386] vb2_vmalloc_alloc+0x135/0x410 [ 71.840793][ T8386] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 71.840806][ T8386] __vb2_queue_alloc+0x8d5/0x1160 [ 71.840825][ T8386] vb2_core_create_bufs+0x5fa/0xa30 [ 71.840840][ T8386] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 71.840853][ T8386] ? stack_depot_save_flags+0x479/0x9d0 [ 71.840880][ T8386] ? lock_acquire+0x17c/0x330 [ 71.840900][ T8386] vb2_create_bufs+0x40c/0x830 [ 71.840915][ T8386] ? __pfx_vb2_create_bufs+0x10/0x10 [ 71.840925][ T8386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.840937][ T8386] ? v4l_sanitize_colorspace+0x220/0x410 [ 71.840953][ T8386] vb2_ioctl_create_bufs+0x244/0x3e0 [ 71.840965][ T8386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.840979][ T8386] vidioc_create_bufs+0x7d/0xf0 [ 71.840995][ T8386] v4l_create_bufs+0x17d/0x270 [ 71.841011][ T8386] __video_do_ioctl+0xaf8/0xdc0 [ 71.841029][ T8386] ? __might_fault+0xc5/0x140 [ 71.841046][ T8386] ? __pfx___video_do_ioctl+0x10/0x10 [ 71.841068][ T8386] video_usercopy+0x476/0x1660 [ 71.841085][ T8386] ? __pfx___video_do_ioctl+0x10/0x10 [ 71.841102][ T8386] ? __pfx_video_usercopy+0x10/0x10 [ 71.841129][ T8386] v4l2_ioctl+0x1bd/0x250 [ 71.841139][ T8386] ? __pfx_v4l2_ioctl+0x10/0x10 [ 71.841150][ T8386] __x64_sys_ioctl+0x18e/0x210 [ 71.841167][ T8386] do_syscall_64+0x106/0xf80 [ 71.841182][ T8386] ? clear_bhb_loop+0x40/0x90 [ 71.841195][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.841206][ T8386] RIP: 0033:0x7fae8099bf79 [ 71.841215][ T8386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.841225][ T8386] RSP: 002b:00007fae817ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.841236][ T8386] RAX: ffffffffffffffda RBX: 00007fae80c15fa0 RCX: 00007fae8099bf79 [ 71.841243][ T8386] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 0000000000000004 [ 71.841249][ T8386] RBP: 00007fae80a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 71.841255][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.841261][ T8386] R13: 00007fae80c16038 R14: 00007fae80c15fa0 R15: 00007ffc31fb2798 [ 71.841275][ T8386] [ 71.874136][ T8389] can0: slcan on ttyS3. [ 71.876215][ T8386] Mem-Info: [ 71.961274][ T8386] active_anon:9136 inactive_anon:0 isolated_anon:0 [ 71.961274][ T8386] active_file:13071 inactive_file:40559 isolated_file:0 [ 71.961274][ T8386] unevictable:1768 dirty:1860 writeback:0 [ 71.961274][ T8386] slab_reclaimable:12290 slab_unreclaimable:66862 [ 71.961274][ T8386] mapped:24696 shmem:2393 pagetables:1223 [ 71.961274][ T8386] sec_pagetables:300 bounce:0 [ 71.961274][ T8386] kernel_misc_reclaimable:0 [ 71.961274][ T8386] free:460434 free_pcp:15153 free_cma:0 [ 71.981189][ T8386] Node 0 active_anon:36544kB inactive_anon:0kB active_file:52284kB inactive_file:162040kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98784kB dirty:7428kB writeback:0kB shmem:6036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12672kB pagetables:4556kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB [ 72.003332][ T8386] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 72.014817][ T8386] Node 0 DMA free:15016kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:4kB free_cma:0kB [ 72.026916][ T8386] lowmem_reserve[]: 0 1232 1232 1232 1232 [ 72.029244][ T8386] Node 0 DMA32 free:207512kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36916kB inactive_anon:0kB active_file:52284kB inactive_file:162040kB unevictable:3536kB writepending:7428kB zspages:0kB present:2080628kB managed:1262344kB mlocked:0kB bounce:0kB free_pcp:32952kB local_pcp:4652kB free_cma:0kB [ 72.042046][ T8386] lowmem_reserve[]: 0 0 0 0 0 [ 72.044011][ T8386] Node 1 Normal free:1619084kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:26108kB local_pcp:16080kB free_cma:0kB [ 72.051860][ T8389] can0 (unregistered): slcan off ttyS3. [ 72.058052][ T8386] lowmem_reserve[]: 0 0 0 0 0 [ 72.061936][ T8386] Node 0 DMA: 11*4kB (UM) 10*8kB (UM) 8*16kB (UM) 10*32kB (UM) 12*64kB (UM) 7*128kB (UM) 2*256kB (U) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 1*4096kB (U) = 15036kB [ 72.068688][ T8386] Node 0 DMA32: 32*4kB (UME) 536*8kB (UM) 739*16kB (UME) 535*32kB (UME) 347*64kB (UME) 189*128kB (UME) 30*256kB (UM) 43*512kB (UM) 17*1024kB (UME) 25*2048kB (UME) 7*4096kB (UM) = 206736kB [ 72.078020][ T8386] Node 1 Normal: 3*4kB (ME) 5*8kB (UME) 2*16kB (ME) 0*32kB 7*64kB (UE) 13*128kB (UME) 4*256kB (UM) 8*512kB (UME) 2*1024kB (U) 4*2048kB (UE) 391*4096kB (UM) = 1619092kB [ 72.085226][ T8386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.089252][ T8386] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.093861][ T8386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.106112][ T8386] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.109058][ T8386] 56019 total pagecache pages [ 72.110838][ T8386] 0 pages in swap cache [ 72.113540][ T8386] Free swap = 124996kB [ 72.115305][ T8386] Total swap = 124996kB [ 72.116784][ T8386] 1048443 pages RAM [ 72.118112][ T8386] 0 pages HighMem/MovableOnly [ 72.119896][ T8386] 283546 pages reserved [ 72.123065][ T8386] 0 pages cma reserved [ 72.269361][ T8419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=8419 comm=syz.3.133 [ 72.276110][ T8414] netlink: 156 bytes leftover after parsing attributes in process `syz.1.132'. [ 72.405494][ T8440] /dev/sg0: Can't lookup blockdev [ 72.426236][ T8440] netlink: 'syz.3.138': attribute type 21 has an invalid length. [ 72.541648][ T8451] program syz.1.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.562866][ T40] kauditd_printk_skb: 994 callbacks suppressed [ 72.562883][ T40] audit: type=1400 audit(1770925368.495:1251): avc: denied { sys_admin } for pid=8433 comm="syz.2.135" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 72.574318][ T40] audit: type=1400 audit(1770925368.505:1252): avc: denied { sys_admin } for pid=8433 comm="syz.2.135" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 72.589154][ T40] audit: type=1400 audit(1770925368.515:1253): avc: denied { create } for pid=8452 comm="syz.1.143" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.617262][ T40] audit: type=1400 audit(1770925368.515:1254): avc: denied { write } for pid=8452 comm="syz.1.143" name="secretmem" dev="secretmem" ino=11814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.638275][ T40] audit: type=1400 audit(1770925368.515:1255): avc: denied { read } for pid=8452 comm="syz.1.143" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.648398][ T40] audit: type=1400 audit(1770925368.515:1256): avc: denied { open } for pid=8452 comm="syz.1.143" path="net:[4026532889]" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.655791][ T40] audit: type=1400 audit(1770925368.515:1257): avc: denied { create } for pid=8452 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.664351][ T40] audit: type=1400 audit(1770925368.515:1258): avc: denied { write } for pid=8452 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.672557][ T40] audit: type=1400 audit(1770925368.515:1259): avc: denied { read } for pid=8452 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.680509][ T40] audit: type=1400 audit(1770925368.515:1260): avc: denied { write } for pid=8452 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.822637][ T5285] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 73.231073][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.370995][ T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.383806][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.388457][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.393748][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.399197][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.404192][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.414048][ T10] usb 5-1: config 0 descriptor?? [ 73.521957][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 73.531851][ T8485] syz.1.155 uses obsolete (PF_INET,SOCK_PACKET) [ 73.533124][ T39] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 73.540345][ T39] usb 7-1: config 0 has no interface number 0 [ 73.542540][ T39] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 73.546281][ T39] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 73.552287][ T39] usb 7-1: config 0 interface 255 has no altsetting 0 [ 73.557897][ T39] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 73.561586][ T39] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 73.564976][ T39] usb 7-1: Product: syz [ 73.566798][ T39] usb 7-1: Manufacturer: syz [ 73.568818][ T39] usb 7-1: SerialNumber: syz [ 73.575593][ T39] usb 7-1: config 0 descriptor?? [ 73.824328][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.827687][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.839294][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.843226][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.847118][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.850777][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.851393][ T39] usb 7-1: USB disconnect, device number 2 [ 73.854190][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.861714][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.865171][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.868461][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 73.896107][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 73.928073][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 73.931904][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.089341][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 74.089370][ T8472] netlink: 'syz.0.150': attribute type 7 has an invalid length. [ 74.092320][ T8508] netlink: 'syz.0.150': attribute type 7 has an invalid length. [ 74.092331][ T8508] netlink: 'syz.0.150': attribute type 8 has an invalid length. [ 74.096810][ T8507] netlink: 'syz.3.162': attribute type 11 has an invalid length. [ 74.099048][ T8472] netlink: 'syz.0.150': attribute type 8 has an invalid length. [ 74.109171][ T2310] usb 5-1: USB disconnect, device number 2 [ 74.118314][ T8507] netlink: 'syz.3.162': attribute type 7 has an invalid length. [ 74.603499][ T8524] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 74.607555][ T8524] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 74.684887][ T8526] geneve2: entered promiscuous mode [ 74.881257][ T8534] bond2 (unregistering): Released all slaves [ 74.928095][ T8538] batman_adv: batadv0: Adding interface: macsec1 [ 74.930727][ T8538] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.945974][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.950501][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.982917][ T8538] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 75.100081][ T8543] netlink: 'syz.0.173': attribute type 17 has an invalid length. [ 75.109541][ T8543] macvtap0: entered allmulticast mode [ 75.118909][ T8543] veth0_macvtap: entered allmulticast mode [ 75.121682][ T8543] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 75.176449][ T8549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8549 comm=syz.0.174 [ 75.180333][ T8549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8549 comm=syz.0.174 [ 75.555655][ T8564] exFAT-fs (nbd2): unable to read boot sector [ 75.557905][ T8564] exFAT-fs (nbd2): failed to read boot sector [ 75.560802][ T8564] exFAT-fs (nbd2): failed to recognize exfat type [ 75.715805][ T8569] __nla_validate_parse: 10 callbacks suppressed [ 75.715818][ T8569] netlink: 108 bytes leftover after parsing attributes in process `syz.2.179'. [ 76.296795][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.299667][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.054277][ T8602] xt_nat: multiple ranges no longer supported [ 77.176461][ T8608] Mount JFS Failure: -5 [ 77.178319][ T8608] jfs_mount failed w/return code = -5 [ 77.351449][ T39] IPVS: starting estimator thread 0... [ 77.388194][ T8618] netlink: 'syz.2.194': attribute type 4 has an invalid length. [ 77.471052][ T8616] IPVS: using max 43 ests per chain, 103200 per kthread [ 77.558357][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 77.574189][ T40] kauditd_printk_skb: 873 callbacks suppressed [ 77.574205][ T40] audit: type=1400 audit(1770925373.505:2134): avc: denied { egress } for pid=5964 comm="kworker/0:3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 77.602457][ T40] audit: type=1400 audit(1770925373.505:2135): avc: denied { sendto } for pid=5964 comm="kworker/0:3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 77.615311][ T40] audit: type=1400 audit(1770925373.515:2136): avc: denied { recv } for pid=5910 comm="syz-executor" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 77.634962][ T40] audit: type=1400 audit(1770925373.525:2137): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.659050][ T40] audit: type=1400 audit(1770925373.525:2138): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.674358][ T40] audit: type=1400 audit(1770925373.525:2139): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.706896][ T40] audit: type=1400 audit(1770925373.525:2140): avc: denied { search } for pid=8628 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.721705][ T40] audit: type=1400 audit(1770925373.525:2141): avc: denied { search } for pid=8628 comm="rm" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.729872][ T40] audit: type=1400 audit(1770925373.525:2142): avc: denied { search } for pid=8628 comm="rm" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.741152][ T8632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.877025][ T8645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8645 comm=syz.2.199 [ 78.601250][ T5964] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 78.731970][ T8682] program syz.2.