last executing test programs: 1m4.83365687s ago: executing program 1 (id=611): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) (async) r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @data}) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000240)={0x80008000, 0xc2cf, 0xffe00001, 0x1, 0x2, "00e4fdab790000fb00"}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="66ba6100ec66bad004b000eef047fe8f0040000026430fa38f00400000420f22c566b856000f00d8c4211971e31e66430f51bc0350b9000066b836008ee0b929080000b800000080ba000000000f30", 0x4f}], 0x1, 0x49, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mmap(&(0x7f0000646000/0x2000)=nil, 0x2000, 0xb635773f07ebbeee, 0x12, r1, 0x0) 1m4.754600872s ago: executing program 1 (id=612): close(0x3) (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 1m4.701956985s ago: executing program 1 (id=614): r0 = socket$inet6(0xa, 0x3, 0x3a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0xd, 0x60000, 0x1}) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0xd, 0x60000, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) (async) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x20000) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x20000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x6a4, 0x0, 0x1}, {0x613, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES16=r2], 0x0, 0x38}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18300000011000000000400003000000950000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) 1m4.173690045s ago: executing program 1 (id=617): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) poll(&(0x7f0000000000)=[{r0, 0x1001}, {r0, 0x1000}, {r1, 0x87}], 0x3, 0x8) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x5) 1m4.082508552s ago: executing program 1 (id=619): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000000040)) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="1400000013000149993dde440113e90006"], 0x14}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76696e65459beb1fb664f6ce6c0c7274696f7874656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000000)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '9p\x00'}], 0xa, "a3e5e03a7070de8de6546a722ca49e214119cd421a432e5b5a82e4c1e855ae35e7be342704b14020dfe04545"}, 0x3c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4b009b00d300c64f10a1e70405732cfe1afedb12f77309d94ec0e3765856b4bd55ed6ae6868be06fa24a04ca0034ca640b02bde675b856e678de3866d66233aea8c8d3b2833fedd55c59db25d56fc1f8811e96b5d1bd2d1a093fe21fc64766d59fc555e9392ac825b83e82efefec6b00bae494659e1eacf013674e7805034b5515cbc75615396d297df57148e3096b640a89eabfa768a0f34ecee1891afa48c046d0a1f50e48edc565ebcfa541e36f06e91d9806e4fd40c8b88e6c368b4dd623e64dd18bd9626bae7e7b827013096688596684852324f664ee684b62f45208c5594735a362867339322f0753fa", @ANYRES16=r4, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730000000000"], 0x3c}, 0x1, 0x2}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x24, 0x10, 0xfffffb1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff4dad, 0x2000}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f00000001c0)={0x39, &(0x7f0000000040)=[{0x14, '\x00', @data=0x48af, 0x6}]}) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 1m3.933937098s ago: executing program 1 (id=620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000004440)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248e600dbb8", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x32}, {&(0x7f0000000180)="a43b2eaab4000000000080", 0xb}, {&(0x7f0000000100)="c8c834", 0x3}], 0x4) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) fsopen(&(0x7f0000000340)='btrfs\x00', 0x1) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x53}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x10001}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x29020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x40040) 48.712242995s ago: executing program 32 (id=620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000004440)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248e600dbb8", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x32}, {&(0x7f0000000180)="a43b2eaab4000000000080", 0xb}, {&(0x7f0000000100)="c8c834", 0x3}], 0x4) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) fsopen(&(0x7f0000000340)='btrfs\x00', 0x1) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x53}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x10001}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x29020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x40040) 37.423176119s ago: executing program 4 (id=1000): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000080)={r4}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x1, 0x4, 0x8, 0x59}, {0x4e, 0x6, 0xf7, 0x1}, {0x6e8, 0x6, 0x4, 0x8}, {0xfff9, 0xfc, 0x7, 0x7ff}, {0x0, 0x6, 0x6}, {0x2cf, 0x4, 0xc7, 0x3}, {0x5, 0x4, 0x8a, 0xbca}, {0x7, 0xb, 0x9, 0x9}]}) 37.303518887s ago: executing program 4 (id=1001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x22044400}, 0x4008014) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000000)="5a000300010003", 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a310000000014000480100001800800010066696200040002800900020073797a3200000069140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x20, 0x4, 0x8, 0x2, 0x3e, 0x3d, 0x8a, 0x40, 0x13, 0x1, 0xfb1, 0x38, 0x1, 0x82, 0xfff, 0x80}, [{0x7, 0x7, 0x7, 0x35, 0x3, 0x8, 0x6, 0x2}], "71cd66313f26902ef1fd1597de317528a7b06eaef9f890d5655ff97f17f166eaa19efacae82c4c1da36d6a4f26c5d3dfdb9a0144a33e77cff433"}, 0xb2) 37.212906793s ago: executing program 4 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x14, 0x5a, 0x1, 0xffffffff}, 0x14}}, 0x24004000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) writev(r1, &(0x7f00000013c0)=[{&(0x7f0000000100)="6e14ec2bcc5ecd3b0dee9f5f6be0a64d6ce200f71ed53e37e9b0bab6441b643f852ce6e115cb9552517775e042d5a2b8520bc472dc21a30c10e80ca08cfe348175490dd5291d505e191be8fb67d950b36a3f559114510a9a5ae0b05d519ce4845ab5ad16e558a841f4d784c0d610f450073e7615f73bbb4b37a6bc3dade3af619f2284260d6c3c622b0a9743a4830ddcb265fdf7982c9a4962cd0c19bd0f7dc65d9b8543cf0e79f786f36df7e99c8edcf9ecbf379161db6934eb3f3a7bc095684ee4edcd580df8b3d663958bf6cbcdb7ce9ade0f", 0xd4}, {&(0x7f0000000200)="0ca963bbc529a3041c6374857009880d771c1632c53d55a03d1d034d2aeee5dd60473b8855f640c44d7530d976", 0x2d}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="32160f579766bb91928d57c38edd5290b6b35c13e84140d020c2155053b11e095dec9a5b992f2dbf9c0554703e94e72a74f4753074061918d6536475bb4f0910d0e672cfb186ee0302afc5b569e61709bdc0ca109861dbed56edd99c4085b251856951455969c308d8c06835dd8f652e2c3ce4235c23a053044936feb1273b995a3ce8e21c0f82526ad4e6e714ddbc2a0675857eb0ed2e33be63259804048941368751c956a2af2e03f8a12ce320d0186291", 0xb2}, {&(0x7f0000001300)="18e0a8ed67585c3bb1ac3968b3546542121d889947e3fd17cd1e102206e49f6b24ffba151758d41791218b1a5a2481eeccbb1f5e841c161ccc9d65e7678303b43f45eefbe8bbc37fd0b9200ac2d5ac2709a31cdcc517f75b05de3698051770c993da947117717c9171c793e57baa54c602b22802ae195f5ac3e6180a8dcbc014f05b947fca5a07144ff2", 0x8a}], 0x5) syz_open_dev$tty20(0xc, 0x4, 0x0) 37.209352838s ago: executing program 4 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 37.103657938s ago: executing program 4 (id=1005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8840, 0x114, 0x14}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) (async) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8840, 0x114, 0x14}, 0x18) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) (async) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) 36.962825754s ago: executing program 4 (id=1007): sync() (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250100000006000a004e24000014000900fa880000000000000060000000000100050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) 31.722789931s ago: executing program 3 (id=1065): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000002c0)={0x0}) 31.652932254s ago: executing program 3 (id=1066): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000001e40)=[{&(0x7f0000000500)="be", 0x1}, {&(0x7f0000000200)="5bf0897c0ba96d6742c9a42081ff3c53c76aac2299557291c2dc72db535fcaff3a1afc790ff042633aa174238677baa372ac98dd60277ef1a126cba3b0cda1cbd771012ac3979778868b8e1acb33cc2ad6b423166c6f1c55a6c76038d368223146a60757ade4c5d362ac9dcc1c638a194b43ed8ace99f41d981f3f4658f39bc57bab1a002750987f2dcd7148c9e9c10f9b064e085e9c750d392d0436263e0af96f4524f860b98600363442f143bb9765608b3df1425959bedb2da3383f58a770fcf51a56f3f98c99a9256f9a3069ca370b24aad09b86c93d04e9b4b7ac91215a", 0xe0}, {&(0x7f0000000300)="314c31318ac1e1249f61f145a30c0ff7fd08de0fa7c0378521c0b72a03f5216c62fe4a8b67748c994dcc9c03edb1f39ed3e2853a0c866094579e2443b41912a28c5935310fa06b36b0c83ea96ee9ee3a4e2974184a977a252cc021ed769cd5cc2396df64", 0x64}, {&(0x7f0000000c40)="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", 0xebb}], 0x4, 0x5, 0xa, 0x14) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='/dev/loop#\x00', 0x0, r1) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xa0) 31.56377218s ago: executing program 3 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/0:0:0:0\x00', 0x2, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) 31.562581268s ago: executing program 3 (id=1068): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000"], 0x48) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c14"], 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x7, &(0x7f00000000c0)=[{0x1, 0x5, 0xff, 0x7f}, {0x1, 0x2, 0x5, 0x1ff}, {0x2, 0xc0, 0x5, 0xfffffffe}, {0xfd51, 0x7, 0x3, 0x2}, {0x0, 0x4, 0x0, 0x2}, {0x3, 0x10, 0xb, 0x2}, {0x8, 0x8, 0x5, 0x6}]}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_control(r0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000140)='./file1\x00') (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000"], 0x48) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c14"], 0x24}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x7, &(0x7f00000000c0)=[{0x1, 0x5, 0xff, 0x7f}, {0x1, 0x2, 0x5, 0x1ff}, {0x2, 0xc0, 0x5, 0xfffffffe}, {0xfd51, 0x7, 0x3, 0x2}, {0x0, 0x4, 0x0, 0x2}, {0x3, 0x10, 0xb, 0x2}, {0x8, 0x8, 0x5, 0x6}]}) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 31.232047235s ago: executing program 3 (id=1071): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x42, 0x1}, 0x6) write(r0, &(0x7f0000000340)="08000000010000", 0x7) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) madvise(&(0x7f0000338000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) munlockall() socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x7, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000380)={0x1, 0x5, {0x3, @struct={0x8, 0x3}, 0x0, 0x1, 0x9, 0x0, 0x5, 0x1, 0x20, @usage=0x40, 0x3, 0x7, [0xfffffffffffffffd, 0xe5d, 0x10001, 0x2, 0x1, 0x4]}, {0x5, @usage=0x8, 0x0, 0x1, 0xfffffffffffffff8, 0x1, 0x7, 0x7, 0x0, @usage=0x3, 0x4, 0x9, [0x8, 0x0, 0x9, 0xfff, 0x7be, 0x101]}, {0x7, @usage=0x1, 0x0, 0x5, 0x2, 0xffffffffffff0000, 0x9, 0x6, 0x68, @usage=0x6, 0x1, 0xff, [0x8, 0x4, 0x1, 0x3, 0x6, 0xf425]}, {0x1292, 0x0, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000007c0)={{r3}, r5, 0x4, @inherit={0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000e7ff0900000000000000ff0100000000000001000000000000000000000000000000020000000000000046000000000000000800000000000000030000000000000006000000000000001c02000000000000020000000000000001000000000000000200000000000000080000000000000000000000000000000700000000000000ff030000000000000100000000000000"]}, @devid=r6}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0xb, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) 30.733543884s ago: executing program 3 (id=1073): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x420a81, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x420a81, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async) 30.674809828s ago: executing program 33 (id=1073): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x420a81, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x420a81, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async) 21.343450508s ago: executing program 34 (id=1007): sync() (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250100000006000a004e24000014000900fa880000000000000060000000000100050002000a"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) 8.637259836s ago: executing program 5 (id=1317): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)={0x10}, 0x10) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40400, 0x2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xbff9}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0xffff}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x60044}, 0x4048084) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x103f0014}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x180, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1a042e90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20008151}, 0x40800) (async) r4 = dup3(r0, r0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000004c0)=0x1) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000500)=0x1) (async) sendmsg$nl_netfilter(r1, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1f0, 0x13, 0x2, 0x101, 0x70bd27, 0x25dfdbfd, {0x2}, [@nested={0x1c, 0xf8, 0x0, 0x1, [@typed={0xc, 0x3e, 0x0, 0x0, @u64=0xfff}, @typed={0x4, 0xae}, @nested={0x4, 0x18}, @nested={0x4, 0x3d}]}, @typed={0x8, 0x60, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x91, 0x116, 0x0, 0x1, [@nested={0x4, 0xc6}, @generic="e9df43633f8d52de23062c8a3d", @nested={0x4, 0x10}, @nested={0x4, 0xf1}, @generic="3c457f2c362bcfe7eda59f56b9d3a3ea495417a3d0d954d6dca3a6d8dbddb6cd89c538bcd092795f36b08578a8f33cde84c0122ed4bdecd219cc2f023cc1853b731ec96c0e04b0ecbcfa4d6842ca817bdc09992410cd665f7df83a1738370d2611ceb0baac26e93edb236efe", @typed={0x8, 0x34, 0x0, 0x0, @u32=0x4}]}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0xce}, @generic="850371459343ef1f71a524df7747af12d4b335efc5f62d84df18376a0c246118fd88fe99cc72270782db23bfc496ad004be2814d8d51e81169e205b35979fce50aa1bcf0b557e86daa067d1c53b53b1148e14394935e66db4c5c453d6f345014fe0121892851bcf3401eb949f763e65b68719ac5550cf3cd46188730e0d2b8e7a8e93867a1040b3b5cc1a46fd7b5027b797b227608701953f071d5e9df7eec18cb65a1aec6417501a4fddf9577b93713f7343578571c1007086dea421b62d2e728fb36f11d7ad4557c8745d488645b0cbcd159ef56150093cf294c4a6569055d3351f23f95a64b4b7922bfde7efed7b3dac603", @typed={0x25, 0x68, 0x0, 0x0, @binary="d9e33605c8005b063b94949c86cdd5251c5f0d1d95ac18bb0368359e4c8ac78213"}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000800)=0x0) mq_notify(r0, &(0x7f0000000840)={0x0, 0x3b, 0x2, @tid=r6}) (async) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000880)=0x1) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd0, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x506c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd813}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @remote, 0xb9}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000a80)={0x9, 0x3, 0x5, 0x4, 0x6}, 0x14) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000b00)={&(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) fcntl$getflags(r0, 0x401) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, 0x1411, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000844) (async) r7 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r2, &(0x7f0000000c40)={'#! ', '', [{0x20, '%\'.$'}, {0x20, 'syz1\x00'}, {0x20, '\xf3.[:.'}, {0x20, 'syz1\x00'}, {0x20, 'syz1\x00'}], 0xa, "b28d54c840c5653d4fb01df83aa1eb6d6467f918c378408e7e0d2a22bfdffde763b794a2003fe413c0cd12d92aef5446461f7f867910ba7361a7d65845edeb3e15d9204f8301a06c341799522364c03d201a6d1f893368280d6e82a43834a50bcbfbb1ff33c657f824f417c872966df32be7731004939458dd28b3ada375571e5b29c1459b75a5c18e9ec20c24cc8bc6e45c9bb48841f3a4a5b51774d25580b6cf2d4d4c4f0812b8aca322f5cfb28b"}, 0xd0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000f80)={0x64, 0x0, &(0x7f0000000e80)=[@register_looper, @acquire_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000dc0)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f0000000d40)=""/41, 0x29, 0x1, 0x37}, @ptr={0x70742a85, 0x0, &(0x7f0000000d80), 0x0, 0x2, 0x3c}}, &(0x7f0000000e40)={0x0, 0x18, 0x40}}, 0x400}], 0x45, 0x0, &(0x7f0000000f00)="14a6dcb4b81eac2a2ffabf5690dccf0f501bf20d5ffadbf090464d1668abae62f3371d364488015e5b01ca3918e7dcaa56c5f0d6f51a7e685501f6af2fb0491b3575906d21"}) (async, rerun: 64) syz_clone(0x9228c00, &(0x7f0000000fc0)="ed8269", 0x3, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="dded37540d43e85c2f1ea29d0600d7547b446a2b15803a866bbc5768b77162df29a0e6a87c3f37c048c48ebedc2496c15b78013fd6b8f02bbad2c53534e83aa78e4906b5617643414179e45a81708ee15b07573a0e4a83") (async, rerun: 64) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x8010, r4, 0x80000000) (async) clock_gettime(0x0, &(0x7f0000003940)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000003740)=[{{&(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001180)=""/59, 0x3b}, {&(0x7f00000011c0)=""/47, 0x2f}, {&(0x7f0000001200)=""/184, 0xb8}], 0x3, &(0x7f0000001300)=""/176, 0xb0}}, {{&(0x7f00000013c0)=@caif=@rfm, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}, {&(0x7f0000001480)=""/73, 0x49}], 0x2, &(0x7f0000001540)=""/100, 0x64}, 0x5}, {{&(0x7f00000015c0)=@nfc, 0x80, &(0x7f0000001640), 0x0, &(0x7f0000001680)=""/84, 0x54}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001700)=""/9, 0x9}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, &(0x7f0000002780)=""/232, 0xe8}, 0x4}, {{&(0x7f0000002880)=@hci, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002900)=""/137, 0x89}, {&(0x7f00000029c0)=""/70, 0x46}], 0x2, &(0x7f0000002a80)=""/52, 0x34}, 0x8000}, {{&(0x7f0000002ac0)=@isdn, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002b40)=""/193, 0xc1}, {&(0x7f0000002c40)=""/91, 0x5b}, {&(0x7f0000002cc0)=""/243, 0xf3}, {&(0x7f0000002dc0)=""/9, 0x9}, {&(0x7f0000002e00)=""/89, 0x59}, {&(0x7f0000002e80)=""/197, 0xc5}, {&(0x7f0000002f80)=""/208, 0xd0}, {&(0x7f0000003080)=""/9, 0x9}], 0x8, &(0x7f0000003140)=""/168, 0xa8}, 0x1}, {{&(0x7f0000003200)=@tipc, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003280)=""/123, 0x7b}, {&(0x7f0000003300)=""/175, 0xaf}], 0x2, &(0x7f0000003400)=""/88, 0x58}, 0x2}, {{&(0x7f0000003480)=@isdn, 0x80, &(0x7f0000003700)=[{&(0x7f0000003500)=""/151, 0x97}, {&(0x7f00000035c0)=""/95, 0x5f}, {&(0x7f0000003640)=""/159, 0x9f}], 0x3}, 0x3e1a}], 0x8, 0x40000340, &(0x7f0000003980)={r8, r9+10000000}) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000003d00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003a00)={0x2a0, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58e3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2796}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9c6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000003d40)) 8.571655143s ago: executing program 5 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0x40086806, 0x61) read$alg(r1, &(0x7f0000000000)=""/39, 0x27) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x10, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r0], 0x0, 0x10, 0x3}, 0x94) 7.693371778s ago: executing program 5 (id=1326): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x107) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) creat(&(0x7f00000000c0)='./file0\x00', 0x54) write$P9_RMKDIR(r2, &(0x7f0000000340)={0x14, 0x49, 0x2, {0x8, 0x1, 0x7}}, 0x14) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) openat(r1, &(0x7f0000000440)='./file1\x00', 0x101042, 0x160) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xa47, 0x0, 0x80000001}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) write$rfkill(r4, &(0x7f0000000240)={0x4, 0x2, 0x2, 0x1}, 0x8) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x4, 0xa}, {0x1, 0x27}, @const={0xfffe, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0) 6.733133507s ago: executing program 5 (id=1332): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='vxcan1\x00', 0xa) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000200)={@rand_addr=0x64010101, @loopback}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000a538ae46463208004500001c0000000000029078117c9078e000000142", @ANYBLOB="605defd750e109f9", @ANYRES16=r3, @ANYRESHEX=r1], 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000300)=0x401) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000014000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000010000000000000002000"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000500)={'dvmrp1\x00', 0x40, 0x3}) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$XFS_IOC_GETVERSION(r8, 0x80087601, &(0x7f00000000c0)) bind$packet(r9, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x1, 0x9, 0x6, @broadcast}, 0x14) 6.422956971s ago: executing program 5 (id=1334): pwrite64(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000, 0x8000000000000001) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000001000)=@arm64={0x0, 0x2, 0xc3, '\x00', 0x7}) (async) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001080)={0x0, &(0x7f0000001040)=[@set_irq_handler={0xc8, 0x20, {0xb8}}, @enable_nested={0x12c, 0x18}], 0x38}) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xc8, 0x464, 0x1, 0x70bd2b, 0x25dfdbfe, "a2f0f2816a9f0486c8c8b7aa9305e0465b03066324de75eb6cdaedfb9e786f2c0deb569e3e87913016c3c4ea4ef9104e3bb2b125f41123d2ced91422deaf18b16d4863e1f983d5420e2866a575a89382f4686675981650bcb726c3421a25fbdf8ed1705f1e900f2bcb37c8f712c3831d420ac1da72673321356da1b583316c4556a478f4b01a6a13876156ba444c07db090c2200a947fc127c8912a2c7efb007a031e643cd10032f6f4032e5a419bfd07bf216d9f0", ["", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x8808}, 0x20048004) (async) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000001280)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x4000, 0x2}) mount(&(0x7f00000012c0)=@nullb, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='hpfs\x00', 0x0, 0x0) (async) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000001380)={0xfffffffffffffffe, 0x800}) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) io_uring_setup(0x5d08, &(0x7f00000013c0)={0x0, 0xaa16, 0x40, 0x3, 0x20d, 0x0, r1}) (async) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001a80)={0x0, &(0x7f0000001440)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x68d, 0x100000000, 0x4, 0x41e9}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_load_syzos={0x136, 0x159, {0x1, 0x4, [@nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xb8e, 0xfffffffffffffe00}}, @code={0xa, 0x60, {"0f01c96464409fc4e2791dc366baf80cb89ce78388ef66bafc0c66b8c51366ef65660f38808b0f00000066b8ed000f00d8f3400f09c403815ecd13b9800000c00f3235000100000f306767640f5536"}}, @set_irq_handler={0xc8, 