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.764691][ T5964] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 78.768522][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.798622][ T5964] usb 6-1: Product: syz [ 78.800438][ T5964] usb 6-1: Manufacturer: syz [ 78.802589][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 78.805846][ T5964] usb 6-1: SerialNumber: syz [ 78.823259][ T5964] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 78.886871][ T830] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.953088][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 78.972833][ T10] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.978429][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 79.216059][ T8711] x_tables: duplicate underflow at hook 1 [ 79.237512][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 79.252259][ T8713] xfrm1: entered promiscuous mode [ 79.254746][ T8713] xfrm1: entered allmulticast mode [ 79.264690][ T8713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8713 comm=syz.2.221 [ 79.456894][ T8730] netlink: 96 bytes leftover after parsing attributes in process `syz.1.205'. [ 79.693109][ T8739] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 79.971188][ T830] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 79.974462][ T830] ath9k_htc: Failed to initialize the device [ 80.021144][ T830] usb 6-1: ath9k_htc: USB layer deinitialized [ 80.039298][ T6023] usb 6-1: USB disconnect, device number 3 [ 80.169647][ T8767] netlink: 80 bytes leftover after parsing attributes in process `syz.2.237'. [ 80.311344][ T8772] fuse: Bad value for 'group_id' [ 80.313772][ T8772] fuse: Bad value for 'group_id' [ 80.424389][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 80.632525][ T8783] /dev/sr0: Can't open blockdev [ 80.735149][ T8794] netlink: 48 bytes leftover after parsing attributes in process `syz.3.245'. [ 80.755237][ T8798] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 80.765945][ T8798] Error validating options; rc = [-22] [ 80.825649][ T8800] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.834387][ T8800] overlayfs: conflicting options: nfs_export=on,index=off [ 81.061769][ T8815] random: crng reseeded on system resumption [ 81.227433][ T8818] Cannot find add_set index 65532 as target [ 81.261907][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 81.578116][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.40 [ 81.586846][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.590142][ T10] usb 5-1: Product: ဠ[ 81.599025][ T8834] loop5: detected capacity change from 0 to 7 [ 81.604934][ T8834] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.607644][ T8834] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.610246][ T8834] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.615398][ T8837] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.617035][ T10] usb 5-1: can't set config #1, error -71 [ 81.619932][ T8834] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.626979][ T10] usb 5-1: USB disconnect, device number 3 [ 81.627404][ T8837] usb usb9: usbfs: process 8837 (syz.1.257) did not claim interface 47 before use [ 81.632037][ T8834] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.635379][ T8834] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.638292][ T8834] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.641287][ T8834] ldm_validate_partition_table(): Disk read failed. [ 81.643703][ T8834] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.646466][ T8834] Buffer I/O error on dev loop5, logical block 0, async page read [ 81.649015][ T8834] Dev loop5: unable to read RDB block 0 [ 81.652632][ T8834] loop5: unable to read partition table [ 81.654668][ T8834] loop5: partition table beyond EOD, truncated [ 81.656663][ T8834] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 81.668360][ T8839] sctp: [Deprecated]: syz.0.259 (pid 8839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.668360][ T8839] Use struct sctp_sack_info instead [ 81.723574][ T8843] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 81.735750][ T8842] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 81.808976][ T8856] f2fs: Unknown parameter 'usrquota/seq' [ 81.832470][ T8858] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 81.931485][ T8865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 81.934483][ T8865] netlink: 'syz.0.268': attribute type 7 has an invalid length. [ 81.936972][ T8865] netlink: 'syz.0.268': attribute type 8 has an invalid length. [ 81.939483][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 81.988336][ T8869] capability: warning: `syz.3.269' uses 32-bit capabilities (legacy support in use) [ 82.199704][ T8882] kvm: apic: phys broadcast and lowest prio [ 82.210951][ T6023] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 82.326634][ T8892] netlink: 'syz.2.277': attribute type 9 has an invalid length. [ 82.329487][ T8892] netlink: 'syz.2.277': attribute type 11 has an invalid length. [ 82.332217][ T8892] netlink: 'syz.2.277': attribute type 12 has an invalid length. [ 82.335524][ T8892] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.277'. [ 82.338898][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 82.373844][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.378507][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 82.383542][ T6023] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 82.386485][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.394433][ T6023] usb 5-1: config 0 descriptor?? [ 82.396909][ T8865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.471297][ T8901] FAULT_INJECTION: forcing a failure. [ 82.471297][ T8901] name failslab, interval 1, probability 0, space 0, times 1 [ 82.476413][ T8901] CPU: 0 UID: 0 PID: 8901 Comm: syz.2.281 Not tainted syzkaller #0 PREEMPT(full) [ 82.476437][ T8901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.476447][ T8901] Call Trace: [ 82.476453][ T8901] [ 82.476458][ T8901] dump_stack_lvl+0x100/0x190 [ 82.476483][ T8901] should_fail_ex.cold+0x5/0xa [ 82.476506][ T8901] ? tomoyo_encode2+0xfb/0x3c0 [ 82.476527][ T8901] should_failslab+0xc2/0x120 [ 82.476543][ T8901] __kmalloc_noprof+0xe0/0x850 [ 82.476563][ T8901] tomoyo_encode2+0xfb/0x3c0 [ 82.476602][ T8901] tomoyo_encode+0x29/0x50 [ 82.476620][ T8901] tomoyo_realpath_from_path+0x18c/0x690 [ 82.476650][ T8901] tomoyo_path_number_perm+0x23c/0x580 [ 82.476668][ T8901] ? tomoyo_path_number_perm+0x22e/0x580 [ 82.476685][ T8901] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 82.476729][ T8901] ? find_held_lock+0x2b/0x80 [ 82.476743][ T8901] ? __fget_files+0x215/0x3d0 [ 82.476760][ T8901] ? hook_file_ioctl_common+0x146/0x410 [ 82.476790][ T8901] ? __fget_files+0x21f/0x3d0 [ 82.476808][ T8901] security_file_ioctl+0xd3/0x230 [ 82.476830][ T8901] __x64_sys_ioctl+0xb7/0x210 [ 82.476862][ T8901] do_syscall_64+0x106/0xf80 [ 82.476881][ T8901] ? clear_bhb_loop+0x40/0x90 [ 82.476901][ T8901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.476919][ T8901] RIP: 0033:0x7fae8099bf79 [ 82.476931][ T8901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.476943][ T8901] RSP: 002b:00007fae817ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.476958][ T8901] RAX: ffffffffffffffda RBX: 00007fae80c15fa0 RCX: 00007fae8099bf79 [ 82.476969][ T8901] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000006 [ 82.476979][ T8901] RBP: 00007fae817ea090 R08: 0000000000000000 R09: 0000000000000000 [ 82.476989][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.476998][ T8901] R13: 00007fae80c16038 R14: 00007fae80c15fa0 R15: 00007ffc31fb2798 [ 82.477017][ T8901] [ 82.477098][ T8901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 82.583962][ T40] kauditd_printk_skb: 1409 callbacks suppressed [ 82.583973][ T40] audit: type=1400 audit(1770925378.515:3547): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.594762][ T40] audit: type=1400 audit(1770925378.515:3548): avc: denied { read write open } for pid=5931 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.605666][ T6023] usbhid 5-1:0.0: can't add hid device: -71 [ 82.607605][ T6023] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 82.613110][ T40] audit: type=1400 audit(1770925378.515:3549): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.618789][ T6023] usb 5-1: USB disconnect, device number 4 [ 82.622910][ T40] audit: type=1400 audit(1770925378.525:3550): avc: denied { create } for pid=8902 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.641252][ T40] audit: type=1400 audit(1770925378.525:3551): avc: denied { write } for pid=8902 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.642281][ T8905] netlink: 'syz.2.283': attribute type 21 has an invalid length. [ 82.649262][ T40] audit: type=1400 audit(1770925378.525:3552): avc: denied { read } for pid=8902 comm="syz.1.282" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.660134][ T40] audit: type=1400 audit(1770925378.535:3553): avc: denied { open } for pid=8902 comm="syz.1.282" path="net:[4026532889]" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.669931][ T8905] netlink: 156 bytes leftover after parsing attributes in process `syz.2.283'. [ 82.670394][ T40] audit: type=1400 audit(1770925378.535:3554): avc: denied { create } for pid=8902 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.691407][ T40] audit: type=1400 audit(1770925378.535:3555): avc: denied { write } for pid=8902 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.694522][ T8910] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 82.697724][ T40] audit: type=1400 audit(1770925378.535:3556): avc: denied { read } for pid=8902 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.803387][ T8917] ceph: Path missing in source [ 82.921001][ T39] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 83.085893][ T39] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 83.089550][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 83.092493][ T39] usb 7-1: Product: syz [ 83.094232][ T39] usb 7-1: Manufacturer: syz [ 83.096245][ T39] usb 7-1: SerialNumber: syz [ 83.100579][ T39] usb 7-1: config 0 descriptor?? [ 83.105325][ T39] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 83.108396][ T39] dvb-usb: bulk message failed: -22 (2/0) [ 83.116052][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.131656][ T39] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 83.135136][ T39] usb 7-1: media controller created [ 83.148976][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.222469][ T8929] netlink: 'syz.3.289': attribute type 21 has an invalid length. [ 83.226207][ T8929] netlink: 156 bytes leftover after parsing attributes in process `syz.3.289'. [ 83.305699][ T8905] cxusb: i2c wr: len=79 is too big! [ 83.305699][ T8905] [ 83.323769][ T39] cxusb: set interface failed [ 83.325371][ T39] dvb-usb: bulk message failed: -22 (1/0) [ 83.350802][ T39] DVB: Unable to find symbol mt352_attach() [ 83.354397][ T39] dvb-usb: bulk message failed: -22 (5/0) [ 83.357048][ T39] zl10353_read_register: readreg error (reg=127, ret==-121) [ 83.359417][ T39] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 83.420990][ T39] rc_core: IR keymap rc-dvico-mce not found [ 83.423453][ T39] Registered IR keymap rc-empty [ 83.433770][ T39] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 83.444963][ T39] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input6 [ 83.455606][ T39] dvb-usb: schedule remote query interval to 100 msecs. [ 83.458008][ T39] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 83.463641][ T39] usb 7-1: USB disconnect, device number 3 [ 83.564857][ T39] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 83.639554][ T8939] FAULT_INJECTION: forcing a failure. [ 83.639554][ T8939] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.646089][ T8939] CPU: 1 UID: 0 PID: 8939 Comm: syz.1.291 Not tainted syzkaller #0 PREEMPT(full) [ 83.646106][ T8939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.646113][ T8939] Call Trace: [ 83.646116][ T8939] [ 83.646121][ T8939] dump_stack_lvl+0x100/0x190 [ 83.646151][ T8939] should_fail_ex.cold+0x5/0xa [ 83.646171][ T8939] _copy_from_user+0x2e/0xd0 [ 83.646202][ T8939] wext_handle_ioctl+0xc9/0x1b0 [ 83.646231][ T8939] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 83.646253][ T8939] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 83.646272][ T8939] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.646292][ T8939] sock_ioctl+0x2d4/0x6b0 [ 83.646305][ T8939] ? __pfx_sock_ioctl+0x10/0x10 [ 83.646315][ T8939] ? hook_file_ioctl_common+0x146/0x410 [ 83.646337][ T8939] ? selinux_file_ioctl+0x139/0x290 [ 83.646352][ T8939] ? selinux_file_ioctl+0xb4/0x290 [ 83.646368][ T8939] ? __pfx_sock_ioctl+0x10/0x10 [ 83.646380][ T8939] __x64_sys_ioctl+0x18e/0x210 [ 83.646400][ T8939] do_syscall_64+0x106/0xf80 [ 83.646415][ T8939] ? clear_bhb_loop+0x40/0x90 [ 83.646428][ T8939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.646440][ T8939] RIP: 0033:0x7fd6ad19bf79 [ 83.646449][ T8939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.646459][ T8939] RSP: 002b:00007fd6ae07a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.646471][ T8939] RAX: ffffffffffffffda RBX: 00007fd6ad415fa0 RCX: 00007fd6ad19bf79 [ 83.646477][ T8939] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000006 [ 83.646484][ T8939] RBP: 00007fd6ae07a090 R08: 0000000000000000 R09: 0000000000000000 [ 83.646490][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.646496][ T8939] R13: 00007fd6ad416038 R14: 00007fd6ad415fa0 R15: 00007ffe693ec8c8 [ 83.646509][ T8939] [ 83.990975][ T2310] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.142656][ T2310] usb 6-1: Using ep0 maxpacket: 8 [ 84.148233][ T2310] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.150430][ T2310] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.154497][ T2310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.160670][ T2310] usb 6-1: config 0 descriptor?? [ 84.579676][ T2310] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 84.590059][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 84.600770][ T8962] overlayfs: conflicting options: userxattr,metacopy=on [ 84.623018][ T8963] openvswitch: netlink: IP tunnel TTL not specified. [ 84.674032][ T8967] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 84.772062][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 84.778948][ T8941] openvswitch: netlink: Flow actions attr not present in new flow. [ 84.784708][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.786086][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.789630][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.790037][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.800077][ T827] usb 6-1: USB disconnect, device number 4 [ 84.836137][ T8978] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 84.943002][ T8985] netlink: 'syz.0.306': attribute type 8 has an invalid length. [ 84.967406][ T8987] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 84.970200][ T8987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.976956][ T8987] vhci_hcd vhci_hcd.0: Device attached [ 84.988040][ T8991] xt_recent: Unsupported userspace flags (000000b2) [ 84.990581][ T5285] Bluetooth: hci1: Malformed LE Event: 0x02 [ 84.991333][ T8991] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 84.991551][ T8988] vhci_hcd: cannot find the pending unlink 1023 [ 84.991728][ T8988] vhci_hcd: connection closed [ 84.992892][ T46] vhci_hcd vhci_hcd.3: stop threads [ 84.992918][ T46] vhci_hcd vhci_hcd.3: release socket [ 84.992936][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 85.005179][ T8991] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 85.173823][ T5285] Bluetooth: hci3: unexpected cc 0x2003 length: 1 < 9 [ 85.182577][ T5285] Bluetooth: hci3: unexpected cc 0x2003 length: 1 < 9 [ 85.542929][ T9033] MPI: mpi too large (112776 bits) [ 85.610979][ T6117] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 85.685966][ T9050] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 85.689856][ T9050] UDF-fs: Scanning with blocksize 2048 failed [ 85.693252][ T9050] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 85.693270][ T9050] UDF-fs: Scanning with blocksize 4096 failed [ 85.781222][ T6117] usb 7-1: Using ep0 maxpacket: 32 [ 85.792727][ T6117] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.796836][ T6117] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.811249][ T6117] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 85.814295][ T6117] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 85.817111][ T6117] usb 7-1: Product: syz [ 85.818643][ T6117] usb 7-1: Manufacturer: syz [ 85.820365][ T6117] usb 7-1: SerialNumber: syz [ 85.842181][ T6117] usb 7-1: config 0 descriptor?? [ 85.872529][ T9068] bond0: entered promiscuous mode [ 85.874739][ T9068] bond_slave_0: entered promiscuous mode [ 85.882724][ T9068] bond_slave_1: entered promiscuous mode [ 85.885250][ T9068] bond0: entered allmulticast mode [ 85.887662][ T9072] MINIX-fs: blocksize too small for device [ 85.891727][ T9068] bond_slave_0: entered allmulticast mode [ 85.901426][ T9068] bond_slave_1: entered allmulticast mode [ 86.068982][ T9023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.075168][ T9023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.091926][ T2310] usb 7-1: USB disconnect, device number 4 [ 86.212698][ T9105] netlink: 'syz.1.344': attribute type 6 has an invalid length. [ 86.278022][ T9114] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 86.398366][ T9131] Bluetooth: MGMT ver 1.23 [ 86.458025][ T9137] __nla_validate_parse: 2 callbacks suppressed [ 86.458036][ T9137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'. [ 86.689389][ T9154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9154 comm=syz.2.358 [ 87.332676][ T9170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.592479][ T40] kauditd_printk_skb: 1368 callbacks suppressed [ 87.592490][ T40] audit: type=1400 audit(1770925383.525:4925): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 87.611333][ T40] audit: type=1400 audit(1770925383.525:4926): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 87.619070][ T40] audit: type=1400 audit(1770925383.525:4927): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 87.630199][ T40] audit: type=1400 audit(1770925383.525:4928): avc: denied { create } for pid=9178 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.639382][ T40] audit: type=1400 audit(1770925383.525:4929): avc: denied { write } for pid=9178 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.647624][ T40] audit: type=1400 audit(1770925383.525:4930): avc: denied { read } for pid=9178 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.655990][ T40] audit: type=1400 audit(1770925383.535:4931): avc: denied { ioctl } for pid=9178 comm="syz.2.364" path="socket:[17935]" dev="sockfs" ino=17935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.667901][ T40] audit: type=1400 audit(1770925383.535:4932): avc: denied { write } for pid=9178 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.677161][ T40] audit: type=1400 audit(1770925383.535:4933): avc: denied { recv } for pid=5909 comm="sshd-session" saddr=10.0.2.2 src=35582 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 87.688296][ T40] audit: type=1400 audit(1770925383.535:4934): avc: denied { recv } for pid=5909 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 87.767442][ T9177] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 87.828323][ T9190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9190 comm=syz.0.367 [ 87.921207][ T9197] nbd: illegal input index -2146435068 [ 87.927832][ T9197] capability: warning: `syz.3.369' uses deprecated v2 capabilities in a way that may be insecure [ 87.954887][ T9199] nbd: illegal input index -2146435068 [ 88.204171][ T9217] kvm: kvm [9216]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc2) = 0xa09000007043 [ 88.208356][ T9217] kvm: kvm [9216]: vcpu0, guest rIP: 0x9154 Unhandled WRMSR(0xc2) = 0x7043 [ 88.213155][ T9217] kvm: kvm [9216]: vcpu0, guest rIP: 0x9156 Unhandled WRMSR(0xc2) = 0x7043 [ 88.217874][ T9217] kvm: kvm [9216]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0xc1) = 0x4fdf00000000 [ 88.310362][ T9219] random: crng reseeded on system resumption [ 88.352579][ T9228] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 88.444549][ T9235] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 88.511663][ T9236] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 88.579588][ T9238] netlink: 'syz.0.378': attribute type 25 has an invalid length. [ 88.582293][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.378'. [ 88.594286][ T9238] kvm: kvm [9237]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200b7 [ 88.697852][ T9217] kvm: kvm [9216]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x187) = 0xa06000002080 [ 88.702088][ T9217] kvm: kvm [9216]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x186) = 0xa0800000a060 [ 88.706287][ T9217] kvm: kvm [9216]: vcpu0, guest rIP: 0x9154 Unhandled WRMSR(0x186) = 0xa060 [ 88.710424][ T9217] kvm: kvm [9216]: vcpu0, guest rIP: 0x9156 Unhandled WRMSR(0x186) = 0xa060 [ 88.738316][ T9217] kvm: kvm [9216]: vcpu0, guest rIP: 0x9115 Unhandled WRMSR(0x11e) = 0x606000006060 [ 88.935587][ T9246] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 88.937891][ T9247] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 88.992299][ T9244] netlink: 'syz.0.381': attribute type 13 has an invalid length. [ 89.012933][ T9251] loop7: detected capacity change from 0 to 524255232 [ 89.103653][ T9255] ip6t_srh: unknown srh match flags 4000 [ 89.132644][ T9260] usb usb9: usbfs: process 9260 (syz.2.386) did not claim interface 0 before use [ 89.165190][ T9265] xt_hashlimit: size too large, truncated to 1048576 [ 89.193239][ T9259] trusted_key: syz.2.386 sent an empty control message without MSG_MORE. [ 89.640383][ T5285] Bluetooth: hci0: hardware error 0x09 [ 89.996935][ T9315] random: crng reseeded on system resumption [ 90.146584][ T9326] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.238732][ T9332] netlink: 'syz.2.407': attribute type 7 has an invalid length. [ 90.244213][ T9332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.407'. [ 90.441105][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 90.450239][ T9339] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 90.454987][ T9339] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 90.577628][ T9348] openvswitch: netlink: IP tunnel dst address not specified [ 90.591556][ T29] usb 8-1: device descriptor read/64, error -71 [ 90.604681][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 90.860995][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 90.931253][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.988791][ T9358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.992044][ T29] usb 8-1: device descriptor read/64, error -71 [ 91.014458][ T9358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.018475][ T9358] netlink: 48 bytes leftover after parsing attributes in process `syz.1.415'. [ 91.084341][ T10] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 91.088296][ T10] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 91.092041][ T10] usb 7-1: config 220 interface 0 has no altsetting 0 [ 91.097081][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 91.100830][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.105352][ T10] usb 7-1: Product: syz [ 91.107351][ T10] usb 7-1: Manufacturer: syz [ 91.109209][ T10] usb 7-1: SerialNumber: syz [ 91.111283][ T29] usb usb8-port1: attempt power cycle [ 91.367215][ T10] uvcvideo 7-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 91.370437][ T10] uvcvideo 7-1:220.0: No valid video chain found. [ 91.378099][ T10] usb 7-1: USB disconnect, device number 5 [ 91.461938][ T9370] input: syz0 as /devices/virtual/input/input8 [ 91.467430][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 91.495822][ T29] usb 8-1: device descriptor read/8, error -71 [ 91.661064][ T5285] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 91.741064][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 91.762870][ T29] usb 8-1: device descriptor read/8, error -71 [ 91.872261][ T29] usb usb8-port1: unable to enumerate USB device [ 91.950746][ T9376] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.964421][ T9376] netlink: 168 bytes leftover after parsing attributes in process `syz.1.419'. [ 91.968253][ T9376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.419'. [ 92.212096][ T9388] 9p: Could not find request transport: v­ËJN½^´ [ 92.629045][ T40] kauditd_printk_skb: 1066 callbacks suppressed [ 92.629062][ T40] audit: type=1400 audit(1770925388.555:6001): avc: denied { read } for pid=9396 comm="syz.1.427" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.642116][ T40] audit: type=1400 audit(1770925388.555:6002): avc: denied { open } for pid=9396 comm="syz.1.427" path="net:[4026532889]" dev="nsfs" ino=4026532889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.650610][ T40] audit: type=1400 audit(1770925388.555:6003): avc: denied { create } for pid=9396 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.658814][ T40] audit: type=1400 audit(1770925388.565:6004): avc: denied { write } for pid=9396 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.666036][ T40] audit: type=1400 audit(1770925388.565:6005): avc: denied { getopt } for pid=9396 comm="syz.1.427" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.667831][ T9397] bond3 (unregistering): Released all slaves [ 92.673493][ T40] audit: type=1400 audit(1770925388.565:6006): avc: denied { create } for pid=9396 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 92.683413][ T40] audit: type=1400 audit(1770925388.565:6007): avc: denied { create } for pid=9396 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.689993][ T40] audit: type=1400 audit(1770925388.565:6008): avc: denied { ioctl } for pid=9396 comm="syz.1.427" path="socket:[17388]" dev="sockfs" ino=17388 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.699805][ T40] audit: type=1400 audit(1770925388.615:6009): avc: denied { read } for pid=9396 comm="syz.1.427" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.708455][ T40] audit: type=1400 audit(1770925388.615:6010): avc: denied { open } for pid=9396 comm="syz.1.427" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.945450][ T9417] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.977643][ T9419] binder: 9418:9419 ioctl c0306201 2000000003c0 returned -14 [ 92.983101][ T9420] binder: BINDER_SET_CONTEXT_MGR already set [ 92.985831][ T9420] binder: 9418:9420 ioctl 4018620d 200000000000 returned -16 [ 93.148200][ T9428] loop7: detected capacity change from 0 to 8 [ 93.289163][ T5934] Dev loop7: unable to read RDB block 8 [ 93.291232][ T5934] loop7: unable to read partition table [ 93.293155][ T5934] loop7: partition table beyond EOD, truncated [ 93.439670][ T9428] Dev loop7: unable to read RDB block 8 [ 93.441900][ T9428] loop7: unable to read partition table [ 93.444282][ T9428] loop7: partition table beyond EOD, truncated [ 93.446391][ T9428] loop_reread_partitions: partition scan of loop7 (úùƒå´ ‰ü¾CêjÌ–ã¢P=ý?ø}Xÿ) failed (rc=-5) [ 93.462002][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'. [ 93.641418][ T9444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.442'. [ 93.664152][ T9448] netlink: 76 bytes leftover after parsing attributes in process `syz.3.445'. [ 93.837264][ T9472] netlink: 'syz.2.452': attribute type 3 has an invalid length. [ 93.841436][ T9472] netlink: 'syz.2.452': attribute type 3 has an invalid length. [ 93.857026][ T9472] tmpfs: Unknown parameter 'grqquota_block_hardlimit' [ 93.862121][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 93.865918][ T9472] netlink: 'syz.2.452': attribute type 30 has an invalid length. [ 93.877593][ T1143] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.883003][ T1143] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.883804][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 93.886120][ T1143] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.891966][ T9472] netlink: 'syz.2.452': attribute type 30 has an invalid length. [ 93.894249][ T1143] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.042154][ T9480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.043059][ T9477] /dev/sr0: Can't open blockdev [ 94.360973][ T6023] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 94.450699][ T9502] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 94.537360][ T6023] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.537391][ T6023] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.537420][ T6023] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.537439][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.540873][ T9480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.563545][ T6023] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.767072][ T9] usb 7-1: USB disconnect, device number 6 [ 95.521878][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.681169][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 95.685530][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 95.690387][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.695366][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.699666][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 95.706667][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 95.710623][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.719175][ T9] usb 6-1: config 0 descriptor?? [ 95.819530][ T9553] veth1: entered promiscuous mode [ 95.822056][ T9553] veth1: entered allmulticast mode [ 96.147667][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input9 [ 96.166706][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input10 [ 96.276629][ T9] kye 0003:0458:5013.0004: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 96.346839][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.350593][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.395628][ T9538] hfs: unable to load iocharset "io#harsetîÛ#a" [ 96.409673][ T830] usb 6-1: USB disconnect, device number 5 [ 96.451229][ T9503] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 96.453486][ T9503] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 96.461185][ T5285] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.461334][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 96.610990][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 96.614678][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 96.617974][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.623191][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.627514][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.632339][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.637768][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.641751][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.856908][ T9] usb 7-1: usb_control_msg returned -32 [ 96.860076][ T9] usbtmc 7-1:16.0: can't read capabilities [ 97.359409][ T9588] xt_hashlimit: size too large, truncated to 1048576 [ 97.381501][ T9503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.383444][ T9503] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 97.393108][ T9503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.395555][ T9503] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 97.709471][ T40] kauditd_printk_skb: 1012 callbacks suppressed [ 97.709487][ T40] audit: type=1400 audit(1770925393.635:7023): avc: denied { recv } for pid=5910 comm="syz-executor" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 97.724191][ T40] audit: type=1400 audit(1770925393.645:7024): avc: denied { read write } for pid=5923 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.735286][ T40] audit: type=1400 audit(1770925393.645:7025): avc: denied { open } for pid=5923 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.745551][ T40] audit: type=1400 audit(1770925393.645:7026): avc: denied { ioctl } for pid=5923 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.759543][ T40] audit: type=1400 audit(1770925393.645:7027): avc: denied { recv } for pid=40 comm="kauditd" saddr=10.0.2.2 src=35582 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 97.771020][ T40] audit: type=1400 audit(1770925393.665:7028): avc: denied { create } for pid=9603 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.779237][ T40] audit: type=1400 audit(1770925393.665:7029): avc: denied { write } for pid=9603 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.787190][ T40] audit: type=1400 audit(1770925393.665:7030): avc: denied { read } for pid=9603 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.796425][ T40] audit: type=1400 audit(1770925393.675:7031): avc: denied { ioctl } for pid=9603 comm="syz.1.480" path="socket:[22567]" dev="sockfs" ino=22567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.806050][ T40] audit: type=1400 audit(1770925393.685:7032): avc: denied { create } for pid=9603 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.111768][ T9614] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 98.121022][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 98.261284][ T9] usb 8-1: device descriptor read/64, error -71 [ 98.501493][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 98.631110][ T9] usb 8-1: device descriptor read/64, error -71 [ 98.741405][ T9] usb usb8-port1: attempt power cycle [ 99.111187][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 99.131682][ T9] usb 8-1: device descriptor read/8, error -71 [ 99.371087][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 99.393223][ T9] usb 8-1: device descriptor read/8, error -71 [ 99.418153][ T9628] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 99.422778][ T9628] cramfs: wrong magic [ 99.502511][ T9] usb usb8-port1: unable to enumerate USB device [ 100.075453][ T9640] netlink: 14 bytes leftover after parsing attributes in process `syz.1.489'. [ 100.087412][ T9640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.094399][ T9640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.100145][ T9640] bond0 (unregistering): Released all slaves [ 100.491160][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 100.503929][ T9645] mmap: syz.1.490 (9645) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.565905][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 101.082750][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 101.231823][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 101.236698][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.240663][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.245640][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.249775][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.254121][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.258626][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.264667][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.267513][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.272708][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.276960][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.280274][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.284495][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.288259][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.292098][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.296148][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.299761][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.303556][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.307551][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.312805][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.316563][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.320749][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.324471][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.327864][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.332326][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.337012][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 101.340468][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 101.343805][ T10] usb 8-1: Product: syz [ 101.345461][ T10] usb 8-1: Manufacturer: syz [ 101.347343][ T10] usb 8-1: SerialNumber: syz [ 101.353067][ T10] usb 8-1: config 0 descriptor?? [ 101.366485][ T10] yurex 8-1:0.0: USB YUREX device now attached to Yurex #1 [ 101.626857][ T10] usb 8-1: USB disconnect, device number 10 [ 101.636950][ T9667] hpfs: Bad magic ... probably not HPFS [ 101.644827][ T9667] hpfs: Bad magic ... probably not HPFS [ 102.267419][ T9686] loop6: detected capacity change from 0 to 2640 [ 102.270018][ T9686] buffer_io_error: 15 callbacks suppressed [ 102.270027][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.275509][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.278704][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.287244][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.290488][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.297864][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.301203][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.304326][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.307515][ T9686] ldm_validate_partition_table(): Disk read failed. [ 102.310198][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.314604][ T9686] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.317830][ T9686] Dev loop6: unable to read RDB block 0 [ 102.320198][ T9686] loop6: unable to read partition table [ 102.324939][ T9686] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 102.931859][ T9613] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 102.935517][ T10] yurex 8-1:0.0: USB YUREX #1 now disconnected [ 102.952620][ T29] usb 7-1: USB disconnect, device number 7 [ 102.964797][ T40] kauditd_printk_skb: 405 callbacks suppressed [ 102.964813][ T40] audit: type=1400 audit(1770925398.895:7438): avc: denied { recv } for pid=5910 comm="syz-executor" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 103.003591][ T40] audit: type=1400 audit(1770925398.935:7439): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=35582 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 103.013083][ T40] audit: type=1400 audit(1770925398.935:7440): avc: denied { recv } for pid=5909 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 103.052204][ T40] audit: type=1400 audit(1770925398.985:7441): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 103.149696][ T40] audit: type=1400 audit(1770925399.075:7442): avc: denied { recv } for pid=5910 comm="syz-executor" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 103.161128][ T40] audit: type=1400 audit(1770925399.085:7443): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=35582 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 103.191309][ T40] audit: type=1400 audit(1770925399.125:7444): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 103.199637][ T40] audit: type=1400 audit(1770925399.125:7445): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 103.246797][ T40] audit: type=1400 audit(1770925399.175:7446): avc: denied { read write } for pid=5931 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.260947][ T40] audit: type=1400 audit(1770925399.175:7447): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.496425][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 103.500043][ T9698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.503'. [ 103.509299][ T9698] erspan0: entered promiscuous mode [ 103.567142][ T9717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9717 comm=syz.2.507 [ 103.589947][ T9722] fuse: Bad value for 'group_id' [ 103.592102][ T9722] fuse: Bad value for 'group_id' [ 103.660178][ T9732] macvlan0: entered allmulticast mode [ 103.663468][ T9732] veth1_vlan: entered allmulticast mode [ 103.669589][ T9732] pim6reg: entered allmulticast mode [ 103.675366][ T9732] veth1_vlan: left allmulticast mode [ 103.681597][ T9732] macvlan0 (unregistering): left allmulticast mode [ 103.731396][ T9740] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 103.785444][ T9732] syz.1.512 (9732): drop_caches: 0 [ 104.051821][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 104.197538][ T5935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.201543][ T5935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.206663][ T5935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.211275][ T5935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.214046][ T5935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.222372][ T5285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.225161][ T5285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.228209][ T5285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.231493][ T5285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.234090][ T5285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.410142][ T9786] chnl_net:caif_netlink_parms(): no params data found [ 104.460054][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.464378][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.467685][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.470778][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.475264][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.478360][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.481549][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.484465][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.487649][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.490738][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.493990][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.497180][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.500186][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.503233][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.506195][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.517578][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.521067][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.524328][ T9805] usb usb8: usbfs: process 9805 (syz.1.530) did not claim interface 0 before use [ 104.581700][ T9786] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.591096][ T9786] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.593441][ T9786] bridge_slave_0: entered allmulticast mode [ 104.599459][ T9786] bridge_slave_0: entered promiscuous mode [ 104.608093][ T9786] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.614518][ T9786] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.620537][ T9786] bridge_slave_1: entered allmulticast mode [ 104.635483][ T9786] bridge_slave_1: entered promiscuous mode [ 104.668876][ T9786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.673781][ T9786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.703044][ T9786] team0: Port device team_slave_0 added [ 104.708572][ T9786] team0: Port device team_slave_1 added [ 104.732904][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.735671][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.746003][ T9786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.752338][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.755878][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.768232][ T9786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.830254][ T9786] hsr_slave_0: entered promiscuous mode [ 104.833582][ T9786] hsr_slave_1: entered promiscuous mode [ 104.836490][ T9786] debugfs: 'hsr0' already exists in 'hsr' [ 104.839034][ T9786] Cannot create hsr debugfs directory [ 104.856637][ T9831] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 104.920472][ T9831] syzkaller0: entered promiscuous mode [ 104.923463][ T9831] syzkaller0: entered allmulticast mode [ 105.020620][ T9829] xt_hashlimit: size too large, truncated to 1048576 [ 105.072933][ T9786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.079227][ T9786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.086269][ T9786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.093861][ T9786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.136957][ T9786] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.140124][ T9786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.143874][ T9786] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.146293][ T9786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.190087][ T9786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.198589][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.202873][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.215682][ T9786] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.228875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.231585][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.236185][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.538'. [ 105.242247][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.244815][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.406567][ T9786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.567951][ T9860] fuse: Unknown parameter 'rotmode' [ 105.629624][ T9786] veth0_vlan: entered promiscuous mode [ 105.637767][ T9786] veth1_vlan: entered promiscuous mode [ 105.660505][ T9786] veth0_macvtap: entered promiscuous mode [ 105.674474][ T9786] veth1_macvtap: entered promiscuous mode [ 105.685734][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.694339][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.707971][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.710825][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.711430][ T9] usb 6-1: device descriptor read/64, error -110 [ 105.721724][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.724592][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.833863][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.838333][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.862608][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.865395][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.953622][ T9881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.524'. [ 105.959223][ T9881] netlink: 43 bytes leftover after parsing attributes in process `syz.4.524'. [ 105.963025][ T9881] netlink: 'syz.4.524': attribute type 6 has an invalid length. [ 105.966594][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 105.970039][ T9881] netlink: 'syz.4.524': attribute type 5 has an invalid length. [ 105.973640][ T9881] netlink: 43 bytes leftover after parsing attributes in process `syz.4.524'. [ 106.067337][ T9902] delete_channel: no stack [ 106.093876][ T9907] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 106.096716][ T9907] netlink: 224 bytes leftover after parsing attributes in process `syz.2.555'. [ 106.129863][ T9] usb 6-1: device descriptor read/64, error -32 [ 106.255370][ T9] usb usb6-port1: attempt power cycle [ 106.319417][ T5285] Bluetooth: hci4: command tx timeout [ 106.501679][ T5991] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 106.640174][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 106.663616][ T9] usb 6-1: device descriptor read/8, error -32 [ 106.675344][ T5991] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 106.678769][ T5991] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.682513][ T5991] usb 7-1: config 0 has no interface number 0 [ 106.684905][ T5991] usb 7-1: config 0 interface 205 has no altsetting 0 [ 106.689422][ T5991] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 106.692353][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.695285][ T5991] usb 7-1: Product: syz [ 106.696919][ T5991] usb 7-1: Manufacturer: syz [ 106.698526][ T5991] usb 7-1: SerialNumber: syz [ 106.703732][ T5991] usb 7-1: config 0 descriptor?? [ 106.707640][ T5991] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 106.711603][ T5991] dvb-usb: bulk message failed: -22 (3/0) [ 106.729435][ T5991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 106.732519][ T5991] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 106.736276][ T5991] usb 7-1: media controller created [ 106.740716][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.750337][ T5991] dvb-usb: bulk message failed: -22 (6/0) [ 106.752501][ T5991] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 106.759254][ T5991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input11 [ 106.764608][ T5991] dvb-usb: schedule remote query interval to 150 msecs. [ 106.766862][ T5991] dvb-usb: bulk message failed: -22 (3/0) [ 106.780253][ T9] raw-gadget.2 gadget.1: failed to queue reset event [ 106.789906][ T5991] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 106.854439][ T9] raw-gadget.2 gadget.1: failed to queue resume event [ 106.878581][ T9916] selinuxfs: Unknown parameter 'adfs' [ 106.927380][ T9914] mac80211_hwsim hwsim5 : renamed from wlan1 [ 106.936659][ T39] usb 7-1: USB disconnect, device number 8 [ 106.939679][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 106.962829][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 106.965196][ T9] usb 6-1: device descriptor read/8, error -32 [ 106.980745][ T9926] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 106.981895][ T39] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 107.004321][ T9926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.044206][ T9929] can: request_module (can-proto-5) failed. [ 107.091671][ T9] raw-gadget.2 gadget.1: failed to queue suspend event [ 107.094670][ T9] usb usb6-port1: unable to enumerate USB device [ 107.100622][ T9932] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.188218][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 107.192604][ T9945] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 107.265916][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 107.268789][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 107.375536][ T9959] ªªªªªª: renamed from vlan0 (while UP) [ 107.565102][ T9983] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 107.682529][ T9988] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 