0x20, {0x2c, 0x2}}, @cpuid={0x64, 0x18, {0x9, 0xfff}}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x49, {"0fc71af347e1350f01c9b9260a00000f320f01d1450fc7b9de80000066bad104b800300000efc423356c79620066ba4300b00bee410f01c8"}}, @cpuid={0x64, 0x18, {0x80, 0x5}}]}}, @cpuid={0x64, 0x18, {0xa, 0x6}}, @set_irq_handler={0xc8, 0x20, {0xef, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x81, 0x6, 0x8000, 0x2}}, @nested_load_syzos={0x136, 0x19f, {0x2, 0xb, [@rdmsr={0x66, 0x18, {0x632}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x6, 0x100}}, @wrmsr={0x65, 0x20, {0xac3, 0x6}}, @nested_amd_invlpga={0x17d, 0x20, {0xe6ea0000, 0x6428}}, @nested_amd_invlpga={0x17d, 0x20, {0x5000, 0x6046}}, @nested_load_code={0x12e, 0x65, {0x0, "0f0765430f30b9110800000f320f22d63667460f07650f01c848b809000000000000000f23d80f21f835c00000a00f23f8660fc7b6f35b000066baf80cb8d780b98aef66bafc0cb002ee410f09"}}, @uexit={0x0, 0x18, 0x7}, @code={0xa, 0x5a, {"0f787e5a67642626460f01c5c7442400e1000000c7442402ed080000ff2c2464470f66781a66baf80cb81d87c683ef66bafc0cec8fa978c1f0f26ef20f1ec8f30f093666470f38820a"}}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x10000, 0x54}}, @out_dx={0x6a, 0x28, {0x1808, 0x0, 0x7}}, @out_dx={0x6a, 0x28, {0x8b72, 0x2, 0x7fff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x2b, 0x1d, 0x1, 0x5}}, @code={0xa, 0x4f, {"0fc75aa266b818000f00d82e0f01f8410f01dff466b818010f00d8400f0139b805000000b95eb300000f01d9b93a0900000f320f20e035080000000f22e0"}}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_load_code={0x12e, 0x78, {0x3, "66b813010f00d0c74424000a000000c744240246000000c7442406000000000f011c2464260faf670066460f38827f0f66b88a008ed04d0fc71f4f0fc71ac402bd0365c066baf80cb8301ec089ef66bafc0cb80a000000ef410fe2b27c000000"}}, @wrmsr={0x65, 0x20, {0x30b, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x20, 0xb9c, 0x908, 0x8}}, @uexit={0x0, 0x18, 0x8d3}, @cpuid={0x64, 0x18, {0x2, 0x8}}, @nested_vmlaunch={0x12f, 0x18, 0x1}], 0x60f}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000001ac0)={0xd, 0x7, [{0x7fffffff, 0x0, 0x9}, {0x5fdf02b, 0x0, 0x7fffffffffffffff}, {0xb2, 0x0, 0xd}, {0x1, 0x0, 0x638}, {0x0, 0x0, 0x80000001}, {0x100, 0x0, 0x8}, {0x80000000, 0x0, 0x100}, {0x80, 0x0, 0x80000000}, {0x9, 0x0, 0x4}, {0xa139, 0x0, 0x8}, {0x2, 0x0, 0x200}, {0x4, 0x0, 0x8}, {0x8, 0x0, 0x3}, {0xffff, 0x0, 0x2}, {0x100, 0x0, 0x2}, {0x2, 0x0, 0x4}]}) r3 = timerfd_create(0x0, 0x81800) timerfd_settime(r3, 0x1, &(0x7f0000001c80)={{0x77359400}}, &(0x7f0000001cc0)) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001d40)={'\x00', 0xefda, 0x1, 0x0, 0x2, 0x40, r4}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000001dc0)={0x7, 'rose0\x00', {0x4b1}, 0x1}) (async) r5 = syz_clone(0x1800, &(0x7f0000001e00)="3020f207c3c6f664c7acb66a299843f35159ff77dca5cc073477fea9b79c8a5d914259b66ee2ab1f27011b9581c0684e5642bea6b40e2d22b63be5b959d3370bd867a36c7fa92cbf8272556c06676b772b2164073a95e0d19cb0668f6272f84af47d43242e02abf6134a8bda71b3babeb3a4ca68af1a4765a38931ad3833a31722e24d96d63a02618a11dc0bbdc1bb9e7d4652f6422d", 0x96, &(0x7f0000001ec0), &(0x7f0000001f00), &(0x7f0000001f40)="f2820d64c7703848a20cf8469a64832b16b1f6446d7b384779406ba06151ab0a5de8d39fa7dd58dfee07318c5204e6fcbf21357ccd031d6c4b6c2f91fe7be069cc4049db296118e093773aded187098b55167a7b0e64323ab42ca87ef125a445e115c422ecfa4f555bc5df6284f4fdc6c330a6d65e0a3648dbad50240190914bd2c8d8041c9937099a4f49c8bacb7f6a67cca70e9c2a22270aefdef400eda21467f2084095b0e29465633ca7351f8c88b3fdffaa6fc20da09155cbbfbd66fbb8cda3c2f30ba9bfc97ca77de8bfcb0373a55f191eaca43d88cb6045") ptrace(0x8, r5) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000002100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002040)=""/35, 0x23, 0x0, &(0x7f0000002080)=""/66, 0x42}, &(0x7f0000002140)=0x40) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, 0x9, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8082) (async) write$P9_RGETLOCK(r1, &(0x7f0000002280)={0x21, 0x37, 0x1, {0x0, 0x7, 0x4, r5, 0x3, '.(('}}, 0x21) r6 = timerfd_create(0x1, 0x80000) (async) clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) timerfd_settime(r6, 0x3, &(0x7f0000002300)={{r7, r8+10000000}, {0x0, 0x3938700}}, &(0x7f0000002340)) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000002380)={0x6, 0x6}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000023c0)={0xfffffff8, {{0x2, 0x4e24, @private=0xa010102}}, 0x1, 0x3, [{{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @multicast2}}]}, 0x210) (async) writev(r0, &(0x7f0000002680)=[{&(0x7f0000002600)="44aad14ba7b7cb08365969208780af6d580c936c3dcf49e2bc98666be8b87f3c1158e8ce4d174df5d748b6183c63ae", 0x2f}, {&(0x7f0000002640)="67575a4d8787bf892444d3f05355f91416680b1c3a3ab0ec43c1b4666a28cc4e1b4b", 0x22}], 0x2) r9 = openat$mice(0xffffffffffffff9c, &(0x7f00000026c0), 0x200500) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000002700)={[0x100000000, 0x0, 0x2, 0x7, 0xfffffffffffffff9, 0xffffffff, 0x0, 0x6, 0x7, 0x6, 0x281c, 0x8d9b, 0x0, 0xffffffffffffdd3c, 0x5, 0x8000000000000001], 0xeeee0000, 0x800}) 5.892404049s ago: executing program 5 (id=1338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 5.684730591s ago: executing program 35 (id=1338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4.193568947s ago: executing program 0 (id=1350): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000deffffff6a0a00ff00000000850000002b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c5c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f772fd0e17c9b9101644f8c06b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583f76e412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19002cc93c1c13ca67fdc6c238342033070000004a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000140eb2e9c15b6c8f6198282df27badac8500bc7d202e099009ca515007e5f009735200040000001896d46cdac0abb841d9f96e2e6a19b7bf661c01800000d77d6165f253683cd8dc926518c699a2b14fb2bb40425dee631368340711a8c47318d5d13085938c3ec5c39b540b34157b0330aa16bd0998607f0ecea84919712d36"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003100)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="ba89991df178ae715d0604ef056ec15801e62220c34ee4ff9f98bef938e6b4440a6d2bb2b66de84364f1672bb3d9d149f2a9bcfd0f4a7821652b946abd214b25706fe612cf7ce3365ec409403b841e141ddda4d8e043d43dcb16c675046ba37381a31f41b927c916e5fe2f6f49d99247d8dc72fb0e5e94222c7864c655d6012bfde5370009691f88d47870e7065b8971654ede8a4ffc5def9a639630ce8c4bd67ccb5bfada8714c2250362484e34780cbc99f7d6d51f5bf4181a0b788f2b15e1456d8aea264369a97575e7e42e086f6a91bf3d330500710000000000d7375a1af73e3114f9ffb5d3b744aa8a0d4f5d4cd95d02c3ad7061936342fece8015325c2efbced460634ee78410d0d4dd015c87363f2806c8990aef33616e40596d6e44e52aaa2a6792a84d19ebc7cc1645ecf252f163200276844bf85de53cc382586ea0fed2a15e8879eee56ef323f15cb55b27a0c4ba4165790d37aeef16252ef5ebff4a3eada115dd1469c508003600ac1e010170e40bd9d88e155c99257240ac63c0a84c4bc4eb0abb4c9a093ef294a5810c4d9f6ae9c03fe59a76a53aca7394e451416b3012fd7e4c22f75b673a2c7984a3029c94d720ce62f71fd6b552400c41385f59f1cf73cc3114b93340db40603e18e5f889f60c5bc03afd2cbfe184de941d358fc03dd11bcf80dac316ccc159b497e7442059bb19d456052f637c64594cfd98114752d7526a7f2dec7f048539dbd9e88b9f4cb2b12a0db34f66e60fd1ce7e0f25bfdf71fded4e5f8cf6d4659de5d160d67784098ecf746286092ea0ab0b6c557591c15d33787e8be59b9fcd13612b8fc92802bd7af45aceb3640a2e9584be4477935559e88194789a8db39f00d773817b3374e9213fa2518539671976fa054fc8fb23b386cc7f3741bd90991f6c568bff6f29d06978ae17d2d879bed76366dfed2be2591c1ac57c839b5dfa37409a9f5bd61193fbd3ce63498b0da7d07a015a2cf6d08df5040db65ca92cc90cd8c9d9d6ce56a37a07098b0594db3d74baeca2e1b4a9af015099e9e72eb59c73b94da3a7c3f6730ef92c80e0c1d411ed29b38da20367fae815f0d279d6c9076662f4be472be8754d56d3d971b2c106a33681e2b5fa31abbed93a3179ef63d7a585d8afb6de68a5bd6641b6d9e0a8e144495269e6f82604528a31586233f2f1dc639b2820d34e13bf2ee8ab093ca273d349618fe07aa6f1f23b9384f1b8bfe27e25df140792d6ba75cca6ad50741298f4bfa2299d73ebc0bf3010cd65e836081767c43c00ce65be21a213800309f7c3e2fde647df3744068c07f442fb06a7794f49be52419cdc17b485da32ba0c2d271a764e63bf6ad416579db5f1adb9faa670ac490acd1d324ff9aa331d3cf193fc4da05d34c30050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be288b36a4afe7652684b64543d870674bde4d8b51c6fa5ae4e0235064dd6cf8b1f57a0851c96913ccbae95f84de214b93b3d4f6c648e7d352646078368b27efa8f18d841d70f8da964ce276cb17955406d0f5923a21ea32fcb4777aed0f3e9320590d946048ce8c45c0e0b2a39e3de38370e64157c2726cf79fe273d29fa0e599589c2f69a7affe74b2db7d6876442254661b46ecadc58b207f546e27ca42386eaea88a1780a53ec86b864cec4ff939cf22632b63e61b29472e63ea7d6619a7d65df179585a9873fa7e381c790e8228b7e528e61ba1cef80000"], 0x6b8}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.379774373s ago: executing program 0 (id=1351): r0 = syz_open_dev$ndb(&(0x7f00000023c0), 0x0, 0x400) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x8, 0x8000, 0x6, 0x6}}]}}, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x8) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x880) 2.251487763s ago: executing program 0 (id=1356): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000390423bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="81b8000000fe0000000012801b9f32361d000100697036677265800004000280"], 0x34}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010000", 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x8080000, 0x5, 0x0, 0x1ff, 0x0, [{0x5, 0xc, 0x2, '\x00', 0x80}, {0x7, 0x4, 0x8, '\x00', 0x8}, {0x7, 0xb, 0x5, '\x00', 0xf7}, {0x81, 0x81, 0x43, '\x00', 0x3}, {0x8, 0xac, 0x1, '\x00', 0x6}, {0x8, 0x2, 0xa, '\x00', 0xb}, {0x6, 0x4, 0x9, '\x00', 0x62}, {0x2, 0x3, 0x7}, {0xfa, 0x9, 0x1, '\x00', 0x93}, {0x1, 0x5, 0xf2, '\x00', 0x6}, {0x0, 0x40, 0x8, '\x00', 0x9}, {0x2, 0x4, 0x9, '\x00', 0x1}, {0x2, 0x0, 0xfa}, {0xee, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0x6, '\x00', 0x8}, {0x3, 0x5, 0x37, '\x00', 0x7}, {0x38, 0x2, 0x7, '\x00', 0x81}, {0x1, 0xd, 0x9, '\x00', 0xb9}, {0x8, 0x81, 0x2}, {0x3, 0xce, 0x0, '\x00', 0x9}, {0x87, 0x3, 0x3e, '\x00', 0x25}, {0x2, 0x5, 0x9, '\x00', 0x7f}, {0x6, 0x40, 0x0, '\x00', 0xf9}, {0x9, 0x11, 0x2, '\x00', 0x7}]}}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r7, 0xc06855c8, &(0x7f0000000d40)={0xd, 0x4, {0x51, 0x8, 0x1, {0xe0ee, 0x1}, {0x9, 0x100}, @rumble={0x22, 0x3}}, {0x54, 0xab, 0xd, {0xdec8, 0x2}, {0xb, 0xfff9}, @const={0x6c04, {0x7, 0x0, 0x7fff, 0x7}}}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.033549065s ago: executing program 0 (id=1358): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00@'}}}}}}}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x10003, &(0x7f00000000c0)='norecovery') 1.923260243s ago: executing program 0 (id=1359): r0 = fspick(0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x8000, 0x5) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000001180)='.*\xcc-\x00', &(0x7f00000011c0)='./file0\x00', r3) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000001180)='.*\xcc-\x00', &(0x7f00000011c0)='./file0\x00', r3) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="6623032de619ed15a9ddf4cdfe00000000000000000000000000000000007b00393f3670ef805987e819503c2f8181f3c49f6175980f0637bead17d571203bd2a1d2fc5afa77500a2103c58da7dfc03013291532208ac7ec6520c0614c445c7a041477ace259c7f346d255d109d7b77fc82621119bb6a2674572bc03aecc04fe802ef2e8c96d6eba3d24985a6ad23e2640314ada6d25c8a35eb229b1344049a3529ff2f286136f6ebbfc997d3cfeff2097b1861ed0fbd74b467851a136777372460fb5ad78985cc6edba18f78a09d242329e3f99de5394e43a7730fc6304974bf1b6447223c6e7db14ae72486e63f299eb60f8d9a9f5", @ANYRES16=r5, @ANYBLOB="0502fcfffffffddbdf251200000008000700010000001800018014000200626f6e645f736c6176655f3100000000"], 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="6623032de619ed15a9ddf4cdfe00000000000000000000000000000000007b00393f3670ef805987e819503c2f8181f3c49f6175980f0637bead17d571203bd2a1d2fc5afa77500a2103c58da7dfc03013291532208ac7ec6520c0614c445c7a041477ace259c7f346d255d109d7b77fc82621119bb6a2674572bc03aecc04fe802ef2e8c96d6eba3d24985a6ad23e2640314ada6d25c8a35eb229b1344049a3529ff2f286136f6ebbfc997d3cfeff2097b1861ed0fbd74b467851a136777372460fb5ad78985cc6edba18f78a09d242329e3f99de5394e43a7730fc6304974bf1b6447223c6e7db14ae72486e63f299eb60f8d9a9f5", @ANYRES16=r5, @ANYBLOB="0502fcfffffffddbdf251200000008000700010000001800018014000200626f6e645f736c6176655f3100000000"], 0x34}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe}, {0xa, 0x0, 0x2, @empty}, 0x0, {[0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6e]}}, 0x5c) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000001080)=[{0x2, 0x3, {0x1, 0x0, 0x4}, {0x1, 0xff, 0x3}, 0x1, 0xfd}, {0x3, 0x2, {0x2, 0xff, 0x4}, {0x1, 0xff}, 0x0, 0xfe}, {0x1, 0x2, {0x2, 0xf0, 0x4}, {0x1}, 0x1, 0x1}, {0x0, 0x3, {0x1, 0x1, 0x3}, {0x0, 0xfe, 0x3}, 0xfe, 0xff}, {0x3, 0x0, {0x1, 0xc3b7655c3034c925, 0x2}, {0x1, 0x1, 0x4}, 0xfd, 0xfd}], 0xa0) (async) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000001080)=[{0x2, 0x3, {0x1, 0x0, 0x4}, {0x1, 0xff, 0x3}, 0x1, 0xfd}, {0x3, 0x2, {0x2, 0xff, 0x4}, {0x1, 0xff}, 0x0, 0xfe}, {0x1, 0x2, {0x2, 0xf0, 0x4}, {0x1}, 0x1, 0x1}, {0x0, 0x3, {0x1, 0x1, 0x3}, {0x0, 0xfe, 0x3}, 0xfe, 0xff}, {0x3, 0x0, {0x1, 0xc3b7655c3034c925, 0x2}, {0x1, 0x1, 0x4}, 0xfd, 0xfd}], 0xa0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') exit(0xffff) (async) exit(0xffff) pread64(r8, &(0x7f0000000040)=""/4139, 0x102b, 0x3) 1.332772458s ago: executing program 2 (id=1363): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_vhci(&(0x7f0000001000)=ANY=[], 0xd) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1.219757607s ago: executing program 6 (id=1365): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r2, 0xee01, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x800, &(0x7f0000000580)={[{@userxattr}, {@index_off}, {@index_off}, {@redirect_dir_on}], [{@hash}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '\''}}, {@uid_eq={'uid', 0x3d, r2}}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, 'clsact\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x20403, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1b, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x40000003, 0x0, 0x2], [0x0, 0x3ff, 0xfffffffd, 0xffffff7f, 0x0, 0x0, 0x7], [0x0, 0x20000232, 0x200006, 0x0, 0x6, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x5}, {0xffffffff}, {0x0, 0x1}, {0x400000}, {}, {0x4, 0x4}, {0x1}, {0x0, 0x9}, {0x0, 0x7fffffff}, {0x8}, {0x804000}]}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r9 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80800) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000000000020000000000000400000000000000", @ANYRES32=r7, @ANYBLOB="00000000ffffff7f00"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r9, @ANYBLOB="00000000f9ffffffffffffff00"/28, @ANYRES32=r10, @ANYBLOB="00000000000000000000000000000000000200"/28]) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) 1.053134081s ago: executing program 0 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009"], 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r1, 0x8b1a, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffe, @empty, 0x4}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0xbc, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x503, 0x240}, [@IFLA_LINKINFO={0x9c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x70, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, {0xa, 0x4, @remote}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @link_local}, {0xa, 0x4, @multicast}, {0xa, 0x4, @link_local}, {0xa, 0x4, @random="296993b9dc93"}]}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, @IFLA_MACVLAN_MODE={0x8}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 893.569763ms ago: executing program 2 (id=1367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x428081, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) r2 = dup(r0) sendmmsg$inet(r2, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="ab7606e6a9c5dcd111afc0c283f824ad8f66754cbff4a2ca10967ccb", 0x1c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000004c0)="53c47ff7", 0x4}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001380)="635e7d44ca029638d930f427e0661dd5d647e4d24738bed212b31558aa972ea8", 0x20}], 0x1}}], 0x3, 0x91) 891.99465ms ago: executing program 2 (id=1368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000040000100fcff07000400c688ff2f64e3c8414880"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000000c0)=0x9, 0x4) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}], 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351", 0x800, r5}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000000140)=[{&(0x7f0000000000)='3c', 0x2}, {0x0}], 0x2, 0x19, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x3) (async) readv(r7, &(0x7f0000000700)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4624, @multicast2}, 0x10) 578.341172ms ago: executing program 2 (id=1369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000440)={0x0, [{0x2, 0x4d88, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x10001, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xd0, 0x0}, {0x3, 0x0, 0xff, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf41, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0xbadd, 0x0}, {0x1, 0x0, 0x40004, 0x0}]}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) 393.187977ms ago: executing program 2 (id=1370): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000680012800b00010069703667726500005800028014000700ff02000000000000000000000000000106000f000a00000006000f004a00000014000600fe8000000000000000000000000000230800140006000000050016000200000004001200060002000000000008000a00", @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000000)) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008240)="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", 0x2000, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a500)={0x20, 0x0, 0x5, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f0000000380)={[0xffffff8c, 0x6, 0x80000000, 0x6, 0x9e3, 0xcacb, 0x5, 0x1, 0x6, 0x4, 0x420, 0x6, 0x2, 0x6, 0x4e1, 0x8, 0x4, 0x2, 0x24, 0x4, 0x7, 0x5, 0x100, 0x2, 0x8, 0x9, 0x9, 0x8, 0x40, 0x7, 0x9, 0x9, 0x3, 0xc8, 0x9, 0x9, 0x400, 0x1, 0x6, 0xcca, 0xbc, 0xffffffff, 0x3ff, 0x401, 0xaf, 0x80000001, 0x4, 0x2, 0x0, 0x6ca, 0xee, 0xa2, 0xe1, 0x9, 0x6, 0x1, 0x401, 0x401, 0x3ff, 0x4c, 0x6, 0x1, 0x8, 0x7, 0x95, 0x6, 0x5, 0x5, 0x80000001, 0x9, 0x6, 0x1, 0x7, 0x5, 0x7, 0x1, 0xf, 0x800, 0x2, 0x0, 0x2, 0x3, 0x6, 0x3, 0xdc, 0x1ff, 0x1716, 0x3, 0x7ff, 0xffff, 0x9, 0x80000000, 0x9, 0x5, 0xc, 0x149e, 0x0, 0x9, 0x0, 0x1, 0x7, 0xf, 0x8001, 0x1, 0x9, 0x1d, 0x1, 0x1, 0x81, 0x2, 0xa00, 0x5, 0x4, 0x1, 0x951, 0x6, 0x4, 0x7f, 0x1, 0xff, 0xb, 0x0, 0x20000, 0x78, 0x6, 0x4, 0x8000, 0x1, 0x9, 0x1, 0xb, 0x8, 0xffffff34, 0x2, 0xfff, 0x60, 0xffffffff, 0x7ab7, 0x4, 0x8, 0x10, 0xc9be, 0xcb, 0x40, 0x7, 0x1, 0x7, 0x0, 0x29, 0x5, 0x0, 0x1, 0x8, 0x3ff, 0x7fff, 0xfffeffff, 0x8, 0x9, 0xffffff97, 0x80000001, 0x3, 0x1, 0x1, 0x0, 0x8, 0xb, 0x583b, 0x7, 0xfffffff9, 0x401, 0x35, 0x10, 0x9, 0x7f, 0x7, 0x66d5, 0x9, 0x4, 0x7, 0x400000, 0x5, 0x3ff, 0x7, 0x6, 0x1, 0x101, 0x5, 0x1, 0x8000, 0x6, 0x2, 0x2, 0xfffffffa, 0x1000, 0x40, 0x7, 0x6, 0x3, 0x8, 0x0, 0x10000, 0x7fff, 0x5, 0x3, 0x9, 0x1, 0xc2d, 0xa000000, 0x5, 0x7, 0x7, 0x7f, 0x40, 0x9, 0xfffff906, 0x10001, 0x5, 0xb33, 0x38, 0x2, 0x578, 0x100, 0xfffffc3c, 0x3, 0x361, 0x1, 0x9, 0x0, 0xdf6, 0x3, 0x7, 0x7, 0xd, 0x401, 0x8, 0x0, 0x0, 0x6d6f2154, 0xad, 0x1ff, 0x1000, 0xffffd995, 0x6, 0x8, 0x0, 0x80, 0x9, 0x3, 0x83, 0x1, 0xd51, 0x1, 0x9, 0x3, 0x1, 0x3, 0x9, 0xa, 0xa, 0x4, 0x8, 0x6, 0x9, 0x8, 0x0, 0x105, 0x7, 0x0, 0x9, 0x5, 0xffffff81, 0x6, 0x5, 0x6, 0x10000, 0x4, 0x9, 0x5, 0x6, 0xb50, 0x1000, 0x75, 0x4, 0x2, 0xa, 0x5, 0x40, 0x1, 0x3, 0x0, 0x4, 0x0, 0x6, 0xfffffff8, 0x7f, 0x56, 0x6000000, 0x9, 0x1, 0x9, 0xffffffc0, 0x0, 0x9, 0x80000000, 0x6, 0x10, 0x5, 0xa81d, 0x6e4, 0x5, 0x9, 0x4, 0x2c8580, 0x3, 0x7, 0x5, 0x9, 0xfffffffb, 0x6, 0x1, 0x2, 0xbd79, 0x80, 0xffff, 0x7, 0x4, 0xfff, 0x1, 0x9, 0x1, 0xffff0000, 0x56b4, 0x2, 0x80000000, 0x9, 0xd, 0x3ff, 0x4, 0x10001, 0x5, 0xbdea, 0x8, 0x9, 0x5, 0x7fffffff, 0x4, 0x3, 0x3ff, 0x800, 0x9, 0x1, 0x80, 0x30000000, 0xf, 0x9, 0x7, 0x1, 0xffffffff, 0x10001, 0x4, 0x8d4f, 0x91e2, 0x4, 0x0, 0x9, 0xf, 0xfffffffc, 0x9, 0x5, 0x9, 0x3, 0x400, 0x2, 0x7f, 0xa, 0xf82, 0x1ff, 0x7fffffff, 0x2d5, 0x38c7ffad, 0x1, 0x2, 0x3, 0x7, 0x5, 0x7fffffff, 0x401, 0x8, 0xf, 0x400, 0xee, 0x9, 0x53a, 0xbdec, 0xffffffff, 0x80, 0x0, 0x4, 0xab, 0xd, 0xe, 0x0, 0x8, 0x7, 0x3, 0x1, 0x4, 0x8, 0xf0fa, 0x4, 0x6, 0x2, 0x3, 0xc, 0x1, 0x1, 0xb348, 0x3ff, 0x332, 0x8, 0x9, 0xff, 0x7, 0x2, 0x8, 0x1a0e, 0x3, 0x1, 0x1, 0x10, 0x79, 0xc084, 0xfffffff7, 0x9, 0x9, 0xf6, 0x4, 0xffffffff, 0x3, 0x2, 0x9, 0x1, 0x9, 0xfffff0a8, 0x5, 0x0, 0x9, 0x0, 0x5, 0x6, 0x6, 0x1ad, 0x1, 0xd76c, 0x1, 0x3, 0x200, 0x80000000, 0x5, 0xd48, 0x7, 0x4, 0xff, 0xd2, 0xb, 0x8, 0x6, 0x6, 0x20000000, 0x7, 0x4, 0x8, 0x1, 0x1, 0x2, 0xa5eb, 0x5, 0x7, 0xa33, 0x50000000, 0xbdd3, 0x7, 0x0, 0x5, 0xc, 0x0, 0x7fff, 0x7, 0x8000, 0x73f6972f, 0xb6e, 0x7fff, 0x40c9, 0x10001, 0xb, 0x1, 0x534e9adc, 0x7, 0x7, 0x7fff, 0x7f, 0xa196, 0x1, 0xc0c, 0x9, 0x5, 0x2, 0x5, 0x1, 0x8, 0x0, 0x3, 0x0, 0x401, 0x4, 0x8, 0x4, 0x0, 0xffff259f, 0x2, 0x3, 0x3, 0x4, 0x6, 0x2f8, 0xf3f8, 0x9, 0x2, 0xb9, 0x4c193ab1, 0x7, 0x7fff, 0x6, 0x4, 0x0, 0x0, 0x6, 0x7f, 0x3, 0x7fffffff, 0xfffeffff, 0x2, 0xffffffff, 0x0, 0x6, 0x5, 0x1000, 0x1, 0xff, 0x3ff, 0x4, 0x80, 0x5, 0x81, 0x5, 0x2, 0x7, 0x4, 0x3, 0x7, 0x79d5a329, 0x7, 0x1ff, 0x0, 0xa8, 0x5, 0x6, 0x3, 0x2, 0x1, 0xd7, 0xf17, 0x0, 0x24d1, 0x6, 0x4, 0x1, 0x2, 0x3, 0xfb3, 0x5, 0x2, 0x3ff, 0x9, 0x2, 0x1, 0xa, 0x1, 0xf, 0xfab, 0x0, 0x3, 0xc60, 0x6, 0x7ff, 0x7, 0x2, 0xfffffffa, 0x6, 0x6, 0x5, 0x52a0, 0x5, 0xcb, 0x3, 0x3, 0x8, 0xffffffff, 0x3, 0x2, 0x401, 0x0, 0x3, 0xd, 0x0, 0x5, 0x9, 0x8, 0x8, 0x50d6, 0xc, 0xffffffff, 0x8, 0x8, 0x121e, 0x7, 0x1, 0x1, 0x3, 0x5, 0x400, 0x274, 0x2, 0x8, 0x3, 0x9, 0xde, 0x6, 0x4, 0xffff, 0x9, 0x1ff, 0x3, 0x4, 0x8, 0xfffffffb, 0x40, 0x8, 0x1, 0x1, 0x7, 0x800, 0x10000, 0x8272, 0x9, 0x0, 0x1, 0x7, 0x0, 0x6, 0x101, 0x41c8, 0x5, 0x1, 0x8, 0x8, 0x4, 0x6, 0x3, 0xfffffff9, 0x9, 0x3e, 0xffffffff, 0x2, 0xd0, 0x80000001, 0x2, 0xfe3c, 0x81, 0x6, 0x3, 0x80000001, 0x4, 0x5, 0x1, 0xc2a, 0x7, 0x6, 0x901, 0x800, 0x1ff, 0xffffffff, 0x8, 0x100, 0x3, 0x2, 0x8001, 0xfffffffd, 0x3e, 0x9, 0x46, 0x3, 0x2a, 0x8000, 0x5, 0x2727, 0x2, 0x12, 0x5, 0xff, 0x36, 0x3a41, 0x8, 0x2, 0x6, 0x0, 0x8, 0xfffffffc, 0x2, 0xfb1, 0x2, 0xfffffffa, 0x4, 0xa, 0xfffffeff, 0x0, 0x0, 0x9, 0x6, 0xb, 0xe56, 0x1, 0xa, 0xc0000000, 0x1, 0xfff, 0xb22, 0xff, 0x2c4a, 0x35, 0xaae998a, 0x2, 0x3, 0x6, 0x5, 0x3, 0x9, 0x62, 0x3d, 0xf14, 0xfffffff7, 0x80000001, 0x81, 0x2418, 0x9, 0xfff, 0xfffffff7, 0x1, 0x200, 0x5, 0x5, 0x34890617, 0x6, 0x1e, 0xbee, 0xe, 0x0, 0x3, 0x1, 0x401, 