107.849757][T10004] sctp: [Deprecated]: syz.3.584 (pid 10004) Use of int in maxseg socket option. [ 107.849757][T10004] Use struct sctp_assoc_value instead [ 107.860003][T10004] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 108.133412][ T40] kauditd_printk_skb: 1256 callbacks suppressed [ 108.133428][ T40] audit: type=1400 audit(1770925403.909:8704): avc: denied { create } for pid=10024 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 108.145984][ T40] audit: type=1400 audit(1770925403.909:8705): avc: denied { create } for pid=10024 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 108.152972][ T40] audit: type=1400 audit(1770925403.909:8706): avc: denied { sys_admin } for pid=10024 comm="syz.1.591" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 108.161396][ T40] audit: type=1400 audit(1770925403.919:8707): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 108.170372][ T40] audit: type=1400 audit(1770925403.919:8708): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 108.179182][ T40] audit: type=1400 audit(1770925403.919:8709): avc: denied { recv } for pid=5909 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 108.188820][ T40] audit: type=1400 audit(1770925403.919:8710): avc: denied { recv } for pid=5909 comm="sshd-session" saddr=10.0.2.2 src=35582 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 108.197669][ T40] audit: type=1400 audit(1770925403.919:8711): avc: denied { recv } for pid=5909 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 108.219526][ T40] audit: type=1400 audit(1770925403.919:8712): avc: denied { read write } for pid=5927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.229835][ T40] audit: type=1400 audit(1770925403.919:8713): avc: denied { open } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.338162][ T5991] hid_parser_main: 1 callbacks suppressed [ 108.338176][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.346106][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.348626][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.351163][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.356369][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.358959][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.361365][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.364397][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.369218][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.371907][ T5991] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 108.385431][ T5991] hid-generic 00A0:0086:0003.0005: hidraw1: HID v0.05 Device [syz1] on syz0 [ 108.622208][T10076] ucma_write: process 522 (syz.3.602) changed security contexts after opening file descriptor, this is not allowed. [ 108.659759][T10083] netlink: zone id is out of range [ 108.667917][T10083] netlink: zone id is out of range [ 108.669758][T10083] netlink: set zone limit has 8 unknown bytes [ 108.797085][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 108.801054][T10088] fuse: Bad value for 'group_id' [ 108.801074][T10088] fuse: Bad value for 'group_id' [ 108.807670][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 108.933303][T10100] tipc: Enabled bearer , priority 0 [ 109.009607][T10111] snd_dummy snd_dummy.0: control 5:3:199:syz0:12 is already present [ 109.073511][T10113] uprobe: syz.2.613:10113 failed to unregister, leaking uprobe [ 109.230418][ T9] raw-gadget.2 gadget.1: failed to queue reset event [ 109.303567][ T9] raw-gadget.2 gadget.1: failed to queue resume event [ 109.378298][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 109.381625][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 109.386352][ T9] raw-gadget.2 gadget.1: failed to queue reset event [ 109.426449][T10119] kvm_pr_unimpl_wrmsr: 4 callbacks suppressed [ 109.426468][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2 [ 109.436348][T10132] x_tables: duplicate underflow at hook 3 [ 109.436587][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 109.450335][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x81 [ 109.458948][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1 [ 109.463642][ T9] raw-gadget.2 gadget.1: failed to queue resume event [ 109.491468][T10134] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 109.519959][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1 [ 109.525956][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1 [ 109.529811][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 109.538448][ T9] usb 6-1: device descriptor read/64, error -32 [ 109.539231][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x81 [ 109.545530][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1 [ 109.549680][T10119] kvm: kvm [10118]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 109.565128][T10119] kvm_intel: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x81 [ 109.572110][T10119] kvm_intel: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 109.577580][T10119] kvm_intel: kvm [10118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x81 [ 109.667363][ T9] raw-gadget.2 gadget.1: failed to queue suspend event [ 109.670068][ T9] raw-gadget.2 gadget.1: failed to queue reset event [ 109.741738][ T5285] Bluetooth: hci4: command tx timeout [ 109.753029][ T9] raw-gadget.2 gadget.1: failed to queue resume event [ 109.827592][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 109.831545][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 109.836005][ T9] raw-gadget.2 gadget.1: failed to queue reset event [ 109.934174][ T9] raw-gadget.2 gadget.1: failed to queue resume event [ 109.999747][ T9] usb 6-1: device descriptor read/64, error -32 [ 110.118830][ T9] raw-gadget.2 gadget.1: failed to queue suspend event [ 110.124052][ T9] usb usb6-port1: attempt power cycle [ 110.126211][ T9] raw-gadget.2 gadget.1: failed to queue disconnect event [ 110.130432][ T9] raw-gadget.2 gadget.1: failed to queue reset event [ 110.201707][ T9] raw-gadget.2 gadget.1: failed to queue resume event [ 110.206588][ T9] raw-gadget.2 gadget.1: failed to queue reset event [ 110.437505][ T9] raw-gadget.2 gadget.1: failed to queue resume event [ 110.512084][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 110.533553][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 110.536544][ T9] usb 6-1: device descriptor read/8, error -32 [ 110.661790][ T9] raw-gadget.2 gadget.1: failed to queue suspend event [ 110.667385][ T9] raw-gadget.2 gadget.1: failed to queue reset event [ 110.736845][ T9] raw-gadget.2 gadget.1: failed to queue resume event [ 110.800702][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 110.822448][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 110.834166][ T9] usb 6-1: device descriptor read/8, error -32 [ 111.014357][ T9] raw-gadget.2 gadget.1: failed to queue suspend event [ 111.017667][ T9] usb usb6-port1: unable to enumerate USB device [ 111.075616][T10183] __nla_validate_parse: 2 callbacks suppressed [ 111.075635][T10183] netlink: 48 bytes leftover after parsing attributes in process `syz.1.639'. [ 111.137468][T10185] netlink: 59 bytes leftover after parsing attributes in process `syz.1.640'. [ 111.153379][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 111.326458][ T10] usb 9-1: config 128 has an invalid interface number: 148 but max is 0 [ 111.330019][ T10] usb 9-1: config 128 has no interface number 0 [ 111.346152][ T10] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 111.350387][ T10] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 111.354983][ T10] usb 9-1: config 128 interface 148 has no altsetting 0 [ 111.370622][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 111.374378][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.380810][ T10] usb 9-1: Product: syz [ 111.382697][ T10] usb 9-1: Manufacturer: syz [ 111.384747][ T10] usb 9-1: SerialNumber: syz [ 111.582446][T10193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.644'. [ 111.624123][ T10] usb 9-1: USB disconnect, device number 2 [ 111.692556][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 111.750828][T10204] nfsd: Unknown parameter 'nžDõ+' [ 111.841549][T10210] binder: BINDER_SET_CONTEXT_MGR already set [ 111.848363][T10210] binder: 10208:10210 ioctl 4018620d 200000000100 returned -16 [ 111.908901][ T1182] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 111.966174][ T5285] Bluetooth: hci4: command tx timeout [ 111.974511][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 112.095611][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 112.214415][T10219] syz.3.650 (10219): drop_caches: 2 [ 112.214818][T10225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.296500][ T9] usb 9-1: config 128 has an invalid interface number: 148 but max is 0 [ 112.300070][ T9] usb 9-1: config 128 has no interface number 0 [ 112.302898][ T9] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 112.307036][ T9] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 112.314528][ T9] usb 9-1: config 128 interface 148 has no altsetting 0 [ 112.330066][ T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 112.333629][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.336800][ T9] usb 9-1: Product: syz [ 112.338551][ T9] usb 9-1: Manufacturer: syz [ 112.350172][ T9] usb 9-1: SerialNumber: syz [ 112.386231][T10230] /dev/sg0: Can't lookup blockdev [ 112.415699][T10235] fuse: Bad value for 'group_id' [ 112.417902][T10235] fuse: Bad value for 'group_id' [ 112.808794][T10181] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.833404][ T9] usb 9-1: USB disconnect, device number 3 [ 112.870317][T10259] ip6gre1: entered promiscuous mode [ 112.872703][T10259] ip6gre1: entered allmulticast mode [ 112.882513][ T1182] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.888040][ T1182] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.915175][ T830] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.942426][T10267] (syz.3.666,10267,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 112.945180][T10267] (syz.3.666,10267,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 112.947647][T10267] (syz.3.666,10267,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 112.948957][T10269] /dev/nullb0: Can't open blockdev [ 112.952733][T10267] (syz.3.666,10267,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 113.007769][T10271] netlink: 56 bytes leftover after parsing attributes in process `syz.1.668'. [ 113.036409][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.227248][ T830] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.484869][ T40] kauditd_printk_skb: 1066 callbacks suppressed [ 113.484884][ T40] audit: type=1400 audit(1770925408.921:9780): avc: denied { setopt } for pid=10282 comm="syz.4.671" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.507001][ T40] audit: type=1400 audit(1770925408.930:9781): avc: denied { getopt } for pid=10282 comm="syz.4.671" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.513112][ T40] audit: type=1400 audit(1770925408.930:9782): avc: denied { create } for pid=10282 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.520936][ T40] audit: type=1400 audit(1770925408.930:9783): avc: denied { write } for pid=10282 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.527618][ T40] audit: type=1400 audit(1770925408.930:9784): avc: denied { read } for pid=10282 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.534744][ T40] audit: type=1400 audit(1770925408.940:9785): avc: denied { module_request } for pid=10282 comm="syz.4.671" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 113.548918][ T40] audit: type=1400 audit(1770925408.968:9786): avc: denied { recv } for pid=10141 comm="syz.2.624" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 113.565815][ T40] audit: type=1400 audit(1770925408.996:9787): avc: denied { recv } for pid=5910 comm="syz-executor" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 113.581001][ T40] audit: type=1400 audit(1770925408.996:9788): avc: denied { read write } for pid=5923 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.588962][ T40] audit: type=1400 audit(1770925408.996:9789): avc: denied { recv } for pid=5909 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 113.645422][T10290] mkiss: ax0: crc mode is auto. [ 113.655368][T10290] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.983071][ T827] IPVS: starting estimator thread 0... [ 114.049878][T10299] (syz.2.676,10299,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 114.053379][T10299] (syz.2.676,10299,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 114.055791][T10299] (syz.2.676,10299,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 114.058893][T10299] (syz.2.676,10299,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 114.073079][T10297] IPVS: using max 45 ests per chain, 108000 per kthread [ 114.185001][T10304] netlink: 'syz.3.677': attribute type 2 has an invalid length. [ 114.309745][ T830] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 114.378282][T10312] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 114.485375][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.489629][ T830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.495511][ T830] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 114.499156][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.507228][ T830] usb 7-1: config 0 descriptor?? [ 114.533291][ T24] IPVS: starting estimator thread 0... [ 114.642431][T10319] IPVS: using max 46 ests per chain, 110400 per kthread [ 114.727074][ T830] usbhid 7-1:0.0: can't add hid device: -71 [ 114.730428][ T830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 114.740862][ T830] usb 7-1: USB disconnect, device number 9 [ 114.744310][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 114.761841][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 115.072186][T10355] SELinux: failed to load policy [ 115.094404][T10355] bridge0: entered promiscuous mode [ 115.097019][T10355] macvlan2: entered promiscuous mode [ 115.163433][T10362] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 115.167153][T10362] netlink: 228 bytes leftover after parsing attributes in process `syz.3.698'. [ 115.452618][ T827] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 115.492907][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.614662][ T827] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.618906][ T827] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.622684][ T827] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 115.626915][ T827] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 115.630079][ T827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.639008][T10364] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.646652][ T827] hub 9-1:1.0: bad descriptor, ignoring hub [ 115.649113][ T827] hub 9-1:1.0: probe with driver hub failed with error -5 [ 115.652660][ T827] cdc_wdm 9-1:1.0: skipping garbage [ 115.654898][ T827] cdc_wdm 9-1:1.0: skipping garbage [ 115.664873][ T827] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 115.667749][ T827] cdc_wdm 9-1:1.0: Unknown control protocol [ 115.701011][T10397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.794879][ T39] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 115.933913][ T39] usb 8-1: device descriptor read/64, error -71 [ 116.190829][ T39] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 116.340373][ T39] usb 8-1: device descriptor read/64, error -71 [ 116.458297][ T39] usb usb8-port1: attempt power cycle [ 116.465057][T10364] usb 9-1: reset low-speed USB device number 4 using dummy_hcd [ 116.777644][T10413] netlink: 'syz.2.709': attribute type 4 has an invalid length. [ 116.789558][T10364] usb 9-1: device firmware changed [ 116.796242][ T24] usb 9-1: USB disconnect, device number 4 [ 116.798828][T10364] cdc_wdm 9-1:1.0: Error autopm - -16 [ 116.832712][ T39] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 116.855510][ T39] usb 8-1: device descriptor read/8, error -71 [ 116.939156][ T24] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 117.099880][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.110901][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 117.114787][ T24] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 117.117445][ T24] usb 9-1: can't read configurations, error -71 [ 117.121105][ T39] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 117.154213][ T39] usb 8-1: device descriptor read/8, error -71 [ 117.270885][ T39] usb usb8-port1: unable to enumerate USB device [ 117.943021][T10426] xt_HMARK: spi-set and port-set can't be combined [ 118.033422][T10430] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 118.055962][T10430] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.063379][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 118.162664][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 118.359938][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 118.414398][T10455] Cannot find add_set index 2 as target [ 118.553776][T10464] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.609290][T10463] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 118.842962][ T40] kauditd_printk_skb: 982 callbacks suppressed [ 118.842979][ T40] audit: type=1400 audit(1770925413.924:10771): avc: denied { ioctl } for pid=10483 comm="syz.3.732" path="socket:[28799]" dev="sockfs" ino=28799 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.857449][ T40] audit: type=1400 audit(1770925413.933:10773): avc: denied { setopt } for pid=10471 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.866550][ T40] audit: type=1400 audit(1770925413.942:10774): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59798 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 118.877404][ T40] audit: type=1400 audit(1770925413.942:10775): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 118.888225][ T40] audit: type=1400 audit(1770925413.952:10776): avc: denied { recv } for pid=5910 comm="syz-executor" saddr=127.0.0.1 src=59798 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 118.899801][ T40] audit: type=1400 audit(1770925413.961:10777): avc: denied { read write } for pid=5923 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.908533][T10487] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 118.910980][ T40] audit: type=1400 audit(1770925413.961:10778): avc: denied { open } for pid=5923 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.925128][ T40] audit: type=1400 audit(1770925413.961:10779): avc: denied { ioctl } for pid=5923 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.936204][ T40] audit: type=1400 audit(1770925413.961:10780): avc: denied { recv } for pid=5923 comm="syz-executor" saddr=10.0.2.2 src=35582 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 118.946382][ T40] audit: type=1400 audit(1770925413.980:10781): avc: denied { read } for pid=10485 comm="syz.1.733" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 119.026803][T10498] veth1_to_batadv: entered promiscuous mode [ 119.245722][T10515] openvswitch: netlink: Flow key attribute not present in set flow. [ 119.551281][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 119.555008][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 119.605531][T10540] openvswitch: netlink: Key type 31 is not supported [ 119.691851][T10551] netlink: 'syz.4.750': attribute type 1 has an invalid length. [ 119.724720][T10484] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 119.738893][T10551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.745938][T10551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=10551 comm=syz.4.750 [ 119.802172][T10551] bond1: (slave veth3): Enslaving as an active interface with a down link [ 119.808059][T10556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.751'. [ 119.812253][T10556] netem: invalid attributes len -22 [ 119.814601][T10556] netem: change failed [ 119.819748][T10560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.751'. [ 119.823755][T10560] netem: invalid attributes len -22 [ 119.826115][T10560] netem: change failed [ 119.886436][T10551] vlan0: entered allmulticast mode [ 119.888087][T10551] bond1: entered allmulticast mode [ 119.890719][T10551] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 119.940776][T10570] netlink: 'syz.2.754': attribute type 7 has an invalid length. [ 119.986115][T10572] veth2: entered promiscuous mode [ 120.061041][T10576] program syz.2.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.095086][ C0] Illegal XDP return value 16128 on prog (id 95) dev veth0_to_bond, expect packet loss! [ 120.285797][T10597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.763'. [ 120.548088][T10617] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.556834][T10617] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 120.853613][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 120.871309][T10623] program syz.1.771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.880409][T10623] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 120.882889][T10623] netlink: 'syz.1.771': attribute type 2 has an invalid length. [ 120.887918][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.771'. [ 120.892938][T10623] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 120.898483][T10623] netlink: 104 bytes leftover after parsing attributes in process `syz.1.771'. [ 120.992785][ T9] usb 7-1: device descriptor read/64, error -71 [ 121.092943][T10625] binder: BINDER_SET_CONTEXT_MGR already set [ 121.099356][T10625] binder: 10624:10625 ioctl 4018620d 200000004a80 returned -16 [ 121.109759][T10627] x_tables: duplicate underflow at hook 3 [ 121.179475][T10628] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 121.260590][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 121.314217][T10635] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 121.321550][T10635] binder: 10634:10635 ioctl 6f50 4 returned -22 [ 121.371855][T10637] tmpfs: Unknown parameter ' [ 121.371855][T10637] ñxü6with n_size' [ 121.376568][T10637] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 121.396425][T10637] bond2: entered promiscuous mode [ 121.398433][T10637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.399132][ T9] usb 7-1: device descriptor read/64, error -71 [ 121.418324][T10637] bond2: (slave bridge1): making interface the new active one [ 121.422979][T10637] bridge1: entered promiscuous mode [ 121.426469][T10637] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 121.435328][T10637] bridge0: Device is already in use. [ 121.506058][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 121.516860][ T9] usb usb7-port1: attempt power cycle [ 121.658049][T10649] usb usb9: usbfs: process 10649 (syz.4.780) did not claim interface 47 before use [ 121.705508][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 121.713098][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 121.718007][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.725290][ T24] usb 8-1: Product: syz [ 121.727212][ T24] usb 8-1: Manufacturer: syz [ 121.729274][ T24] usb 8-1: SerialNumber: syz [ 121.744496][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 121.747786][ T24] r8152-cfgselector 8-1: config 0 descriptor?? [ 121.880391][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 121.899829][T10667] netlink: get zone limit has 4 unknown bytes [ 121.917905][ T9] usb 7-1: device descriptor read/8, error -71 [ 121.972430][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 121.975657][ T24] r8152-cfgselector 8-1: bad CDC descriptors [ 121.984944][ T24] r8152-cfgselector 8-1: USB disconnect, device number 15 [ 122.179573][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 122.195625][T10686] vlan0: entered promiscuous mode [ 122.202975][ T9] usb 7-1: device descriptor read/8, error -71 [ 122.312664][T10692] program syz.4.