0x4, 0x9, 0xab7, 0x4, 0x2, 0x8000, 0x260, 0xb8f7, 0x7, 0x2, 0x3, 0x4, 0x2, 0x1, 0x800, 0x6, 0xfffffffa, 0x10000, 0x7, 0x6, 0x2, 0x5, 0x2, 0x0, 0x8001, 0x2, 0x366, 0x1, 0xffffff32, 0xa0b, 0x3, 0x3, 0x4, 0xffffff80, 0x7, 0x0, 0x9, 0x6, 0x77ec, 0x4, 0x7f4, 0xffff, 0x2, 0x1, 0x3, 0x6, 0x5, 0x9, 0x1, 0xfffffff8, 0x6f, 0x0, 0x8, 0x2, 0x9, 0x1, 0x10, 0x400, 0x3, 0xe, 0x10000, 0x9, 0xc, 0x7fff, 0x9, 0xe, 0x33, 0x7, 0x10, 0x1, 0x0, 0x7, 0x0, 0x8001, 0xd4cc, 0xbf, 0x10000, 0xb96f, 0x2, 0x1, 0x7, 0x10001, 0x2, 0x1, 0x2, 0x5, 0x3, 0x5cb, 0x8, 0xb, 0x401, 0xd4, 0x5, 0x0, 0x7, 0x6, 0xc73, 0x5, 0x1, 0x2f4360c8, 0xfffffffb, 0x3, 0x1, 0x0, 0xffffffff, 0x1, 0x8, 0xc071, 0x9, 0x8, 0x6, 0xfffffffc, 0x6, 0x81, 0x800, 0x5, 0x4, 0x100, 0xcd, 0x8, 0x7, 0x8000, 0x9, 0x3444, 0x10, 0x7, 0xfffffffb, 0x400, 0x5, 0x1ff, 0x80, 0xff76d99, 0x8, 0x8, 0x8, 0x4, 0x7, 0x5, 0x4, 0x3ff, 0x67e, 0x3, 0xd, 0x2, 0x8, 0x0, 0x3, 0x7fffffff, 0xcf, 0x2, 0x4, 0xeae6, 0x5, 0x7, 0x1000, 0x3, 0x5, 0x800, 0x3, 0xfff, 0x9, 0x2ba28915, 0xffff, 0x4, 0x2, 0x101, 0x27da, 0x3c58, 0x4, 0x1, 0xe345, 0x4, 0x4, 0x5b2, 0x7, 0x2, 0x5, 0x0, 0x8000, 0x82a, 0xc9a, 0x9, 0x1, 0x8001, 0x3, 0x7, 0x40, 0x1, 0xd3f4, 0x7, 0x80000000, 0xfffffff9, 0x200, 0x6301249c, 0x6, 0x401, 0x40, 0x5, 0x8, 0xffff8001, 0x80000001, 0x1, 0x1, 0x7, 0x4, 0x5, 0x8, 0x3, 0x9, 0xe92f, 0x3, 0x9, 0xfff, 0x7, 0x7f, 0xa, 0x8, 0xe0000000, 0x5, 0x1f7, 0x8, 0x404d, 0xffff9809, 0x7, 0xfffff800, 0x6, 0x1, 0x7f, 0x33e, 0x3, 0x3ff, 0x0, 0x6b, 0x9, 0x100, 0xffffffff, 0x40, 0xe33, 0x7, 0x2, 0x2, 0x1, 0x1, 0x5, 0x200, 0x8001, 0x800, 0x9, 0x26, 0x0, 0x7fffffff, 0x100, 0x9, 0xffffffff]}) 390.422097ms ago: executing program 6 (id=1371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x9}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x40000000000, 0x0, 0x4, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffff9, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 292.776751ms ago: executing program 6 (id=1372): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x200, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x4, 0xf, 0x2, 0x7a, 0x2, 0x3, &(0x7f0000000000)="87f6"}) socket$inet_sctp(0x2, 0x5, 0x84) r1 = io_uring_setup(0x3ca9, &(0x7f0000000940)={0x0, 0xef24, 0x20403, 0x0, 0x3}) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(r1, 0x0, 0xffefffff, 0x21, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) socket$netlink(0x10, 0x3, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'dh\x00', 0x1, 0x10000004, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 153.585691ms ago: executing program 6 (id=1373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x1, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x5]}}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x2) fchdir(r5) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) pipe(&(0x7f0000000140)) (async) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) (async) syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x1, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x5]}}) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x0, 0x2) (async) fchdir(r5) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) (async) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) (async) rmdir(&(0x7f0000000280)='./file0/file0\x00') (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid(r6, r6) (async) setpgid(0x0, r6) (async) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) 90.192035ms ago: executing program 6 (id=1374): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xc, 0x9c1002) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='hugetlbfs\x00', 0x1210040, 0x0) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = eventfd(0x1000) r4 = socket(0xa, 0x3, 0xff) (async) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000040)) (async) close(0xffffffffffffffff) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r9, 0x10000201, 0x7, 0x81, 0x3, [], [0x3fd86826, 0xfffffffd], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}, {}], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0x2}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000740)={&(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x3, 0x0, 0xeeeeeeee}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000007c0)={&(0x7f0000000780)="4779ed9a78fa57567835af2e42808715fff52c8f70c0b5df77cb4a6113ae92728832c3ae9bcd25c30d001f91573821cfaf13e87a88d2cd8080763698", 0x3c, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000900)={&(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xbbbbbbbb}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000001240)={&(0x7f0000000940)=[0x0], &(0x7f00000010c0)=[{}, {}, {}], &(0x7f00000011c0)=[0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0], 0x3, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000001600)={&(0x7f00000012c0)=[0x0], &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001500)=[0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000001700)={0x201, 0x7, &(0x7f0000000800)=[0x0, 0x0, r9, r10, r11, r12, r13], &(0x7f0000000840)=[0x8, 0x2, 0x66, 0x10001, 0x286], &(0x7f0000001680)=[r14, r15, r16], &(0x7f00000016c0)=[0x9, 0x2, 0x6, 0x8], 0x0, 0x7}) sendmmsg(r4, &(0x7f0000002280)=[{{&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x1, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000540)="d86230703d11c0cd590f241c52f4a1078d9b4a513951fa3d331179b7238421dc6cb5eaf3b7ba3a09", 0x28}], 0x1}}], 0x1, 0x40) read$eventfd(r3, &(0x7f0000000000), 0x8) 1.974578ms ago: executing program 2 (id=1375): ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1cc}], 0x1, 0x0, 0x0, 0x4040814}, 0x2404c815) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x104, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xbfc89afb0a020cde, 0x4}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2155, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x9}}}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1a, 0x90, 0x71a2, 0x0, 0x1, 0x1, 0x2, 0x4}}, {0xc, 0x2, [0x9, 0xb, 0xfff3, 0x3]}}, {{0x1c, 0x1, {0x5, 0x2, 0x0, 0xa, 0x1, 0x8d, 0xf, 0x8}}, {0x14, 0x2, [0x2, 0x100, 0x2, 0x3, 0x4, 0xd5b, 0x0, 0x9]}}, {{0x1c, 0x1, {0x3, 0x4, 0x7, 0xeb4b, 0x0, 0x9, 0xfffffffb, 0x4}}, {0xc, 0x2, [0xfff7, 0xb, 0xdcfe, 0xb]}}, {{0x1c, 0x1, {0x6, 0x9, 0x825, 0x8, 0x2, 0x20000, 0x30, 0x4}}, {0xc, 0x2, [0x1ff, 0xd, 0x73, 0x7]}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x4048010) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f0000000840)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/0:0:0:0\x00', 0x200, 0x0) ioctl$BSG_SET_COMMAND_Q(r13, 0x2271, &(0x7f0000000140)=0x1) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x40d2) 0s ago: executing program 6 (id=1376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x114, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x101, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0x4, 0x0, 0x2003, 0x7, 0x0, 0x8, 0x7fffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000800)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="7583843ea3988a62e0186c8b7a234681b1dee6f53de73fe866e3ea798039aa753522083e705414fd58e6b3d42317f052c1839a98b9898d5ef6cb0a3417195275bded6463d493d4412ba12adc770f0fe12f5a3d2ff5d0cbc59bf0ea5e7701f5550de2b25f3ec9b5292e1e884093465e1f3f1a39c3d9d8a1cf141c7f672ba1fcfd626a4e4b"], 0x28}, 0x1, 0x0, 0x0, 0x30008844}, 0x20040020) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x321) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) ioctl$FBIOGET_VSCREENINFO(r7, 0x4600, 0x0) io_uring_enter(r7, 0x1698, 0x4e2f, 0x28, &(0x7f0000000040)={[0xe50a]}, 0xffffffffffffff9e) socket(0x1d, 0x2, 0x6) r8 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'pcl818\x00', [0x300, 0xfffffffd, 0x5ffff803, 0x408, 0x2, 0xfffffff8, 0x6, 0x7ff, 0xfffffff7, 0x2, 0x8, 0x8500, 0x5013, 0x1000007, 0x1, 0x10005, 0x1000, 0x7ffffffd, 0xe, 0xb8a3d6c, 0x9, 0x1ff, 0xa, 0x4, 0x1595, 0x8, 0x5, 0x0, 0x0, 0x4, 0xfffffff8, 0x3]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x3, 0x1, @raw_data=[0xfffff801, 0x2, 0x9, 0x2, 0x9, 0x0, 0xd, 0x10001, 0x800, 0x200, 0x1, 0x10000, 0x23b, 0x5, 0x9]}) ioctl$TIOCSIG(r3, 0x40045436, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:49793' (ED25519) to the list of known hosts. [ 55.292211][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 55.292228][ T40] audit: type=1400 audit(1778638503.673:138): avc: denied { name_bind } for pid=5722 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.334256][ T40] audit: type=1400 audit(1778638503.723:139): avc: denied { execute } for pid=5723 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.344238][ T40] audit: type=1400 audit(1778638503.723:140): avc: denied { execute_no_trans } for pid=5723 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.629055][ T40] audit: type=1400 audit(1778638506.013:141): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.639578][ T40] audit: type=1400 audit(1778638506.023:142): avc: denied { mount } for pid=5723 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.642022][ T5723] cgroup: Unknown subsys name 'net' [ 57.653257][ T40] audit: type=1400 audit(1778638506.033:143): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.809538][ T5723] cgroup: Unknown subsys name 'cpuset' [ 57.820201][ T5723] cgroup: Unknown subsys name 'rlimit' [ 58.022812][ T40] audit: type=1400 audit(1778638506.403:144): avc: denied { setattr } for pid=5723 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.031783][ T40] audit: type=1400 audit(1778638506.413:145): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.039631][ T40] audit: type=1400 audit(1778638506.413:146): avc: denied { write } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.047019][ T40] audit: type=1400 audit(1778638506.413:147): avc: denied { read } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.094259][ T5728] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.844030][ T5723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.582929][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 62.582952][ T40] audit: type=1400 audit(1778638510.963:158): avc: denied { execmem } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.785971][ T40] audit: type=1400 audit(1778638511.173:159): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.799807][ T40] audit: type=1400 audit(1778638511.173:160): avc: denied { read write } for pid=5736 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.807884][ T40] audit: type=1400 audit(1778638511.173:161): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.816377][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.821133][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.821479][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.824623][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.825711][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.826173][ T40] audit: type=1400 audit(1778638511.183:162): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[6683]" dev="sockfs" ino=6683 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.827872][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.828892][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.830788][ T40] audit: type=1400 audit(1778638511.183:163): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="socket:[7386]" dev="sockfs" ino=7386 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.830847][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.831874][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.832142][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.832328][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.832637][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.833598][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.834273][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.835191][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.837112][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.837138][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.839056][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.853528][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.859969][ T40] audit: type=1400 audit(1778638511.223:164): avc: denied { read } for pid=5750 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.862242][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.864267][ T40] audit: type=1400 audit(1778638511.223:165): avc: denied { open } for pid=5750 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.895786][ T40] audit: type=1400 audit(1778638511.233:166): avc: denied { mounton } for pid=5750 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.902329][ T40] audit: type=1400 audit(1778638511.233:167): avc: denied { module_request } for pid=5750 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.546862][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.550738][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.554797][ T5738] bridge_slave_0: entered allmulticast mode [ 63.559349][ T5738] bridge_slave_0: entered promiscuous mode [ 63.566028][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.569202][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.572500][ T5738] bridge_slave_1: entered allmulticast mode [ 63.576332][ T5738] bridge_slave_1: entered promiscuous mode [ 63.579464][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.582885][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.586814][ T5736] bridge_slave_0: entered allmulticast mode [ 63.591082][ T5736] bridge_slave_0: entered promiscuous mode [ 63.596722][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.599904][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.603573][ T5736] bridge_slave_1: entered allmulticast mode [ 63.608389][ T5736] bridge_slave_1: entered promiscuous mode [ 63.649584][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.652764][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.656535][ T5737] bridge_slave_0: entered allmulticast mode [ 63.660689][ T5737] bridge_slave_0: entered promiscuous mode [ 63.690910][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.697714][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.700824][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.703534][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.706722][ T5737] bridge_slave_1: entered allmulticast mode [ 63.710293][ T5737] bridge_slave_1: entered promiscuous mode [ 63.731266][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.767214][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.779043][ T5736] team0: Port device team_slave_0 added [ 63.782632][ T5736] team0: Port device team_slave_1 added [ 63.811484][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.843352][ T5750] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.847023][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.850606][ T5750] bridge_slave_0: entered allmulticast mode [ 63.854705][ T5750] bridge_slave_0: entered promiscuous mode [ 63.859736][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.863335][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.865809][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.876570][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.881604][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.883983][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.892636][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.898493][ T5738] team0: Port device team_slave_0 added [ 63.902386][ T5738] team0: Port device team_slave_1 added [ 63.904602][ T5750] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.907039][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.909712][ T5750] bridge_slave_1: entered allmulticast mode [ 63.913418][ T5750] bridge_slave_1: entered promiscuous mode [ 63.967883][ T5750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.972543][ T5750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.975963][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.978507][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.987683][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.994388][ T5737] team0: Port device team_slave_0 added [ 64.007491][ T5737] team0: Port device team_slave_1 added [ 64.010057][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.012566][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.021682][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.059596][ T5750] team0: Port device team_slave_0 added [ 64.072786][ T5750] team0: Port device team_slave_1 added [ 64.078779][ T5736] hsr_slave_0: entered promiscuous mode [ 64.081577][ T5736] hsr_slave_1: entered promiscuous mode [ 64.088499][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.091929][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.103352][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.117338][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.119622][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.127969][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.163638][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.166632][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.175584][ T5750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.184766][ T5738] hsr_slave_0: entered promiscuous mode [ 64.187248][ T5738] hsr_slave_1: entered promiscuous mode [ 64.189694][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 64.191985][ T5738] Cannot create hsr debugfs directory [ 64.201992][ T5750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.205004][ T5750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.213999][ T5750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.275988][ T5737] hsr_slave_0: entered promiscuous mode [ 64.278561][ T5737] hsr_slave_1: entered promiscuous mode [ 64.281079][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 64.282713][ T5737] Cannot create hsr debugfs directory [ 64.357471][ T5750] hsr_slave_0: entered promiscuous mode [ 64.359901][ T5750] hsr_slave_1: entered promiscuous mode [ 64.362523][ T5750] debugfs: 'hsr0' already exists in 'hsr' [ 64.365509][ T5750] Cannot create hsr debugfs directory [ 64.630282][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.637887][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.651617][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.657038][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.660024][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.665600][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.669199][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.675304][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.733080][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.741572][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.751150][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.756392][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.759489][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.764765][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.770525][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.779829][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.839279][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.844405][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.847695][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.853573][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.858253][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.862829][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.866260][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.870748][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.915456][ T62] Bluetooth: hci3: command tx timeout [ 64.915708][ T5749] Bluetooth: hci0: command tx timeout [ 64.919522][ T62] Bluetooth: hci1: command tx timeout [ 64.922052][ T5747] Bluetooth: hci2: command tx timeout [ 64.967058][ T5750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.974128][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.978083][ T5750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.982272][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.986060][ T5750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.991076][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.994700][ T5750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.999179][ T5750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.013243][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.049613][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.069298][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.072725][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.091053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.094010][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.109279][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.153163][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.161952][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.181758][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.184658][ T526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.199107][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.206018][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.208334][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.233586][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.240223][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.243825][ T526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.260000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.263077][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.299664][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.331656][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.334153][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.356989][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.360145][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.586342][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.629099][ T5736] veth0_vlan: entered promiscuous mode [ 65.639614][ T5736] veth1_vlan: entered promiscuous mode [ 65.646742][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.672879][ T5736] veth0_macvtap: entered promiscuous mode [ 65.693527][ T5736] veth1_macvtap: entered promiscuous mode [ 65.712836][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.728279][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.748882][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.753219][ T5738] veth0_vlan: entered promiscuous mode [ 65.763335][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.788361][ T526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.793070][ T526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.804361][ T5738] veth1_vlan: entered promiscuous mode [ 65.807698][ T526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.811791][ T526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.886855][ T5737] veth0_vlan: entered promiscuous mode [ 65.910600][ T5750] veth0_vlan: entered promiscuous mode [ 65.934786][ T5737] veth1_vlan: entered promiscuous mode [ 65.953021][ T526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.957493][ T526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.962041][ T5738] veth0_macvtap: entered promiscuous mode [ 65.967265][ T5750] veth1_vlan: entered promiscuous mode [ 65.982890][ T5738] veth1_macvtap: entered promiscuous mode [ 66.011911][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.014834][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.025447][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.038376][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.050939][ T5737] veth0_macvtap: entered promiscuous mode [ 66.058236][ T5750] veth0_macvtap: entered promiscuous mode [ 66.066061][ T5750] veth1_macvtap: entered promiscuous mode [ 66.069033][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.072737][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.074173][ T5736] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.078784][ T5737] veth1_macvtap: entered promiscuous mode [ 66.088366][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.103808][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.140977][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.147541][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.170933][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.184611][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.188586][ T1199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.195239][ T1199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.201803][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.204456][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.219566][ T1199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.225118][ T1199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.237306][ T1199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.241926][ T1199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.252682][ T1199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.256543][ T1199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.267278][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.271432][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.367325][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.371630][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.411133][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.416540][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.442141][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.445699][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.462167][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.473232][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.487324][ T5892] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 66.492580][ T5894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5'. [ 66.622903][ T5902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=5902 comm=syz.3.4 [ 66.647030][ T5906] ipvlan1: entered promiscuous mode [ 66.650161][ T5906] ipvlan1: entered allmulticast mode [ 66.652541][ T5906] veth0_vlan: entered allmulticast mode [ 66.752329][ T5920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.904049][ T5834] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.994168][ T5751] Bluetooth: hci1: command tx timeout [ 66.994228][ T5742] Bluetooth: hci2: command tx timeout [ 66.995975][ T5096] Bluetooth: hci3: command tx timeout [ 66.996024][ T5096] Bluetooth: hci0: command tx timeout [ 67.019918][ T5927] process 'syz.0.20' launched '/dev/fd/3' with NULL argv: empty string added [ 67.063920][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 67.077439][ T5834] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 67.086121][ T5834] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 67.090700][ T5834] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.094414][ T5834] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 67.111410][ T5834] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 67.114574][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.117651][ T5834] usb 8-1: Product: syz [ 67.119418][ T5834] usb 8-1: Manufacturer: syz [ 67.121026][ T5834] usb 8-1: SerialNumber: syz [ 67.134407][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 67.138784][ T5834] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input5 [ 67.285766][ T5941] ======================================================= [ 67.285766][ T5941] WARNING: The mand mount option has been deprecated and [ 67.285766][ T5941] and is ignored by this kernel. Remove the mand [ 67.285766][ T5941] option from the mount to silence this warning. [ 67.285766][ T5941] ======================================================= [ 67.353867][ T5834] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 67.358670][ T5834] (id 0x00) [ 67.433833][ T5834] rc_core: IR keymap rc-imon-pad not found [ 67.444479][ T5834] Registered IR keymap rc-empty [ 67.446387][ T5834] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 67.450067][ T5834] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 67.505506][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 67.509326][ T5959] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 67.520749][ T5959] netlink: 'syz.2.23': attribute type 19 has an invalid length. [ 67.521494][ T1164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.529906][ T1164] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.533184][ T1164] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.533360][ T5959] Zero length message leads to an empty skb [ 67.536200][ T1164] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.555512][ T5834] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 67.562940][ T5834] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input6 [ 67.599301][ T5834] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:2> initialized [ 67.777981][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 67.778000][ T40] audit: type=1400 audit(1778638516.163:240): avc: denied { mounton } for pid=5961 comm="syz.2.24" path="/6/file0" dev="9p" ino=83099703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.780526][ T5962] overlayfs: workdir and upperdir must reside under the same mount [ 67.824958][ T40] audit: type=1400 audit(1778638516.213:241): avc: denied { create } for pid=5966 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.831660][ T40] audit: type=1400 audit(1778638516.213:242): avc: denied { write } for pid=5966 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.848514][ T40] audit: type=1400 audit(1778638516.233:243): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.031333][ T40] audit: type=1400 audit(1778638516.413:244): avc: denied { create } for pid=5971 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.043671][ T40] audit: type=1400 audit(1778638516.423:245): avc: denied { ioctl } for pid=5971 comm="syz.2.27" path="socket:[11428]" dev="sockfs" ino=11428 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.090839][ T40] audit: type=1400 audit(1778638516.473:246): avc: denied { ioctl } for pid=5971 comm="syz.2.27" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.159040][ T40] audit: type=1400 audit(1778638516.543:247): avc: denied { bind } for pid=5975 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.159439][ T5976] Bluetooth: MGMT ver 1.23 [ 68.166192][ T40] audit: type=1400 audit(1778638516.543:248): avc: denied { write } for pid=5975 comm="syz.2.28" path="socket:[11434]" dev="sockfs" ino=11434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.175463][ T40] audit: type=1400 audit(1778638516.553:249): avc: denied { map } for pid=5975 comm="syz.2.28" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.297535][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.302101][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.312208][ T5973] xt_hashlimit: size too large, truncated to 1048576 [ 68.347114][ T5976] overlayfs: missing 'workdir' [ 68.378453][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 68.382170][ T5982] bridge_slave_1: left allmulticast mode [ 68.384236][ T5982] bridge_slave_1: left promiscuous mode [ 68.387791][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.398767][ T5982] bridge_slave_0: left allmulticast mode [ 68.400720][ T5982] bridge_slave_0: left promiscuous mode [ 68.402693][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.074346][ T5742] Bluetooth: hci2: command tx timeout [ 69.085406][ T5742] Bluetooth: hci0: command tx timeout [ 69.085472][ T5751] Bluetooth: hci3: command tx timeout [ 69.085532][ T5744] Bluetooth: hci1: command tx timeout [ 69.701581][ T4906] usb 8-1: USB disconnect, device number 2 [ 70.205142][ T6016] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 70.208069][ T6016] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.213643][ T6016] vhci_hcd vhci_hcd.0: Device attached [ 70.220044][ T6016] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 70.222192][ T6016] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.224890][ T6016] vhci_hcd vhci_hcd.0: Device attached [ 70.227491][ T6019] vhci_hcd: connection closed [ 70.228092][ T6017] vhci_hcd: connection closed [ 70.230242][ T12] vhci_hcd vhci_hcd.3: stop threads [ 70.237056][ T12] vhci_hcd vhci_hcd.3: release socket [ 70.240655][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 70.243384][ T12] vhci_hcd vhci_hcd.3: stop threads [ 70.245819][ T12] vhci_hcd vhci_hcd.3: release socket [ 70.248665][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 70.443486][ T6025] vxcan0: tx address claim with dlc 0 [ 70.447412][ T6025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=6025 comm=syz.0.38 [ 70.502597][ T6029] ip6erspan0: entered promiscuous mode [ 70.560966][ T6034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.578993][ T6037] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET) [ 70.817718][ T6058] netlink: 164 bytes leftover after parsing attributes in process `syz.2.44'. [ 70.843159][ T6058] kvm: emulating exchange as write [ 70.883613][ T6061] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 70.886422][ T6061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.899583][ T6061] vhci_hcd vhci_hcd.0: Device attached [ 70.917822][ T6061] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 70.920073][ T6061] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 70.934338][ T6061] vhci_hcd vhci_hcd.0: Device attached [ 70.998540][ T6078] erofs (device loop1): cannot find valid erofs superblock [ 71.072532][ T6085] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 71.076881][ T6085] netlink: 96 bytes leftover after parsing attributes in process `syz.0.54'. [ 71.081453][ T6085] netlink: 658 bytes leftover after parsing attributes in process `syz.0.54'. [ 71.085212][ T6085] netlink: 1 bytes leftover after parsing attributes in process `syz.0.54'. [ 71.143882][ T1006] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 71.155213][ T5751] Bluetooth: hci2: command tx timeout [ 71.164618][ T5751] Bluetooth: hci1: command tx timeout [ 71.164665][ T5742] Bluetooth: hci3: command tx timeout [ 71.194809][ T5820] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.353882][ T5820] usb 8-1: Using ep0 maxpacket: 16 [ 71.356204][ T4906] IPVS: starting estimator thread 0... [ 71.359787][ T5820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 71.366301][ T5820] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 71.370629][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.374874][ T5820] usb 8-1: Product: syz [ 71.377438][ T5820] usb 8-1: Manufacturer: syz [ 71.379810][ T5820] usb 8-1: SerialNumber: syz [ 71.396862][ T5820] usb 8-1: config 0 descriptor?? [ 71.404406][ T5742] Bluetooth: hci0: command tx timeout [ 71.409383][ T5820] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 71.416115][ T5820] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 71.433953][ T6103] bridge1: entered promiscuous mode [ 71.454040][ T6099] IPVS: using max 45 ests per chain, 108000 per kthread [ 71.732774][ T6116] program syz.2.66 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.005319][ T5820] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 72.376681][ T6123] tmpfs: Bad value for 'mpol' [ 72.420553][ T5820] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 72.424180][ T5820] em28xx 8-1:0.0: board has no eeprom [ 72.536716][ T6127] x_tables: duplicate underflow at hook 3 [ 72.636021][ T6068] vhci_hcd: connection closed [ 72.636095][ T6063] vhci_hcd: connection reset by peer [ 72.637318][ T526] vhci_hcd vhci_hcd.3: stop threads [ 72.645030][ T526] vhci_hcd vhci_hcd.3: release socket [ 72.650899][ T526] vhci_hcd vhci_hcd.3: disconnect device [ 72.653302][ T526] vhci_hcd vhci_hcd.3: stop threads [ 72.655808][ T526] vhci_hcd vhci_hcd.3: release socket [ 72.657613][ T526] vhci_hcd vhci_hcd.3: disconnect device [ 72.693894][ T5820] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 72.699691][ T5820] em28xx 8-1:0.0: dvb set to bulk mode. [ 72.723284][ T5820] usb 8-1: USB disconnect, device number 3 [ 72.728224][ T24] em28xx 8-1:0.0: Binding DVB extension [ 72.763070][ T5820] em28xx 8-1:0.0: Disconnecting em28xx [ 72.812517][ T24] em28xx 8-1:0.0: Registering input extension [ 72.816041][ T5820] em28xx 8-1:0.0: Closing input extension [ 72.818882][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 72.818896][ T40] audit: type=1400 audit(1778638521.203:305): avc: denied { create } for pid=6138 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.838786][ T40] audit: type=1400 audit(1778638521.203:306): avc: denied { setopt } for pid=6138 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.848981][ T5820] em28xx 8-1:0.0: Freeing device [ 72.874449][ T6130] netlink: 14 bytes leftover after parsing attributes in process `syz.1.70'. [ 72.881151][ T40] audit: type=1400 audit(1778638521.263:307): avc: denied { create } for pid=6142 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.881505][ T6143] sock: sock_set_timeout: `syz.2.74' (pid 6143) tries to set negative timeout [ 72.893797][ T40] audit: type=1400 audit(1778638521.263:308): avc: denied { setopt } for pid=6142 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.903436][ T40] audit: type=1400 audit(1778638521.273:309): avc: denied { read } for pid=6142 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.914029][ T6130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.937335][ T6130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.949420][ T6130] bond0 (unregistering): Released all slaves [ 73.009126][ T6150] netlink: 'syz.2.76': attribute type 10 has an invalid length. [ 73.016461][ T6150] geneve1: entered promiscuous mode [ 73.022377][ T6150] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 73.034469][ T40] audit: type=1400 audit(1778638521.413:310): avc: denied { setattr } for pid=6149 comm="syz.2.76" name="PPTP" dev="sockfs" ino=12470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.102464][ T40] audit: type=1400 audit(1778638521.483:311): avc: denied { read } for pid=6151 comm="syz.2.77" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.119331][ T40] audit: type=1400 audit(1778638521.483:312): avc: denied { open } for pid=6151 comm="syz.2.77" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.148546][ T40] audit: type=1400 audit(1778638521.493:313): avc: denied { ioctl } for pid=6151 comm="syz.2.77" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.176881][ T40] audit: type=1400 audit(1778638521.503:314): avc: denied { set_context_mgr } for pid=6151 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 73.182894][ T6152] binder: 6151:6152 unknown command 0 [ 73.189237][ T6152] binder: 6151:6152 ioctl c0306201 2000000001c0 returned -22 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xb6000) [ 73.657148][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 73.663875][ T1133] ata1: failed to read log page 10h (errno=-5) [ 73.669646][ T1133] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 73.675719][ T1133] ata1.00: irq_stat 0x40000000 [ 73.679895][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED [ 73.684587][ T1133] ata1.00: cmd 61/b0:70:36:11:08/05:00:00:00:00/40 tag 14 ncq dma 745472 out [ 73.684587][ T1133] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 73.702998][ T1133] ata1.00: status: { DRDY } [ 73.704962][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED [ 73.709670][ T1133] ata1.00: cmd 61/c0:78:e6:16:08/02:00:00:00:00/40 tag 15 ncq dma 360448 out [ 73.709670][ T1133] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 73.725101][ T1133] ata1.00: status: { DRDY } [ 73.730094][ T1133] ata1.00: configured for UDMA/100 [ 73.734218][ T1133] ata1: EH complete [ 74.214330][ T5886] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 74.487715][ T6177] netlink: 152868 bytes leftover after parsing attributes in process `syz.2.82'. [ 74.497948][ T6177] netlink: Unknown conntrack attr (type=6322, max=9) [ 74.666209][ T6194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.292166][ T6216] pim6reg: entered allmulticast mode [ 75.530664][ T6235] xt_socket: unknown flags 0xc [ 75.537247][ T6235] FAT-fs (nbd2): unable to read boot sector [ 75.540378][ T6233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.549493][ T6235] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 75.723396][ T6239] ip6tnl1: entered promiscuous mode [ 75.809495][ T6242] capability: warning: `syz.3.103' uses 32-bit capabilities (legacy support in use) [ 76.263886][ T1006] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 76.330272][ T6250] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 76.401622][ T6258] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.405851][ T6259] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.430328][ T6258] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 76.432849][ T6258] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.435343][ T6259] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 76.437938][ T6259] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.441037][ T6258] vhci_hcd vhci_hcd.0: Device attached [ 76.442302][ T6259] vhci_hcd vhci_hcd.0: Device attached [ 76.446323][ T6263] vhci_hcd: connection closed [ 76.446927][ T12] vhci_hcd vhci_hcd.3: stop threads [ 76.446994][ T6262] vhci_hcd: connection closed [ 76.448544][ T12] vhci_hcd vhci_hcd.3: release socket [ 76.455315][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 76.458416][ T12] vhci_hcd vhci_hcd.3: stop threads [ 76.460900][ T12] vhci_hcd vhci_hcd.3: release socket [ 76.463276][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 76.760944][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.763282][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.988814][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.113'. [ 77.095600][ T6287] openvswitch: netlink: Flow key attribute not present in set flow. [ 77.099416][ T6287] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 77.182318][ T5742] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 77.182430][ T6300] netlink: 27 bytes leftover after parsing attributes in process `syz.3.121'. [ 77.297297][ T6314] vlan2: entered allmulticast mode [ 77.299005][ T6314] bond0: entered allmulticast mode [ 77.300696][ T6314] bond_slave_0: entered allmulticast mode [ 77.302485][ T6314] bond_slave_1: entered allmulticast mode [ 77.305393][ T6314] geneve1: entered allmulticast mode [ 77.458678][ T6334] ptrace attach of "/syz-executor exec"[5737] was attempted by "/syz-executor exec"[6334] [ 77.465593][ T6334] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.480197][ T6336] ptrace attach of "/syz-executor exec"[5737] was attempted by "/syz-executor exec"[6336] [ 77.583966][ T6350] use of bytesused == 0 is deprecated and will be removed in the future, [ 77.589351][ T6350] use the actual size instead. [ 77.652943][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 77.656509][ T6350] netlink: 'syz.3.135': attribute type 8 has an invalid length. [ 77.680366][ T6360] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 77.690120][ T6360] bond1 (unregistering): Released all slaves [ 77.894578][ T6374] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 77.948422][ T6376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.961869][ T40] kauditd_printk_skb: 342 callbacks suppressed [ 77.961885][ T40] audit: type=1400 audit(1778638526.343:657): avc: denied { getopt } for pid=6381 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.993512][ T40] audit: type=1400 audit(1778638526.373:658): avc: denied { create } for pid=6383 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 78.013412][ T40] audit: type=1400 audit(1778638526.393:659): avc: denied { ioctl } for pid=6383 comm="syz.3.145" path="socket:[13058]" dev="sockfs" ino=13058 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.025677][ T40] audit: type=1400 audit(1778638526.403:660): avc: denied { open } for pid=6383 comm="syz.3.145" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 78.030186][ T6386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.146'. [ 78.034745][ T40] audit: type=1400 audit(1778638526.403:661): avc: denied { ioctl } for pid=6383 comm="syz.3.145" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 78.063507][ T40] audit: type=1400 audit(1778638526.443:662): avc: denied { bind } for pid=6383 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.071741][ T40] audit: type=1400 audit(1778638526.443:663): avc: denied { name_bind } for pid=6383 comm="syz.3.145" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 78.082404][ T40] audit: type=1400 audit(1778638526.443:664): avc: denied { node_bind } for pid=6383 comm="syz.3.145" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 78.098761][ T40] audit: type=1400 audit(1778638526.453:665): avc: denied { read write } for pid=5736 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.110186][ T40] audit: type=1400 audit(1778638526.453:666): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.180734][ T6396] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 78.191207][ T6396] CIFS mount error: No usable UNC path provided in device string! [ 78.191207][ T6396] [ 78.194744][ T6396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 78.371713][ T6400] bond0: entered promiscuous mode [ 78.399037][ T526] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 78.703912][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.873923][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 78.880498][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 78.883559][ T24] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 78.886217][ T24] usb 6-1: Product: syz [ 78.887571][ T24] usb 6-1: Manufacturer: syz [ 78.889168][ T24] usb 6-1: SerialNumber: syz [ 78.894408][ T24] usb 6-1: config 0 descriptor?? qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xd5000) [ 78.967040][ T6421] xt_l2tp: v2 tid > 0xffff: 2031748 [ 79.004899][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 79.007221][ T1133] ata1: failed to read log page 10h (errno=-5) [ 79.009254][ T1133] ata1.00: NCQ disabled due to excessive errors [ 79.011233][ T1133] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 79.014291][ T1133] ata1.00: irq_stat 0x41000000 [ 79.015949][ T1133] ata1.00: failed command: READ FPDMA QUEUED [ 79.018313][ T1133] ata1.00: cmd 60/a8:70:ee:36:01/06:00:00:00:00/40 tag 14 ncq dma 872448 in [ 79.018313][ T1133] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 79.024417][ T1133] ata1.00: status: { DRDY } [ 79.026539][ T1133] ata1.00: failed command: READ FPDMA QUEUED [ 79.029363][ T1133] ata1.00: cmd 60/d8:78:96:3d:01/02:00:00:00:00/40 tag 15 ncq dma 372736 in [ 79.029363][ T1133] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 79.036521][ T1133] ata1.00: status: { DRDY } [ 79.038587][ T1133] ata1.00: error: { ABRT } [ 79.044480][ T1133] ata1.00: configured for UDMA/100 [ 79.046764][ T1133] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 79.050297][ T1133] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 79.053239][ T1133] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 79.056344][ T1133] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 36 ee 00 06 a8 00 [ 79.059173][ T1133] I/O error, dev sda, sector 79598 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 79.062611][ T1133] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 79.066752][ T1133] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 79.069777][ T1133] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 79.072375][ T1133] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 3d 96 00 02 d8 00 [ 79.075822][ T1133] I/O error, dev sda, sector 81302 op 0x0:(READ) flags 0x80700 phys_seg 61 prio class 2 [ 79.079340][ T1133] ata1: EH complete [ 79.107806][ T6416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.113465][ T24] usb 6-1: USB disconnect, device number 2 [ 79.132789][ T6407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.213818][ T5845] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 79.373833][ T5845] usb 8-1: Using ep0 maxpacket: 32 [ 79.385713][ T5845] usb 8-1: unable to get BOS descriptor or descriptor too short [ 79.392229][ T5845] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.397979][ T5845] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 79.401638][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.405358][ T5845] usb 8-1: Product: ࡃ [ 79.406989][ T5845] usb 8-1: Manufacturer: ⪺褳掼ä¥î¥šç½¹ä°ºä§æ‰® [ 79.409920][ T5845] usb 8-1: SerialNumber: í§èŸŸå¶”若䶜㫾晦á«èª¦î†ŽéºŸâ…œé³‰è¢‘撯顈잟å§å³¤ç¼¾ê¯ºá…ºï£—毾뀑㨕ᎋ뉒Ď仒蔬뫹䌬쓃ƙ턑å“뚚簺覀ã™ì²Šà½œí„ªï“…â…᤹哸꧖䅭äžé°°á²¨æ¾¢î §ïŽ¼èµ­ê‹©çƒ³â¸±â¹·â±…ӊޤ溚뽫㇜콄ꛣ뺑莜힊ᴵ [ 79.433395][ T6433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6433 comm=syz.2.158 [ 79.492088][ T6440] bond0: (slave ip6tnl0): Error: Device can not be enslaved while up [ 79.519487][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 79.523529][ T6442] netlink: 'syz.0.161': attribute type 13 has an invalid length. [ 79.526932][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 79.549501][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 79.550755][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.553601][ T6442] netlink: 'syz.0.161': attribute type 13 has an invalid length. [ 79.557513][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.563046][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 79.564088][ T83] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.572505][ T83] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.635733][ T5845] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.639141][ T5845] usb 8-1: MIDIStreaming interface descriptor not found [ 79.681775][ T5845] usb 8-1: USB disconnect, device number 4 [ 79.737776][ T6454] udevd[6454]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.804372][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 79.885533][ T6463] netlink: 'syz.1.168': attribute type 1 has an invalid length. [ 79.908474][ T6463] bond1: entered promiscuous mode [ 79.911616][ T6463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.931792][ T6463] bond1: (slave bridge1): making interface the new active one [ 79.936040][ T6463] bridge1: entered promiscuous mode [ 79.940342][ T6463] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 79.986808][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 79.995786][ T24] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 80.004892][ T24] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 80.010160][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 80.016084][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.019413][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 80.023533][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.027947][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 80.031984][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 80.039546][ T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 80.049377][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.059993][ T24] usb 7-1: config 0 descriptor?? [ 80.270885][ T24] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 80.374973][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 80.378718][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 80.381591][ T6490] openvswitch: netlink: Flow actions attr not present in new flow. [ 80.486444][ T845] usb 7-1: USB disconnect, device number 2 [ 80.505999][ T845] usblp0: removed [ 80.516075][ T6492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6492 comm=syz.1.175 [ 80.540903][ T6492] bond0: (slave macvlan2): Opening slave failed [ 80.590217][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 80.595466][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 81.048036][ T6508] netlink: 92 bytes leftover after parsing attributes in process `syz.2.180'. [ 82.067884][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028217000: rx timeout, send abort [ 82.073424][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028217000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 87.014205][ T1347] cfg80211: failed to load regulatory.db [ 99.682553][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 99.682572][ T40] audit: type=1400 audit(1778638548.063:716): avc: denied { ioctl } for pid=6521 comm="syz.3.186" path="socket:[12285]" dev="sockfs" ino=12285 ioctlcmd=0x6e80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.688826][ T6523] XFS (nbd3): no-recovery mounts must be read-only. [ 99.703669][ T40] audit: type=1400 audit(1778638548.083:717): avc: denied { mount } for pid=6526 comm="syz.2.185" name="/" dev="autofs" ino=14647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 99.712866][ T40] audit: type=1400 audit(1778638548.093:718): avc: denied { write } for pid=6522 comm="syz.0.183" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 99.714173][ T6523] macvtap1: entered promiscuous mode [ 99.724386][ T6523] macvtap1: entered allmulticast mode [ 99.741023][ T6533] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 99.741271][ T6534] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 99.769619][ T6533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.782524][ T6533] vlan2: entered allmulticast mode [ 99.785315][ T6533] bond2: entered allmulticast mode [ 99.789847][ T40] audit: type=1400 audit(1778638548.173:719): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 99.797573][ T6533] bond2: (slave geneve2): making interface the new active one [ 99.797591][ T6533] geneve2: entered allmulticast mode [ 99.804823][ T6533] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 99.838479][ T6538] macvtap1: entered promiscuous mode [ 99.840946][ T6538] macvtap1: entered allmulticast mode [ 99.855287][ T40] audit: type=1400 audit(1778638548.243:720): avc: denied { read write } for pid=6541 comm="syz.3.190" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.855666][ T6542] random: crng reseeded on system resumption [ 99.865366][ T40] audit: type=1400 audit(1778638548.243:721): avc: denied { ioctl open } for pid=6541 comm="syz.3.190" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.916005][ T40] audit: type=1400 audit(1778638548.303:722): avc: denied { read append } for pid=6546 comm="syz.1.191" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.952806][ T40] audit: type=1400 audit(1778638548.333:723): avc: denied { append } for pid=6554 comm="syz.1.193" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.038801][ T6555] netlink: 'syz.1.193': attribute type 12 has an invalid length. [ 100.041690][ T6555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.193'. [ 100.049273][ T6560] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 100.052977][ T6560] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 100.064527][ T40] audit: type=1400 audit(1778638548.453:724): avc: denied { create } for pid=6554 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.072740][ T40] audit: type=1400 audit(1778638548.453:725): avc: denied { connect } for pid=6554 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.074064][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 100.084484][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 100.087246][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 100.095580][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 100.102906][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 100.115760][ T6563] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 100.119256][ T6563] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 100.122128][ T6563] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 100.126382][ T6563] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 100.145097][ T5886] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 100.278784][ T6576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 100.287880][ T6576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6576 comm=syz.3.200 [ 100.326178][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 100.331602][ T5886] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 100.348147][ T5886] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 100.360225][ T5886] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.365136][ T5886] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 100.374256][ T5886] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 100.377716][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.380888][ T5886] usb 7-1: Product: syz [ 100.382517][ T5886] usb 7-1: Manufacturer: syz [ 100.385467][ T5886] usb 7-1: SerialNumber: syz [ 100.405462][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 100.415985][ T5886] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input10 [ 100.439074][ T6585] netlink: 88 bytes leftover after parsing attributes in process `syz.0.202'. [ 100.549918][ T5742] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 100.550017][ T5742] Bluetooth: hci3: unknown advertising packet type: 0x2f [ 100.555676][ T5742] Bluetooth: hci3: Dropping invalid advertising data [ 100.561361][ T5742] Bluetooth: hci3: Malformed LE Event: 0x02 [ 100.613825][ T5886] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 100.616158][ T5886] (id 0x00) [ 100.665994][ T5886] rc_core: IR keymap rc-imon-pad not found [ 100.668495][ T6605] exFAT-fs (nullb0): invalid boot record signature [ 100.670527][ T6605] exFAT-fs (nullb0): failed to read boot sector [ 100.670725][ T5886] Registered IR keymap rc-empty [ 100.673096][ T6605] exFAT-fs (nullb0): failed to recognize exfat type [ 100.675216][ T4906] libceph: connect (1)[c::]:6789 error -101 [ 100.675702][ T4906] libceph: mon0 (1)[c::]:6789 connect error [ 100.680542][ T5886] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 100.680915][ T4906] libceph: connect (1)[c::]:6789 error -101 [ 100.682467][ T5886] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 100.698963][ T4906] libceph: mon0 (1)[c::]:6789 connect error [ 100.825865][ T5886] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 100.832993][ T5886] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input11 [ 100.846014][ T5886] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:3> initialized [ 100.969845][ T4906] libceph: connect (1)[c::]:6789 error -101 [ 100.972278][ T4906] libceph: mon0 (1)[c::]:6789 connect error [ 101.478861][ T6600] ceph: No mds server is up or the cluster is laggy [ 101.486073][ T4906] libceph: connect (1)[c::]:6789 error -101 [ 101.490077][ T4906] libceph: mon0 (1)[c::]:6789 connect error [ 101.694826][ T6634] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 101.743048][ T6634] overlayfs: missing 'lowerdir' [ 101.804954][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.215'. [ 101.804981][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.215'. [ 101.815008][ T6644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6644 comm=syz.3.215 [ 101.815808][ T6641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6641 comm=syz.3.215 [ 101.838503][ T6649] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 102.139336][ T5742] block nbd1: Receive control failed (result -107) [ 102.510456][ T6688] CIFS: iocharset name too long [ 102.517182][ T6688] CIFS: iocharset name too long [ 102.660677][ T6696] netlink: 'syz.0.227': attribute type 21 has an invalid length. [ 102.859318][ T6704] 9pnet_fd: p9_fd_create_tcp (6704): problem connecting socket to 127.0.0.1 [ 102.895260][ T6706] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.934069][ T6538] netlink: 'syz.2.188': attribute type 7 has an invalid length. [ 102.940709][ T4906] usb 7-1: USB disconnect, device number 3 [ 103.098267][ T6716] netlink: 'syz.0.235': attribute type 2 has an invalid length. [ 104.027475][ T6739] capability: warning: `syz.1.241' uses deprecated v2 capabilities in a way that may be insecure [ 104.038930][ T6742] random: crng reseeded on system resumption [ 104.393987][ T4906] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 104.453904][ T1347] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 104.574004][ T4906] usb 8-1: Using ep0 maxpacket: 8 [ 104.578070][ T4906] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 104.581530][ T4906] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.586419][ T4906] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.590552][ T4906] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.594808][ T4906] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.601373][ T4906] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.604089][ T6772] overlayfs: conflicting options: userxattr,redirect_dir=on [ 104.605335][ T4906] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.610303][ T1347] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.619182][ T1347] usb 5-1: config 8 has an invalid interface number: 198 but max is 0 [ 104.622658][ T1347] usb 5-1: config 8 has no interface number 0 [ 104.625452][ T1347] usb 5-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 104.632660][ T5742] Bluetooth: hci1: Malformed Event: 0x13 [ 104.636782][ T1347] usb 5-1: string descriptor 0 read error: -22 [ 104.639535][ T1347] usb 5-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 104.643174][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.651481][ T6756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.823440][ T4906] usb 8-1: usb_control_msg returned -32 [ 104.826109][ T4906] usbtmc 8-1:16.0: can't read capabilities [ 104.891387][ T6756] hfs: unable to load iocharset "io#harset" [ 104.937283][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 104.937309][ T40] audit: type=1400 audit(1778638553.323:758): avc: denied { read append } for pid=6776 comm="syz.1.253" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 104.952679][ T40] audit: type=1400 audit(1778638553.323:759): avc: denied { open } for pid=6776 comm="syz.1.253" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 104.963291][ T40] audit: type=1400 audit(1778638553.323:760): avc: denied { ioctl } for pid=6776 comm="syz.1.253" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 104.974984][ T40] audit: type=1400 audit(1778638553.333:761): avc: denied { map } for pid=6776 comm="syz.1.253" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 104.986188][ T40] audit: type=1400 audit(1778638553.333:762): avc: denied { write execute } for pid=6776 comm="syz.1.253" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.053314][ T6784] __nla_validate_parse: 8 callbacks suppressed [ 105.053334][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 105.060192][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 105.381442][ T6793] usbtmc 8-1:16.0: INITIATE_CLEAR returned 0 [ 105.384591][ T6791] Trying to write to read-only block-device nullb0 [ 105.399792][ T40] audit: type=1400 audit(1778638553.783:763): avc: denied { sqpoll } for pid=6790 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 105.585532][ T1044] usb 8-1: USB disconnect, device number 5 [ 106.073850][ T1006] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 106.125865][ T6804] dlm: non-version read from control device 205 [ 106.238484][ T1006] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 106.242118][ T1006] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 11113, setting to 64 [ 106.249902][ T1006] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.253147][ T1006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.256910][ T1006] usb 7-1: Product: 繮⛟ᎆ淕Ɔ㇅̘⶟扼괻㧤눱á”㩾稘朗ጞ蘴℠[ 106.261113][ T1006] usb 7-1: Manufacturer: ж [ 106.262827][ T1006] usb 7-1: SerialNumber: 샘ꡄ络䢗꧔ë¼Æ§éŽ„룃ꊭ॰葠⎃籥牳꩚褉΄ᤈá¬â­¹í…’â¿î°®ë”Ÿë¸é«²ã˜ºîŒâ‹ˆæ¥î¡Ÿï§Žî–¦é¤ºä¤ë…즢ᦾ巚쪑寖蒒뼯ﰅ䯨ඡ㴛⌱므䈱弄á·ê©¢ç¬—뿾הּ薎掽詙ࠒâ«ë¢…ç»ë¦­î´ [ 106.332777][ T6810] xt_HMARK: spi-set and port-set can't be combined [ 106.376764][ T6810] xt_ipcomp: unknown flags 1D [ 106.486183][ T1006] cdc_ncm 7-1:1.0: bind() failure [ 106.492875][ T1006] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 106.496187][ T1006] cdc_ncm 7-1:1.1: bind() failure [ 106.502635][ T1006] usb 7-1: USB disconnect, device number 4 [ 106.587168][ T40] audit: type=1400 audit(1778638554.973:764): avc: denied { ioctl } for pid=6815 comm="syz.3.267" path="socket:[14191]" dev="sockfs" ino=14191 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.717124][ T6822] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.727775][ T6822] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 107.184581][ T5886] usb 5-1: USB disconnect, device number 2 [ 107.191216][ T40] audit: type=1400 audit(1778638555.573:765): avc: denied { remount } for pid=6828 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.217923][ T6829] input: syz1 as /devices/virtual/input/input12 [ 107.227726][ T6831] x_tables: duplicate underflow at hook 2 [ 107.241200][ T40] audit: type=1400 audit(1778638555.623:766): avc: denied { getopt } for pid=6830 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.252898][ T40] audit: type=1400 audit(1778638555.623:767): avc: denied { ioctl } for pid=6830 comm="syz.1.274" path="socket:[17058]" dev="sockfs" ino=17058 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.307910][ T6836] /dev/sg0: Can't lookup blockdev [ 107.345327][ T6838] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 107.348886][ T6838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.398231][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 107.490669][ T6856] binder: 6854:6856 ioctl c0306201 200000000140 returned -22 [ 107.683666][ T6879] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.735921][ T6883] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 107.738869][ T6883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.742850][ T6883] vhci_hcd vhci_hcd.0: Device attached [ 107.823092][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.293'. [ 107.823465][ T6894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=6894 comm=syz.2.293 [ 107.902178][ T6896] bond2: entered promiscuous mode [ 107.919130][ T6885] vhci_hcd: connection closed [ 107.920633][ T1164] vhci_hcd vhci_hcd.1: stop threads [ 107.926481][ T1164] vhci_hcd vhci_hcd.1: release socket [ 107.931117][ T1164] vhci_hcd vhci_hcd.1: disconnect device [ 107.984733][ T5886] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 107.987965][ T5886] usb 39-1: enqueue for inactive port 0 [ 108.054426][ T5886] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 108.155590][ T6907] block device autoloading is deprecated and will be removed. [ 108.196041][ T6915] openvswitch: netlink: IPv6 tunnel dst address is zero [ 108.196085][ T6914] openvswitch: netlink: IPv6 tunnel dst address is zero [ 108.228655][ T6914] usb usb3: usbfs: process 6914 (syz.2.299) did not claim interface 0 before use [ 108.367910][ T6925] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 108.390875][ T6929] fuse: Bad value for 'fd' [ 108.398701][ T6929] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 108.425259][ T6925] program syz.2.