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.334341][ T9] usb usb7-port1: unable to enumerate USB device [ 122.376817][T10694] program syz.4.795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.409914][T10698] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 122.466585][T10694] 9pnet: Found fid 0 not clunked [ 122.473309][T10700] ªªªªªª: renamed from wg2 (while UP) [ 123.074001][T10739] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 123.105497][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.111850][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.115337][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.118489][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.123325][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.126548][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.129718][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.133245][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.136563][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.139621][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.142873][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.146175][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.149533][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.154143][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.158216][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.161825][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.165669][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.169138][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.172646][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.178116][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.181241][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.184375][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.187927][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.191492][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.195847][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.199126][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.202625][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.205970][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.209737][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.213824][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.218194][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.222475][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.226545][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.230757][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.234980][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.239177][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.243232][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.249354][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.253876][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.258173][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.262545][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.266805][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.271046][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.276494][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.280740][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.285073][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.289519][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.293863][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.299672][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.303830][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.307366][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.313493][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.322121][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.326545][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.330879][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.334759][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.338938][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.343456][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.348848][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.352680][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.356022][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.359149][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.362858][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.368831][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.372476][T10744] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 123.438485][T10749] __nla_validate_parse: 5 callbacks suppressed [ 123.438496][T10749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.812'. [ 123.464251][T10749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10749 comm=syz.3.812 [ 123.592044][T10757] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 123.613670][T10757] bond3: entered promiscuous mode [ 123.615816][T10757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.646067][T10757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.648640][T10757] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.652031][T10757] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 123.656747][T10757] bond3: (slave vxcan3): making interface the new active one [ 123.659083][T10757] vxcan3: entered promiscuous mode [ 123.661564][T10757] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 123.678584][T10753] ------------[ cut here ]------------ [ 123.681221][T10753] 1 [ 123.681232][T10753] WARNING: mm/page_alloc.c:5221 at __alloc_frozen_pages_noprof+0x1e8a/0x2410, CPU#1: syz.4.813/10753 [ 123.686567][T10753] Modules linked in: [ 123.688787][T10753] CPU: 1 UID: 0 PID: 10753 Comm: syz.4.813 Not tainted syzkaller #0 PREEMPT(full) [ 123.692329][T10753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.695774][T10753] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 123.698804][T10753] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 03 a5 0d 00 e9 05 fa ff ff c6 05 18 05 5c 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 1e 7c a3 11 48 8d b8 70 09 00 [ 123.705282][T10753] RSP: 0018:ffffc900060bf798 EFLAGS: 00010246 [ 123.707175][T10753] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.710341][T10753] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 123.712826][T10753] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 123.715421][T10753] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 123.718502][T10753] R13: 1ffff92000c17f3b R14: 1ffff92000c17f09 R15: 0000000000000015 [ 123.721932][T10753] FS: 00007f94f4b7d6c0(0000) GS:ffff8880d649d000(0000) knlGS:0000000000000000 [ 123.725611][T10753] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.728129][T10753] CR2: 0000200000001000 CR3: 0000000038897000 CR4: 0000000000352ef0 [ 123.732901][T10753] Call Trace: [ 123.734380][T10753] [ 123.735675][T10753] ? bpf_ksym_find+0x128/0x1c0 [ 123.737835][T10753] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 123.741011][T10753] ? is_bpf_text_address+0x94/0x1a0 [ 123.743180][T10753] ? kernel_text_address+0x8d/0x100 [ 123.745342][T10753] ? __kernel_text_address+0xd/0x30 [ 123.747601][T10753] ? unwind_get_return_address+0x59/0xa0 [ 123.749946][T10753] ? arch_stack_walk+0xa6/0xf0 [ 123.752679][T10753] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.755612][T10753] ? stack_trace_save+0x8e/0xc0 [ 123.757632][T10753] ? __pfx_stack_trace_save+0x10/0x10 [ 123.759937][T10753] ? stack_depot_save_flags+0x27/0x9d0 [ 123.762631][T10753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.765239][T10753] ? policy_nodemask+0xed/0x4f0 [ 123.767427][T10753] alloc_pages_mpol+0x1fb/0x550 [ 123.769563][T10753] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.771732][T10753] ? drm_syncobj_array_find+0x35/0x3a0 [ 123.774540][T10753] ___kmalloc_large_node+0x104/0x150 [ 123.776759][T10753] __kmalloc_large_node_noprof+0x1c/0x70 [ 123.779049][T10753] __kmalloc_noprof+0x5be/0x850 [ 123.781028][T10753] drm_syncobj_array_find+0x35/0x3a0 [ 123.783469][T10753] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 123.786470][T10753] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 123.789254][T10753] ? drm_dev_exit+0x41/0x60 [ 123.791174][T10753] ? drm_dev_exit+0x41/0x60 [ 123.793095][T10753] drm_ioctl_kernel+0x1f3/0x3e0 [ 123.795350][T10753] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 123.798101][T10753] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 123.800330][T10753] drm_ioctl+0x5e6/0xc60 [ 123.802118][T10753] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 123.805255][T10753] ? __pfx_drm_ioctl+0x10/0x10 [ 123.807252][T10753] ? selinux_file_ioctl+0x139/0x290 [ 123.809447][T10753] ? selinux_file_ioctl+0xb4/0x290 [ 123.811581][T10753] ? __pfx_drm_ioctl+0x10/0x10 [ 123.813578][T10753] __x64_sys_ioctl+0x18e/0x210 [ 123.815884][T10753] do_syscall_64+0x106/0xf80 [ 123.817840][T10753] ? clear_bhb_loop+0x40/0x90 [ 123.819785][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.822305][T10753] RIP: 0033:0x7f94f3d9bf79 [ 123.824150][T10753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.833234][T10753] RSP: 002b:00007f94f4b7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.836814][T10753] RAX: ffffffffffffffda RBX: 00007f94f4015fa0 RCX: 00007f94f3d9bf79 [ 123.841073][T10753] RDX: 00002000000001c0 RSI: 00000000c01864cd RDI: 0000000000000004 [ 123.844404][T10753] RBP: 00007f94f3e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 123.848066][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.851256][T10753] R13: 00007f94f4016038 R14: 00007f94f4015fa0 R15: 00007ffdcf321518 [ 123.854565][T10753] [ 123.855906][T10753] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.858900][T10753] CPU: 1 UID: 0 PID: 10753 Comm: syz.4.813 Not tainted syzkaller #0 PREEMPT(full) [ 123.862887][T10753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.866752][T10753] Call Trace: [ 123.868043][T10753] [ 123.869366][T10753] dump_stack_lvl+0x100/0x190 [ 123.871422][T10753] vpanic+0x20d/0x630 [ 123.873155][T10753] panic+0xd1/0xd1 [ 123.874559][T10753] ? __pfx_panic+0x10/0x10 [ 123.876229][T10753] check_panic_on_warn.cold+0x19/0x34 [ 123.878464][T10753] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 123.880958][T10753] __warn.cold+0x191/0x2f8 [ 123.882825][T10753] __report_bug+0x296/0x3d0 [ 123.884708][T10753] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 123.887235][T10753] ? __pfx___report_bug+0x10/0x10 [ 123.889331][T10753] ? __lock_acquire+0x4a5/0x2630 [ 123.891454][T10753] ? __lock_acquire+0x4a5/0x2630 [ 123.893564][T10753] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 123.896148][T10753] report_bug+0xb2/0x220 [ 123.897949][T10753] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 123.900517][T10753] handle_bug+0x166/0x2a0 [ 123.902400][T10753] exc_invalid_op+0x17/0x50 [ 123.904235][T10753] asm_exc_invalid_op+0x1a/0x20 [ 123.905835][T10753] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 123.907929][T10753] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 03 a5 0d 00 e9 05 fa ff ff c6 05 18 05 5c 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 1e 7c a3 11 48 8d b8 70 09 00 [ 123.914379][T10753] RSP: 0018:ffffc900060bf798 EFLAGS: 00010246 [ 123.916947][T10753] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.920195][T10753] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 123.923393][T10753] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 123.926669][T10753] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 123.929947][T10753] R13: 1ffff92000c17f3b R14: 1ffff92000c17f09 R15: 0000000000000015 [ 123.933135][T10753] ? is_bpf_text_address+0x8a/0x1a0 [ 123.935309][T10753] ? bpf_ksym_find+0x128/0x1c0 [ 123.937280][T10753] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 123.939788][T10753] ? is_bpf_text_address+0x94/0x1a0 [ 123.941935][T10753] ? kernel_text_address+0x8d/0x100 [ 123.944023][T10753] ? __kernel_text_address+0xd/0x30 [ 123.946156][T10753] ? unwind_get_return_address+0x59/0xa0 [ 123.948445][T10753] ? arch_stack_walk+0xa6/0xf0 [ 123.950500][T10753] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.953219][T10753] ? stack_trace_save+0x8e/0xc0 [ 123.955223][T10753] ? __pfx_stack_trace_save+0x10/0x10 [ 123.957503][T10753] ? stack_depot_save_flags+0x27/0x9d0 [ 123.959749][T10753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.962232][T10753] ? policy_nodemask+0xed/0x4f0 [ 123.964259][T10753] alloc_pages_mpol+0x1fb/0x550 [ 123.966305][T10753] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.968515][T10753] ? drm_syncobj_array_find+0x35/0x3a0 [ 123.970763][T10753] ___kmalloc_large_node+0x104/0x150 [ 123.972949][T10753] __kmalloc_large_node_noprof+0x1c/0x70 [ 123.975276][T10753] __kmalloc_noprof+0x5be/0x850 [ 123.977426][T10753] drm_syncobj_array_find+0x35/0x3a0 [ 123.979598][T10753] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 123.982211][T10753] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 123.985012][T10753] ? drm_dev_exit+0x41/0x60 [ 123.986973][T10753] ? drm_dev_exit+0x41/0x60 [ 123.988842][T10753] drm_ioctl_kernel+0x1f3/0x3e0 [ 123.990917][T10753] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 123.994055][T10753] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 123.996885][T10753] drm_ioctl+0x5e6/0xc60 [ 123.998794][T10753] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 124.001620][T10753] ? __pfx_drm_ioctl+0x10/0x10 [ 124.003631][T10753] ? selinux_file_ioctl+0x139/0x290 [ 124.005863][T10753] ? selinux_file_ioctl+0xb4/0x290 [ 124.007997][T10753] ? __pfx_drm_ioctl+0x10/0x10 [ 124.009904][T10753] __x64_sys_ioctl+0x18e/0x210 [ 124.011923][T10753] do_syscall_64+0x106/0xf80 [ 124.013919][T10753] ? clear_bhb_loop+0x40/0x90 [ 124.015958][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.018401][T10753] RIP: 0033:0x7f94f3d9bf79 [ 124.020240][T10753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.028046][T10753] RSP: 002b:00007f94f4b7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.031487][T10753] RAX: ffffffffffffffda RBX: 00007f94f4015fa0 RCX: 00007f94f3d9bf79 [ 124.034772][T10753] RDX: 00002000000001c0 RSI: 00000000c01864cd RDI: 0000000000000004 [ 124.037824][T10753] RBP: 00007f94f3e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 124.040325][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.042973][T10753] R13: 00007f94f4016038 R14: 00007f94f4015fa0 R15: 00007ffdcf321518 [ 124.045540][T10753] [ 124.047226][T10753] Kernel Offset: disabled [ 124.048561][T10753] Rebooting in 86400 seconds..