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.427174][ T6932] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 108.471731][ T6932] bond1: entered promiscuous mode [ 108.474950][ T6932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.481145][ T6937] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.303'. [ 108.493447][ T6932] vlan2: entered allmulticast mode [ 108.494644][ T6936] netlink: 124 bytes leftover after parsing attributes in process `syz.3.306'. [ 108.496774][ T6932] bond1: entered allmulticast mode [ 108.500249][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 108.526456][ T1133] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 108.529595][ T1133] ata1.00: irq_stat 0x40000000 [ 108.531716][ T1133] ata1.00: failed command: ZAC MANAGEMENT OUT [ 108.535406][ T1133] ata1.00: cmd 9f/01:00:60:00:00/00:00:00:00:00/40 tag 21 [ 108.535406][ T1133] res 41/04:00:60:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 108.543545][ T1133] ata1.00: status: { DRDY ERR } [ 108.545920][ T1133] ata1.00: error: { ABRT } [ 108.613677][ T6952] netlink: 104 bytes leftover after parsing attributes in process `syz.0.310'. [ 108.636565][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 108.669701][ T6954] fuse: Bad value for 'group_id' [ 108.671624][ T6954] fuse: Bad value for 'group_id' [ 108.686721][ T6951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45374 sclass=netlink_route_socket pid=6951 comm=syz.3.311 [ 108.881221][ T6968] loop2: detected capacity change from 0 to 7 [ 108.899121][ T6968] Dev loop2: unable to read RDB block 7 [ 108.904596][ T6968] loop2: unable to read partition table [ 108.908476][ T6968] loop2: partition table beyond EOD, truncated [ 108.911226][ T6968] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.143957][ T5845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.200370][ T6982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6982 comm=syz.2.321 [ 109.293835][ T5845] usb 5-1: Using ep0 maxpacket: 8 [ 109.299928][ T5845] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 109.304772][ T5845] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.308658][ T5845] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.312782][ T5845] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.317315][ T5845] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.323812][ T5845] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.326984][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.343910][ T845] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 109.513449][ T845] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 109.520056][ T845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.522942][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 109.523986][ T845] usb 8-1: Product: syz [ 109.524005][ T845] usb 8-1: Manufacturer: syz [ 109.524017][ T845] usb 8-1: SerialNumber: syz [ 109.533983][ T845] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 109.538396][ T5845] usb 5-1: usb_control_msg returned -32 [ 109.540468][ T5845] usbtmc 5-1:16.0: can't read capabilities [ 109.600614][ T6992] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.624232][ T5888] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 109.837486][ T7006] binder: transaction release 24 bad handle 1, ret = -22 [ 109.860806][ T5886] usb 8-1: USB disconnect, device number 6 [ 110.109391][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 110.109409][ T40] audit: type=1400 audit(1778638558.493:783): avc: denied { create } for pid=7018 comm="syz.3.334" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.134263][ T40] audit: type=1400 audit(1778638558.523:784): avc: denied { unlink } for pid=5750 comm="syz-executor" name="file0" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.173211][ T7024] netlink: 124 bytes leftover after parsing attributes in process `syz.3.335'. [ 110.219590][ T7025] netlink: 256 bytes leftover after parsing attributes in process `syz.2.333'. [ 110.223028][ T7025] netlink: 56 bytes leftover after parsing attributes in process `syz.2.333'. [ 110.364106][ T7029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.338'. [ 110.641153][ T40] audit: type=1400 audit(1778638559.023:785): avc: denied { accept } for pid=7037 comm="syz.1.340" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.673928][ T5888] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 110.680897][ T5888] ath9k_htc: Failed to initialize the device [ 110.690128][ T5886] usb 8-1: ath9k_htc: USB layer deinitialized [ 110.729687][ T7046] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 110.981983][ T40] audit: type=1400 audit(1778638559.363:786): avc: denied { setopt } for pid=7057 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.665523][ T40] audit: type=1400 audit(1778638560.053:787): avc: denied { setattr } for pid=7088 comm="syz.3.350" name="sequencer2" dev="devtmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 111.722863][ T40] audit: type=1400 audit(1778638560.103:788): avc: denied { read } for pid=7097 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.779095][ T40] audit: type=1400 audit(1778638560.163:789): avc: denied { bind } for pid=7097 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.829682][ T40] audit: type=1400 audit(1778638560.213:790): avc: denied { write } for pid=7102 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.840374][ T40] audit: type=1400 audit(1778638560.223:791): avc: denied { setopt } for pid=7097 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.939960][ T5886] usb 5-1: USB disconnect, device number 3 [ 111.966705][ T7114] overlayfs: overlapping lowerdir path [ 111.983175][ T7114] overlayfs: maximum fs stacking depth exceeded [ 111.998268][ T7114] overlayfs: maximum fs stacking depth exceeded [ 112.001535][ T7114] overlayfs: maximum fs stacking depth exceeded [ 112.005635][ T7114] overlayfs: maximum fs stacking depth exceeded [ 112.009186][ T7114] overlayfs: maximum fs stacking depth exceeded [ 112.011869][ T7114] overlayfs: maximum fs stacking depth exceeded [ 112.015927][ T7114] overlayfs: maximum fs stacking depth exceeded [ 112.018578][ T7114] overlayfs: maximum fs stacking depth exceeded [ 112.021352][ T7114] overlayfs: maximum fs stacking depth exceeded [ 112.127003][ T7119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=254 sclass=netlink_route_socket pid=7119 comm=syz.3.360 [ 112.129554][ T40] audit: type=1400 audit(1778638560.513:792): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 112.170710][ T7121] netlink: 'syz.0.361': attribute type 2 has an invalid length. [ 112.609161][ T7128] SELinux: policydb string does not match my string SE Linux [ 112.614922][ T7128] SELinux: failed to load policy [ 112.780276][ T7142] bridge_slave_1: left allmulticast mode [ 112.781881][ T7142] bridge_slave_1: left promiscuous mode [ 112.794790][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.799252][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 112.806003][ T7142] bridge_slave_0: left allmulticast mode [ 112.808097][ T7142] bridge_slave_0: left promiscuous mode [ 112.810184][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.817889][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 112.821379][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.365'. [ 112.826186][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.365'. [ 112.831094][ T7149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52510 sclass=netlink_route_socket pid=7149 comm=syz.1.371 [ 112.925016][ T7150] vlan2: entered promiscuous mode [ 112.927006][ T7150] bridge0: entered promiscuous mode [ 113.000432][ T7161] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 113.074004][ T7165] can: request_module (can-proto-0) failed. [ 113.080152][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.082745][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.094907][ T7165] Unsupported ieee802154 address type: 0 [ 113.099883][ T7168] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 113.208699][ T7174] syzkaller0: entered promiscuous mode [ 113.211910][ T7174] syzkaller0: entered allmulticast mode [ 113.253869][ T1044] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.327315][ T7180] netlink: 'syz.3.380': attribute type 1 has an invalid length. [ 113.340785][ T7180] bond2: entered promiscuous mode [ 113.343300][ T7180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.350728][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.380'. [ 113.355533][ T7180] bond2: entered allmulticast mode [ 113.365963][ T7180] bond2: (slave bridge2): making interface the new active one [ 113.368888][ T7180] bridge2: entered promiscuous mode [ 113.371667][ T7180] bridge2: entered allmulticast mode [ 113.374576][ T7180] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 113.404336][ T1044] usb 5-1: Using ep0 maxpacket: 32 [ 113.411613][ T7161] netlink: 'syz.0.374': attribute type 4 has an invalid length. [ 113.428909][ T7187] fuse: blksize only supported for fuseblk [ 113.470351][ T7186] (syz.3.382,7186,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 113.474002][ T7186] (syz.3.382,7186,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 113.476800][ T7188] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 113.480023][ T7186] (syz.3.382,7186,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 113.493905][ T7186] (syz.3.382,7186,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 113.521938][ T1044] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.529667][ T1044] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 113.535541][ T1044] usb 5-1: can't read configurations, error -71 [ 113.786372][ T7208] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 113.872655][ T7204] netlink: 48 bytes leftover after parsing attributes in process `syz.2.386'. [ 114.168727][ T7216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.194033][ T7216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.269591][ T7223] input: syz1 as /devices/virtual/input/input13 [ 114.366335][ T7223] efs: cannot read volume header [ 114.403413][ T7223] bond2: entered promiscuous mode [ 114.405865][ T7223] bond2: entered allmulticast mode [ 114.437405][ T7229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.441902][ T7229] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.465091][ T7229] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.509463][ T7229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.512833][ T7229] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.531551][ T7229] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.539368][ T7229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.542195][ T7229] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.550055][ T7229] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.971083][ T7293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.037530][ T83] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.042782][ T83] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.047069][ T83] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.051041][ T83] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.170513][ T7320] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.189012][ T7319] 9p: Could not find request transport: fd$rfdnï=h¯jÏ®?0x0000000000000005 [ 115.200062][ T7319] binder: 7318:7319 unknown command 0 [ 115.202376][ T7319] binder: 7318:7319 ioctl c0306201 200000000080 returned -22 [ 115.210493][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 115.210511][ T40] audit: type=1400 audit(2000000002.509:826): avc: denied { write } for pid=7318 comm="syz.3.419" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.318067][ T40] audit: type=1400 audit(2000000002.619:827): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 115.497619][ T7340] kvm: kvm [7338]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 115.502554][ T7340] kvm: kvm [7338]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 115.503074][ T7351] syzkaller0: entered promiscuous mode [ 115.509184][ T7351] syzkaller0: entered allmulticast mode [ 115.693895][ T5886] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 115.801675][ T7363] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 115.805000][ T7363] [U] J"—e:ÀÆ" [ 115.832266][ T40] audit: type=1400 audit(2000000003.129:828): avc: denied { ioctl } for pid=7364 comm="syz.3.434" path="socket:[17966]" dev="sockfs" ino=17966 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 115.864802][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 115.870406][ T5886] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 115.878820][ T5886] usb 6-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.885477][ T5886] usb 6-1: config 1 interface 0 has no altsetting 0 [ 115.895601][ T5886] usb 6-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.40 [ 115.899206][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.901943][ T5886] usb 6-1: Product: syz [ 115.903420][ T5886] usb 6-1: Manufacturer: syz [ 115.905641][ T5886] usb 6-1: SerialNumber: syz [ 115.947383][ T7371] ALSA: seq fatal error: cannot create timer (-19) [ 115.955752][ T40] audit: type=1400 audit(2000000003.259:829): avc: denied { listen } for pid=7356 comm="syz.2.432" lport=40892 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.970052][ T40] audit: type=1400 audit(2000000003.269:830): avc: denied { accept } for pid=7356 comm="syz.2.432" lport=40892 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.983364][ T7374] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 115.988249][ T7374] overlayfs: overlapping lowerdir path [ 116.006720][ T40] audit: type=1400 audit(2000000003.309:831): avc: denied { bind } for pid=7356 comm="syz.2.432" lport=40892 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.017640][ T40] audit: type=1400 audit(2000000003.319:832): avc: denied { setopt } for pid=7356 comm="syz.2.432" lport=40892 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.056247][ T7378] mmap: syz.0.439 (7378): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 116.072718][ T7378] batman_adv: batadv0: Adding interface: dummy0 [ 116.075703][ T7378] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.086145][ T7378] batman_adv: batadv0: Interface activated: dummy0 [ 116.104712][ T7380] binder: 7379:7380 ioctl 530d 200000000e40 returned -22 [ 116.131610][ T5886] usbhid 6-1:1.0: can't add hid device: -71 [ 116.134438][ T5886] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 116.138306][ T5886] usb 6-1: USB disconnect, device number 3 [ 116.196230][ T40] audit: type=1400 audit(2000000003.489:833): avc: denied { ioctl } for pid=7382 comm="syz.0.440" path="socket:[19059]" dev="sockfs" ino=19059 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.205291][ T7383] batadv0: mtu less than device minimum [ 116.210298][ T7383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.216267][ T7383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.220509][ T7383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.225006][ T7383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.230331][ T7383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.234653][ T7383] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.483871][ T7394] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.497650][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.505011][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.508617][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.511267][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.514466][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.516940][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.520369][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.523330][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.524666][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.524736][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.527050][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.535025][ T4906] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 116.554808][ T4906] hid-generic 0006:0004:0009.0002: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 116.593812][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.785832][ T40] audit: type=1400 audit(2000000004.089:834): avc: denied { write } for pid=7405 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 116.837652][ T5742] Bluetooth: hci2: unknown advertising packet type: 0xd2 [ 116.912866][ T7415] __nla_validate_parse: 16 callbacks suppressed [ 116.912892][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 116.928405][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 116.932752][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 116.937602][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 116.966294][ T7424] binder: BINDER_SET_CONTEXT_MGR already set [ 116.979149][ T7424] binder: 7414:7424 ioctl 4018620d 200000000040 returned -16 [ 117.054521][ T7428] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 117.140213][ T7434] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 117.205608][ T7437] netlink: 68 bytes leftover after parsing attributes in process `syz.0.455'. [ 117.279292][ T7440] cgroup: No subsys list or none specified [ 117.284504][ T7440] cgroup: No subsys list or none specified [ 117.329867][ T7442] warning: `syz.1.458' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.364691][ T7447] netlink: 'syz.3.459': attribute type 4 has an invalid length. [ 117.370001][ T40] audit: type=1400 audit(2000000004.669:835): avc: denied { read } for pid=7446 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.433148][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 117.593239][ T7452] netlink: 'syz.1.461': attribute type 7 has an invalid length. [ 117.595942][ T7452] netlink: 'syz.1.461': attribute type 5 has an invalid length. [ 117.598384][ T7452] netlink: 17 bytes leftover after parsing attributes in process `syz.1.461'. [ 117.930689][ T7467] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 118.001291][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.465'. [ 118.230993][ T7485] xt_l2tp: v2 tid > 0xffff: 2031748 [ 118.237173][ T7487] overlayfs: unescaped trailing colons in lowerdir mount option. [ 118.266684][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.470'. [ 118.304212][ T7490] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 118.309444][ T7490] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 118.433601][ T7500] xt_cgroup: invalid path, errno=-2 [ 118.593994][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.603975][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.683864][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.826155][ T7515] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 118.829783][ T7515] netlink: 'syz.0.482': attribute type 2 has an invalid length. [ 119.046862][ T7522] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 119.061361][ T7522] bond3: entered promiscuous mode [ 119.063444][ T7522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.280558][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 120.162656][ T7604] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 120.165181][ T7604] overlayfs: failed to set xattr on upper [ 120.168428][ T7604] overlayfs: ...falling back to redirect_dir=nofollow. [ 120.170710][ T7604] overlayfs: ...falling back to index=off. [ 120.173032][ T7604] overlayfs: ...falling back to uuid=null. [ 120.178793][ T7604] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 120.181904][ T7604] overlayfs: maximum fs stacking depth exceeded [ 120.214401][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 120.214417][ T40] audit: type=1400 audit(2000000007.509:846): avc: denied { connect } for pid=7606 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.255963][ T7598] ALSA: mixer_oss: invalid OSS volume 'f7ÍëвBM©³ÝÖôb€kr÷¡°[ÆkçO\. E' [ 120.258786][ T7598] ALSA: mixer_oss: invalid OSS volume '' [ 120.420777][ T7618] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 120.438767][ T7619] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 120.444296][ T7619] bond3 (unregistering): Released all slaves [ 120.444515][ T5820] IPVS: starting estimator thread 0... [ 120.457577][ T7618] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 120.544458][ T7623] IPVS: using max 45 ests per chain, 108000 per kthread [ 120.600052][ T40] audit: type=1400 audit(2000000007.899:847): avc: denied { ioctl } for pid=7627 comm="syz.0.511" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 120.673993][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.676423][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.696245][ T7637] 9p: Bad value for 'rfdno' [ 120.753839][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.803586][ T40] audit: type=1400 audit(2000000008.099:848): avc: denied { append } for pid=7645 comm="syz.2.517" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 120.812850][ T7646] netlink: 'syz.2.517': attribute type 8 has an invalid length. [ 120.927335][ T40] audit: type=1400 audit(2000000008.229:849): avc: denied { read } for pid=7652 comm="syz.1.520" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.934746][ T40] audit: type=1400 audit(2000000008.229:850): avc: denied { ioctl } for pid=7652 comm="syz.1.520" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x6e84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.943205][ T40] audit: type=1400 audit(2000000008.239:851): avc: denied { create } for pid=7652 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.984031][ T845] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 121.025748][ T7669] overlay: Unknown parameter 'yz0' [ 121.036677][ T7669] nbd: couldn't find device at index -2127233020 [ 121.101003][ T40] audit: type=1400 audit(2000000008.399:852): avc: denied { watch } for pid=7670 comm="syz.2.524" path="/128/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 121.111627][ T7671] vlan0: entered promiscuous mode [ 121.113440][ T40] audit: type=1400 audit(2000000008.409:853): avc: denied { watch_sb watch_reads } for pid=7670 comm="syz.2.524" path="/128/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 121.125073][ T40] audit: type=1400 audit(2000000008.409:854): avc: denied { read } for pid=7672 comm="syz.3.525" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.133658][ T40] audit: type=1400 audit(2000000008.409:855): avc: denied { open } for pid=7672 comm="syz.3.525" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.146679][ T845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.153928][ T845] usb 5-1: config 0 has no interfaces? [ 121.164498][ T845] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 121.172120][ T845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.175942][ T845] usb 5-1: Product: syz [ 121.177474][ T7673] loop4: detected capacity change from 0 to 2640 [ 121.177730][ T845] usb 5-1: Manufacturer: syz [ 121.180351][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.181402][ T845] usb 5-1: SerialNumber: syz [ 121.184704][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.191087][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.194023][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.197634][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.198351][ T845] usb 5-1: config 0 descriptor?? [ 121.200391][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.205634][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.208765][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.211662][ T7673] ldm_validate_partition_table(): Disk read failed. [ 121.214574][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.217617][ T7673] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.220422][ T7673] Dev loop4: unable to read RDB block 0 [ 121.225822][ T7673] loop4: unable to read partition table [ 121.237647][ T7673] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 121.350272][ T7690] bridge4: entered promiscuous mode [ 121.354067][ T7690] bridge4: entered allmulticast mode [ 121.363934][ T7690] team0: Port device bridge4 added [ 121.380781][ T7690] bridge0: port 3(team0) entered blocking state [ 121.398804][ T7690] bridge0: port 3(team0) entered disabled state [ 121.401107][ T7690] team0: entered allmulticast mode [ 121.402779][ T7690] team_slave_0: entered allmulticast mode [ 121.404784][ T7690] team_slave_1: entered allmulticast mode [ 121.417488][ T7690] team0: entered promiscuous mode [ 121.419406][ T7690] team_slave_0: entered promiscuous mode [ 121.421674][ T7690] team_slave_1: entered promiscuous mode [ 121.424946][ T7690] bridge0: port 3(team0) entered blocking state [ 121.428174][ T7690] bridge0: port 3(team0) entered forwarding state [ 121.436820][ T7693] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.531' resets device [ 121.550336][ T7702] random: crng reseeded on system resumption [ 121.585971][ T7705] netlink: 'syz.3.536': attribute type 30 has an invalid length. [ 121.618603][ T7710] syzkaller0: entered promiscuous mode [ 121.620700][ T7710] syzkaller0: entered allmulticast mode [ 121.915990][ T7724] (syz.1.542,7724,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 121.926143][ T7724] (syz.1.542,7724,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 121.942791][ T7725] (syz.1.542,7725,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 121.946856][ T7725] (syz.1.542,7725,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 122.085987][ T7737] bond3 (unregistering): Released all slaves [ 122.280731][ T7745] __nla_validate_parse: 8 callbacks suppressed [ 122.280747][ T7745] netlink: 52 bytes leftover after parsing attributes in process `syz.3.547'. [ 122.402829][ T7748] program syz.1.549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.464850][ T7762] usb usb3: usbfs: process 7762 (syz.2.551) did not claim interface 0 before use [ 122.605446][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.613535][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.618110][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.621567][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.625287][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.628777][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.632094][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.638261][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.642759][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.646089][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.649413][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.653562][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.656841][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.659847][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.662808][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.666252][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.669440][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.672570][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.675781][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.678803][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.681757][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.685190][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.688753][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.691864][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.695144][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.697648][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.700280][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.702881][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.705616][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.708139][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.710617][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.713085][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.715612][ T5742] Bluetooth: hci3: unexpected event for opcode 0x201c [ 122.718938][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.559'. [ 122.724668][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.559'. [ 122.793586][ T7786] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 122.796510][ T7786] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 122.799148][ T7786] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 122.801718][ T7786] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 123.095615][ T7805] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.565'. [ 123.100037][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.565'. [ 123.152111][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 123.743182][ T7824] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 123.745971][ T7824] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 123.750301][ T7824] vhci_hcd vhci_hcd.0: Device attached [ 123.754509][ T7825] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 123.756485][ T1044] usb 5-1: USB disconnect, device number 6 [ 123.762284][ T83] vhci_hcd vhci_hcd.2: stop threads [ 123.765459][ T83] vhci_hcd vhci_hcd.2: release socket [ 123.768518][ T83] vhci_hcd vhci_hcd.2: disconnect device [ 124.155402][ T1044] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 124.241741][ T7848] pimreg: entered allmulticast mode [ 124.313278][ T7851] vlan2: entered allmulticast mode [ 124.327475][ T1044] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.330314][ T1044] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.333225][ T1044] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.337885][ T1044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.341234][ T1044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 124.344927][ T1044] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.349183][ T1044] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.352469][ T1044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.361539][ T1044] usb 5-1: config 0 descriptor?? [ 124.364450][ T7829] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.397876][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 124.400532][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 124.401086][ T7863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.409210][ T7863] IPv6: NLM_F_CREATE should be set when creating new route [ 124.411471][ T7863] IPv6: NLM_F_CREATE should be set when creating new route [ 124.415047][ T7864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.423203][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 124.426839][ T7863] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 124.429651][ T7863] netlink: 'syz.3.583': attribute type 2 has an invalid length. [ 124.469397][ T7872] cgroup: name respecified [ 124.544151][ T7877] uprobe: syz.2.587:7877 failed to unregister, leaking uprobe [ 124.571376][ T1044] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.698252][ T7888] binder: 7885:7888 ioctl c0306201 0 returned -14 [ 124.772207][ C0] usblp0: nonzero read bulk status received: -71 [ 124.774961][ T7829] usblp0: error -71 reading from printer [ 124.781433][ C0] usblp0: nonzero read bulk status received: -71 [ 124.786662][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.572'. [ 124.804329][ T5886] IPVS: starting estimator thread 0... [ 124.835526][ T1044] usb 5-1: USB disconnect, device number 7 [ 124.846158][ T1044] usblp0: removed [ 124.903842][ T7901] IPVS: using max 45 ests per chain, 108000 per kthread [ 125.474807][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 125.474830][ T40] audit: type=1400 audit(2000000012.779:895): avc: denied { map } for pid=7954 comm="syz.1.611" path="socket:[24709]" dev="sockfs" ino=24709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 125.569011][ T7964] /dev/sg0: Can't lookup blockdev [ 125.573842][ T5820] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 125.630166][ T7968] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 125.654590][ T40] audit: type=1400 audit(2000000012.959:896): avc: denied { read } for pid=7965 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.666850][ T7968] team0 (unregistering): Port device team_slave_0 removed [ 125.682581][ T7968] team0 (unregistering): Port device team_slave_1 removed [ 125.723843][ T5820] usb 8-1: Using ep0 maxpacket: 32 [ 125.727655][ T5820] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 125.732526][ T5820] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 125.738157][ T5820] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.743270][ T5820] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 125.751276][ T5820] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 125.755701][ T5820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.759235][ T5820] usb 8-1: Product: syz [ 125.760914][ T5820] usb 8-1: Manufacturer: syz [ 125.762483][ T5820] usb 8-1: SerialNumber: syz [ 125.780354][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 125.783854][ T5820] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input15 [ 125.945874][ T40] audit: type=1400 audit(2000000013.249:897): avc: denied { map } for pid=7972 comm="syz.2.615" path="socket:[23995]" dev="sockfs" ino=23995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 125.993785][ T5820] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 125.996621][ T5820] (id 0x00) [ 126.043897][ T5820] rc_core: IR keymap rc-imon-pad not found [ 126.045992][ T5820] Registered IR keymap rc-empty [ 126.048647][ T5820] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 126.052738][ T5820] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 126.075761][ T5820] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 126.080319][ T5820] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input16 [ 126.097632][ T5820] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:7> initialized [ 126.142342][ T40] audit: type=1400 audit(2000000013.439:898): avc: denied { bind } for pid=7982 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.144490][ T7983] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 126.175737][ T40] audit: type=1400 audit(2000000013.479:899): avc: denied { mounton } for pid=7984 comm="syz.2.618" path="/" dev="autofs" ino=24078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 126.223911][ T40] audit: type=1400 audit(2000000013.519:900): avc: denied { write } for pid=7988 comm="syz.1.619" name="/" dev="9p" ino=83099703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.235595][ T7989] netfs: Couldn't get user pages (rc=-14) [ 126.666947][ T40] audit: type=1400 audit(2000000013.969:901): avc: denied { execute } for pid=8002 comm="syz.2.624" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 126.709061][ T40] audit: type=1400 audit(2000000014.009:902): avc: denied { read } for pid=8007 comm="syz.0.625" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 126.956627][ T8025] net_ratelimit: 14 callbacks suppressed [ 126.956650][ T8025] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.972118][ T8025] bridge2: entered promiscuous mode [ 126.976486][ T8025] bridge2: entered allmulticast mode [ 126.976667][ T24] usb 8-1: USB disconnect, device number 7 [ 127.285576][ T8046] netlink: 'syz.3.639': attribute type 5 has an invalid length. [ 127.348811][ T40] audit: type=1400 audit(2000000014.649:903): avc: denied { mount } for pid=8045 comm="syz.3.639" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.351787][ T8047] overlay: Bad value for 'verity' [ 127.358190][ T8047] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.393844][ T1044] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 127.414829][ T8047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.451099][ T40] audit: type=1400 audit(2000000014.749:904): avc: denied { unmount } for pid=5750 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.563885][ T1044] usb 7-1: Using ep0 maxpacket: 8 [ 127.566950][ T1044] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 127.570893][ T1044] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.574433][ T1044] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.577840][ T1044] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.581909][ T1044] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.585462][ T1044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.629612][ T8058] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.659471][ T8062] /dev/sg0: Can't lookup blockdev [ 127.661678][ T8060] orangefs_devreq_open: device cannot be opened in blocking mode [ 127.796536][ T1044] usb 7-1: usb_control_msg returned -32 [ 127.798446][ T1044] usbtmc 7-1:16.0: can't read capabilities [ 128.168238][ T8111] : entered promiscuous mode [ 129.311881][ T8132] __nla_validate_parse: 6 callbacks suppressed [ 129.311900][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 129.982494][ T8138] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.659'. [ 130.023845][ T8144] FAULT_INJECTION: forcing a failure. [ 130.023845][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.028197][ T8144] CPU: 1 UID: 0 PID: 8144 Comm: syz.0.661 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.028216][ T8144] Tainted: [L]=SOFTLOCKUP [ 130.028220][ T8144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.028226][ T8144] Call Trace: [ 130.028252][ T8144] [ 130.028257][ T8144] dump_stack_lvl+0x100/0x190 [ 130.028328][ T8144] should_fail_ex.cold+0x5/0xa [ 130.028353][ T8144] _copy_from_user+0x2e/0xd0 [ 130.028392][ T8144] copy_msghdr_from_user+0x9f/0x4f0 [ 130.028433][ T8144] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 130.028453][ T8144] ___sys_sendmsg+0x106/0x1e0 [ 130.028467][ T8144] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.028496][ T8144] __sys_sendmsg+0x170/0x220 [ 130.028507][ T8144] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.028532][ T8144] ? rcu_is_watching+0x12/0xc0 [ 130.028573][ T8144] do_syscall_64+0x10b/0xf80 [ 130.028624][ T8144] ? clear_bhb_loop+0x40/0x90 [ 130.028637][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.028648][ T8144] RIP: 0033:0x7f877399ce59 [ 130.028659][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.028669][ T8144] RSP: 002b:00007f87748fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.028681][ T8144] RAX: ffffffffffffffda RBX: 00007f8773c15fa0 RCX: 00007f877399ce59 [ 130.028687][ T8144] RDX: 0000000000000084 RSI: 0000200000000200 RDI: 0000000000000004 [ 130.028693][ T8144] RBP: 00007f87748fb090 R08: 0000000000000000 R09: 0000000000000000 [ 130.028700][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.028705][ T8144] R13: 00007f8773c16038 R14: 00007f8773c15fa0 R15: 00007ffefaebd8d8 [ 130.028719][ T8144] [ 130.135944][ T4906] usb 7-1: USB disconnect, device number 5 [ 130.221471][ T8160] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 130.224432][ T8160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.240522][ T8155] dvmrp0: entered allmulticast mode [ 130.783894][ T1044] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 130.923880][ T1044] usb 7-1: device descriptor read/64, error -71 [ 131.064916][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 131.064930][ T40] audit: type=1400 audit(2000000018.369:917): avc: denied { connect } for pid=8200 comm="syz.0.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.107170][ T8206] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 131.185894][ T1044] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 131.261626][ T8214] hub 8-0:1.0: USB hub found [ 131.270056][ T8214] hub 8-0:1.0: 1 port detected [ 131.281821][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 131.288147][ T40] audit: type=1400 audit(2000000018.589:918): avc: denied { append } for pid=8213 comm="syz.3.681" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 131.336085][ T1044] usb 7-1: device descriptor read/64, error -71 [ 131.377542][ T8216] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 131.409367][ T40] audit: type=1400 audit(2000000018.709:919): avc: denied { ioctl } for pid=8219 comm="syz.3.683" path="socket:[22427]" dev="sockfs" ino=22427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 131.420482][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.683'. [ 131.444534][ T1044] usb usb7-port1: attempt power cycle [ 131.451705][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 131.783879][ T1044] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 131.804642][ T1044] usb 7-1: device descriptor read/8, error -71 [ 132.053862][ T1044] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 132.074600][ T1044] usb 7-1: device descriptor read/8, error -71 [ 132.184702][ T1044] usb usb7-port1: unable to enumerate USB device [ 132.289317][ T8227] bond0: (slave bond_slave_0): Releasing backup interface [ 132.329883][ T8227] bond0: (slave bond_slave_1): Releasing backup interface [ 132.375196][ T8227] team0: Port device team_slave_0 removed [ 132.382394][ T8227] team0: Port device team_slave_1 removed [ 132.386305][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.390463][ T8227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.402854][ T8227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.560396][ T8244] cifs: Unknown parameter 'KæÖî_+‹ÛòQ)Ùç†ø¥Ì7¸ÑÔõª [ 132.677185][ T8249] dump_stack_lvl+0x100/0x190 [ 132.677205][ T8249] should_fail_ex.cold+0x5/0xa [ 132.677221][ T8249] _copy_from_iter+0x1f4/0x1690 [ 132.677242][ T8249] ? __asan_memset+0x23/0x50 [ 132.677274][ T8249] ? __pfx__copy_from_iter+0x10/0x10 [ 132.677290][ T8249] ? __pfx___alloc_skb+0x10/0x10 [ 132.677314][ T8249] netlink_sendmsg+0x808/0xda0 [ 132.677344][ T8249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.677358][ T8249] ? __might_fault+0x50/0x140 [ 132.677380][ T8249] ____sys_sendmsg+0x9e1/0xb70 [ 132.677393][ T8249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.677409][ T8249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.677429][ T8249] ___sys_sendmsg+0x190/0x1e0 [ 132.677444][ T8249] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.677474][ T8249] __sys_sendmsg+0x170/0x220 [ 132.677485][ T8249] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.677502][ T8249] ? rcu_is_watching+0x12/0xc0 [ 132.677528][ T8249] do_syscall_64+0x10b/0xf80 [ 132.677544][ T8249] ? clear_bhb_loop+0x40/0x90 [ 132.677558][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.677569][ T8249] RIP: 0033:0x7fbe4019ce59 [ 132.677579][ T8249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.677590][ T8249] RSP: 002b:00007fbe40fea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.677602][ T8249] RAX: ffffffffffffffda RBX: 00007fbe40415fa0 RCX: 00007fbe4019ce59 [ 132.677609][ T8249] RDX: 0000000000000084 RSI: 0000200000000200 RDI: 0000000000000004 [ 132.677615][ T8249] RBP: 00007fbe40fea090 R08: 0000000000000000 R09: 0000000000000000 [ 132.677622][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.677628][ T8249] R13: 00007fbe40416038 R14: 00007fbe40415fa0 R15: 00007ffee40a9838 [ 132.677641][ T8249] [ 132.892610][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.695'. [ 133.422863][ T40] audit: type=1400 audit(2000000020.719:920): avc: denied { setopt } for pid=8257 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.433317][ T8258] overlayfs: missing 'lowerdir' [ 133.551216][ T40] audit: type=1400 audit(2000000020.849:921): avc: denied { append } for pid=8261 comm="syz.2.698" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 133.598026][ T8264] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.604460][ T8264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.606851][ T8264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.651761][ T8269] 9pnet_virtio: no channels available for device syz [ 133.711881][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 133.775531][ T8281] can: request_module (can-proto-0) failed. [ 133.917425][ T8286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.705'. [ 134.043923][ T5888] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 134.174737][ T5888] usb 8-1: device descriptor read/64, error -71 [ 134.326541][ T40] audit: type=1400 audit(2000000021.629:922): avc: denied { mount } for pid=8296 comm="syz.2.710" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 134.330410][ T8297] SQUASHFS error: Failed to read block 0x0: -5 [ 134.339051][ T8297] unable to read squashfs_super_block [ 134.342129][ T40] audit: type=1400 audit(2000000021.639:923): avc: denied { remount } for pid=8296 comm="syz.2.710" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 134.355276][ T40] audit: type=1400 audit(2000000021.659:924): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 134.423799][ T5888] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 134.475604][ T8303] FAULT_INJECTION: forcing a failure. [ 134.475604][ T8303] name failslab, interval 1, probability 0, space 0, times 0 [ 134.480287][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.2.712 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.480319][ T8303] Tainted: [L]=SOFTLOCKUP [ 134.480324][ T8303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.480335][ T8303] Call Trace: [ 134.480344][ T8303] [ 134.480351][ T8303] dump_stack_lvl+0x100/0x190 [ 134.480376][ T8303] should_fail_ex.cold+0x5/0xa [ 134.480392][ T8303] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 134.480410][ T8303] should_failslab+0xc2/0x120 [ 134.480424][ T8303] __kmalloc_noprof+0xe0/0x850 [ 134.480443][ T8303] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 134.480462][ T8303] genl_family_rcv_msg_doit+0xc7/0x300 [ 134.480479][ T8303] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 134.480499][ T8303] ? bpf_lsm_capable+0x9/0x10 [ 134.480511][ T8303] ? security_capable+0x80/0x260 [ 134.480542][ T8303] ? ns_capable+0xd2/0xf0 [ 134.480559][ T8303] genl_rcv_msg+0x560/0x800 [ 134.480576][ T8303] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.480591][ T8303] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 134.480631][ T8303] ? __pfx_nl80211_stop_ap+0x10/0x10 [ 134.480643][ T8303] ? __pfx_nl80211_post_doit+0x10/0x10 [ 134.480663][ T8303] netlink_rcv_skb+0x159/0x420 [ 134.480678][ T8303] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.480694][ T8303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.480713][ T8303] ? netlink_deliver_tap+0x1ae/0xcc0 [ 134.480728][ T8303] genl_rcv+0x28/0x40 [ 134.480742][ T8303] netlink_unicast+0x585/0x850 [ 134.480757][ T8303] ? __pfx_netlink_unicast+0x10/0x10 [ 134.480774][ T8303] netlink_sendmsg+0x8b0/0xda0 [ 134.480790][ T8303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.480803][ T8303] ? __might_fault+0x50/0x140 [ 134.480823][ T8303] ____sys_sendmsg+0x9e1/0xb70 [ 134.480837][ T8303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.480851][ T8303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.480870][ T8303] ___sys_sendmsg+0x190/0x1e0 [ 134.480885][ T8303] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.480915][ T8303] __sys_sendmsg+0x170/0x220 [ 134.480926][ T8303] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.480942][ T8303] ? rcu_is_watching+0x12/0xc0 [ 134.480961][ T8303] do_syscall_64+0x10b/0xf80 [ 134.480976][ T8303] ? clear_bhb_loop+0x40/0x90 [ 134.480990][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.481001][ T8303] RIP: 0033:0x7f55c3d9ce59 [ 134.481011][ T8303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.481026][ T8303] RSP: 002b:00007f55c4bc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.481038][ T8303] RAX: ffffffffffffffda RBX: 00007f55c4015fa0 RCX: 00007f55c3d9ce59 [ 134.481045][ T8303] RDX: 0000000000000084 RSI: 0000200000000200 RDI: 0000000000000004 [ 134.481051][ T8303] RBP: 00007f55c4bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 134.481057][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.481063][ T8303] R13: 00007f55c4016038 R14: 00007f55c4015fa0 R15: 00007ffdb40f7478 [ 134.481077][ T8303] [ 134.633809][ T5888] usb 8-1: device descriptor read/64, error -71 [ 134.744309][ T5888] usb usb8-port1: attempt power cycle [ 135.093834][ T5888] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 135.114219][ T5888] usb 8-1: device descriptor read/8, error -71 [ 135.363814][ T5888] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 135.384369][ T5888] usb 8-1: device descriptor read/8, error -71 [ 135.504189][ T5888] usb usb8-port1: unable to enumerate USB device [ 135.634496][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.634537][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.634634][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.756230][ T40] audit: type=1400 audit(2000000023.059:925): avc: denied { name_connect } for pid=8315 comm="syz.2.717" dest=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 135.853872][ T40] audit: type=1400 audit(2000000023.149:926): avc: denied { set_context_mgr } for pid=8317 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 135.856624][ T8318] binder: 8317:8318 ioctl c0306201 200000000080 returned -14 [ 135.866875][ T8318] binder: 8317:8318 ioctl c0306201 2000000003c0 returned -14 [ 135.966904][ T8324] syz.2.721: vmalloc error: size 18446744073699065859, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.975597][ T8324] CPU: 0 UID: 0 PID: 8324 Comm: syz.2.721 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.975634][ T8324] Tainted: [L]=SOFTLOCKUP [ 135.975641][ T8324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.975656][ T8324] Call Trace: [ 135.975663][ T8324] [ 135.975673][ T8324] dump_stack_lvl+0x100/0x190 [ 135.975700][ T8324] warn_alloc.cold+0x95/0x1c1 [ 135.975716][ T8324] ? __pfx_warn_alloc+0x10/0x10 [ 135.975734][ T8324] ? do_syscall_64+0x10b/0xf80 [ 135.975752][ T8324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.975768][ T8324] ? __lock_acquire+0x4a5/0x2630 [ 135.975786][ T8324] ? find_held_lock+0x2b/0x80 [ 135.975799][ T8324] ? avc_has_extended_perms+0x33a/0x1080 [ 135.975835][ T8324] ? avc_has_extended_perms+0x33a/0x1080 [ 135.975858][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.975909][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.975938][ T8324] __vmalloc_node_range_noprof+0x136c/0x1630 [ 135.975957][ T8324] ? rcu_is_watching+0x12/0xc0 [ 135.975976][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.975996][ T8324] ? trace_contention_end+0x122/0x170 [ 135.976014][ T8324] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 135.976054][ T8324] ? dvb_demux_do_ioctl+0x929/0x1200 [ 135.976075][ T8324] ? find_held_lock+0x2b/0x80 [ 135.976096][ T8324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.976121][ T8324] ? __pfx___mutex_lock+0x10/0x10 [ 135.976155][ T8324] ? tomoyo_path_number_perm+0x188/0x580 [ 135.976183][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976203][ T8324] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 135.976215][ T8324] __vmalloc_node_noprof+0xad/0xf0 [ 135.976235][ T8324] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 135.976248][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976268][ T8324] dvb_demux_do_ioctl+0x9e0/0x1200 [ 135.976283][ T8324] ? do_vfs_ioctl+0x226/0x13e0 [ 135.976297][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976314][ T8324] dvb_usercopy+0x167/0x340 [ 135.976331][ T8324] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 135.976347][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976367][ T8324] ? __pfx_dvb_usercopy+0x10/0x10 [ 135.976392][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976411][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976431][ T8324] ? selinux_file_ioctl+0x13b/0x290 [ 135.976449][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976466][ T8324] ? selinux_file_ioctl+0xb6/0x290 [ 135.976483][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976502][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976521][ T8324] dvb_demux_ioctl+0x29/0x40 [ 135.976538][ T8324] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 135.976555][ T8324] __x64_sys_ioctl+0x18e/0x210 [ 135.976569][ T8324] do_syscall_64+0x10b/0xf80 [ 135.976585][ T8324] ? clear_bhb_loop+0x40/0x90 [ 135.976599][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.976611][ T8324] RIP: 0033:0x7f55c3d9ce59 [ 135.976624][ T8324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.976635][ T8324] RSP: 002b:00007f55c4bc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.976648][ T8324] RAX: ffffffffffffffda RBX: 00007f55c4015fa0 RCX: 00007f55c3d9ce59 [ 135.976656][ T8324] RDX: ffffffffff600003 RSI: 0000000000006f2d RDI: 0000000000000005 [ 135.976664][ T8324] RBP: 00007f55c3e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 135.976672][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.976679][ T8324] R13: 00007f55c4016038 R14: 00007f55c4015fa0 R15: 00007ffdb40f7478 [ 135.976691][ T8324] ? __UNIQUE_ID_modinfo_717+0x63e527f5/0xffffffffffeca7f2 [ 135.976712][ T8324] [ 135.977529][ T8324] Mem-Info: [ 136.113449][ T8324] active_anon:25675 inactive_anon:4 isolated_anon:0 [ 136.113449][ T8324] active_file:21018 inactive_file:34478 isolated_file:0 [ 136.113449][ T8324] unevictable:1813 dirty:180 writeback:0 [ 136.113449][ T8324] slab_reclaimable:8977 slab_unreclaimable:72254 [ 136.113449][ T8324] mapped:24931 shmem:17843 pagetables:3543 [ 136.113449][ T8324] sec_pagetables:300 bounce:0 [ 136.113449][ T8324] kernel_misc_reclaimable:0 [ 136.113449][ T8324] free:444585 free_pcp:7309 free_cma:0 [ 136.113502][ T8324] Node 0 active_anon:102700kB inactive_anon:12kB active_file:83060kB inactive_file:137904kB unevictable:3716kB isolated(anon):0kB isolated(file):0kB mapped:99708kB dirty:720kB writeback:0kB shmem:67836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13440kB pagetables:10828kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 136.113536][ T8324] Node 1 active_anon:0kB inactive_anon:4kB active_file:1012kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:3344kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 136.113566][ T8324] Node 0 DMA free:15012kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.113601][ T8324] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 136.113625][ T8324] Node 0 DMA32 free:133084kB boost:0kB min:27480kB low:34348kB high:41216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102700kB inactive_anon:12kB active_file:83060kB inactive_file:137904kB unevictable:3716kB writepending:720kB zspages:0kB present:2080628kB managed:1260864kB mlocked:0kB bounce:0kB free_pcp:13676kB local_pcp:6940kB free_cma:0kB [ 136.113660][ T8324] lowmem_reserve[]: 0 0 0 0 0 [ 136.113822][ T8324] Node 1 Normal free:1630244kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:1012kB inactive_file:8kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:15560kB local_pcp:5764kB free_cma:0kB [ 136.113885][ T8324] lowmem_reserve[]: 0 0 0 0 0 [ 136.113921][ T8324] Node 0 DMA: 9*4kB (U) 10*8kB (U) 9*16kB (U) 13*32kB (U) 12*64kB (U) 8*128kB (U) 7*256kB (U) 5*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 15012kB [ 136.114083][ T8324] Node 0 DMA32: 825*4kB (U) 1393*8kB (UME) 707*16kB (UME) 142*32kB (UME) 167*64kB (UME) 105*128kB (UME) 63*256kB (UME) 54*512kB (UME) 12*1024kB (U) 3*2048kB (UM) 4*4096kB (U) = 133020kB [ 136.114249][ T8324] Node 1 Normal: 221*4kB (UM) 234*8kB (UM) 236*16kB (UME) 245*32kB (UME) 240*64kB (UME) 226*128kB (UME) 204*256kB (UM) 198*512kB (UME) 137*1024kB (UE) 10*2048kB (UME) 307*4096kB (UM) = 1630500kB [ 136.114413][ T8324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.114430][ T8324] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.114445][ T8324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.114459][ T8324] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.114475][ T8324] 73339 total pagecache pages [ 136.114482][ T8324] 4 pages in swap cache [ 136.114490][ T8324] Free swap = 124980kB [ 136.114497][ T8324] Total swap = 124996kB [ 136.114506][ T8324] 1048443 pages RAM [ 136.114513][ T8324] 0 pages HighMem/MovableOnly [ 136.114520][ T8324] 283916 pages reserved [ 136.114527][ T8324] 0 pages cma reserved [ 136.276581][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 136.276596][ T40] audit: type=1400 audit(2000000023.579:931): avc: denied { map } for pid=8327 comm="syz.2.722" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.614610][ T40] audit: type=1400 audit(2000000023.919:932): avc: denied { map } for pid=8340 comm="syz.2.726" path="/dev/comedi0" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.624188][ T40] audit: type=1400 audit(2000000023.919:933): avc: denied { execute } for pid=8340 comm="syz.2.726" path="/dev/comedi0" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.659579][ T8343] netlink: 'syz.2.727': attribute type 28 has an invalid length. [ 136.728115][ T40] audit: type=1400 audit(2000000024.029:934): avc: denied { bind } for pid=8345 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.736181][ T40] audit: type=1400 audit(2000000024.029:935): avc: denied { name_bind } for pid=8345 comm="syz.0.728" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 136.744953][ T40] audit: type=1400 audit(2000000024.029:936): avc: denied { node_bind } for pid=8345 comm="syz.0.728" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 136.772786][ T8343] Invalid argument reading file caps for ./file0 [ 136.779279][ T5751] block nbd2: Receive control failed (result -32) [ 136.789556][ T8344] block nbd2: shutting down sockets [ 136.841782][ T8355] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.851920][ T5751] Bluetooth: hci3: unexpected event for opcode 0x040e [ 136.967772][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.734'. [ 137.075895][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.734'. [ 137.306930][ T8371] netlink: 'syz.2.735': attribute type 1 has an invalid length. [ 137.354339][ T8373] netlink: 'syz.2.736': attribute type 32 has an invalid length. [ 137.366961][ T8373] bond3: Setting coupled_control to off (0) [ 137.369119][ T8373] bond3: entered promiscuous mode [ 137.433087][ T40] audit: type=1400 audit(2000000024.729:937): avc: denied { read } for pid=8376 comm="syz.2.737" dev="nsfs" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.440326][ T40] audit: type=1400 audit(2000000024.729:938): avc: denied { open } for pid=8376 comm="syz.2.737" path="net:[4026532883]" dev="nsfs" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.449229][ T40] audit: type=1400 audit(2000000024.739:939): avc: denied { listen } for pid=8376 comm="syz.2.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 137.456625][ T40] audit: type=1400 audit(2000000024.739:940): avc: denied { accept } for pid=8376 comm="syz.2.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 138.087211][ T8410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1802 sclass=netlink_route_socket pid=8410 comm=syz.0.749 [ 138.205055][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.209406][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.597383][ T8436] fuse: Bad value for 'user_id' [ 138.599220][ T8436] fuse: Bad value for 'user_id' [ 138.713094][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.755'. [ 138.946265][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 138.950891][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 138.950980][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.761'. [ 138.975522][ T8461] Bluetooth: MGMT ver 1.23 [ 139.066236][ T8465] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 139.066236][ T8466] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 139.082721][ T8466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.091471][ T8466] bond4: (slave geneve2): making interface the new active one [ 139.094883][ T8466] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 139.236232][ T8478] binder: 8477:8478 ioctl c0306201 200000000080 returned -14 [ 139.245186][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.247618][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.250261][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.252777][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.255973][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.258737][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.261443][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.265205][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.267905][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.270282][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.272652][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.275507][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.278468][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.281684][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.285051][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.287982][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.290547][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.292966][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.295659][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.298035][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.300408][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.302930][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.305474][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.307917][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.310852][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.313315][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.315746][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.318068][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.320468][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.322954][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.325555][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.327957][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.330223][ T8479] binder: 8477:8479 ioctl c0306201 2000000003c0 returned -14 [ 139.448231][ T8487] ªªªªªª: renamed from vlan0 (while UP) [ 139.649041][ T8492] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 139.785881][ T8501] syzkaller1: entered promiscuous mode [ 139.788290][ T8501] syzkaller1: entered allmulticast mode [ 139.920314][ T8511] xt_hashlimit: invalid rate [ 140.281903][ T8535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.304170][ T8537] bond4: ARP target 9.0.0.0 is already present [ 140.306741][ T8537] bond4: option arp_ip_target: invalid value (9) [ 140.311950][ T8537] bond4 (unregistering): Released all slaves [ 140.506925][ T8544] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 140.509734][ T8544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.562808][ T8550] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 140.580740][ T8550] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.614595][ T8550] vlan0: entered allmulticast mode [ 140.616409][ T8550] bond4: entered allmulticast mode [ 140.616743][ T8553] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 140.620595][ T8550] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 140.750086][ T5751] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 141.095952][ T5886] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 141.253877][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 141.257454][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 141.263570][ T5886] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 141.266639][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.269370][ T5886] usb 7-1: Product: syz [ 141.271084][ T5886] usb 7-1: Manufacturer: syz [ 141.273104][ T5886] usb 7-1: SerialNumber: syz [ 141.277219][ T5886] usb 7-1: config 0 descriptor?? [ 141.280469][ T5886] hub 7-1:0.0: bad descriptor, ignoring hub [ 141.282566][ T5886] hub 7-1:0.0: probe with driver hub failed with error -5 [ 141.286177][ T5886] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.536219][ T8577] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 141.540215][ T8577] syz_tun: entered promiscuous mode [ 141.550780][ T8577] syz_tun: entered allmulticast mode [ 141.554475][ T8577] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 141.586647][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 141.586660][ T40] audit: type=1400 audit(2000000028.889:951): avc: denied { execute } for pid=8578 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 141.599193][ T40] audit: type=1400 audit(2000000028.899:952): avc: denied { execute_no_trans } for pid=8578 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 141.629905][ T24] usb 7-1: USB disconnect, device number 10 [ 141.704024][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.708800][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.714705][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.722039][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.736609][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.794919][ T8572] comedi comedi0: reset error (fatal) [ 141.842826][ T40] audit: type=1400 audit(2000000029.139:953): avc: denied { create } for pid=8588 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 141.852849][ T40] audit: type=1400 audit(2000000029.139:954): avc: denied { setopt } for pid=8588 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 142.039765][ T40] audit: type=1400 audit(2000000029.339:955): avc: denied { kexec_image_load } for pid=8612 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 142.262204][ T8636] 9pnet_virtio: no channels available for device syz [ 142.338913][ T40] audit: type=1400 audit(2000000029.639:956): avc: denied { map } for pid=8644 comm="syz.3.816" path="/226" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.350766][ T40] audit: type=1400 audit(2000000029.639:957): avc: denied { execute } for pid=8644 comm="syz.3.816" path="/226" dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.383031][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.386550][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.389878][ T8581] bridge_slave_0: entered allmulticast mode [ 142.392703][ T8581] bridge_slave_0: entered promiscuous mode [ 142.404363][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.408752][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.412224][ T8581] bridge_slave_1: entered allmulticast mode [ 142.416936][ T8581] bridge_slave_1: entered promiscuous mode [ 142.445078][ T8651] netlink: 'syz.3.817': attribute type 3 has an invalid length. [ 142.452345][ T8581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.458435][ T8581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.490014][ T8581] team0: Port device team_slave_0 added [ 142.494575][ T8581] team0: Port device team_slave_1 added [ 142.521764][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.524314][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.532293][ T8581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.538881][ T8581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.541420][ T8581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.550167][ T8581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.584782][ T8581] hsr_slave_0: entered promiscuous mode [ 142.588407][ T8581] hsr_slave_1: entered promiscuous mode [ 142.591014][ T8581] debugfs: 'hsr0' already exists in 'hsr' [ 142.592870][ T8581] Cannot create hsr debugfs directory [ 142.862029][ T8581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.868428][ T8581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.871499][ T8581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.878050][ T8581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.881316][ T8581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.889976][ T8581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.893631][ T8581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.900668][ T8581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.905858][ T40] audit: type=1400 audit(2000000030.209:958): avc: denied { map } for pid=8677 comm="syz.2.823" path="socket:[27039]" dev="sockfs" ino=27039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.917614][ T40] audit: type=1400 audit(2000000030.209:959): avc: denied { read accept } for pid=8677 comm="syz.2.823" path="socket:[27039]" dev="sockfs" ino=27039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.934196][ T40] audit: type=1400 audit(2000000030.209:960): avc: denied { read accept } for pid=8677 comm="syz.2.823" path="socket:[27039]" dev="sockfs" ino=27039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.945703][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.949138][ T8581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.952311][ T8581] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.955489][ T8581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.996759][ T1044] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 143.021864][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.041613][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.045549][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.056404][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.065278][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.069223][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.075878][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.078934][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.154511][ T1044] usb 8-1: Using ep0 maxpacket: 16 [ 143.159338][ T1044] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.163179][ T1044] usb 8-1: config 0 interface 0 has no altsetting 0 [ 143.171376][ T1044] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 143.183910][ T1044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.188822][ T1044] usb 8-1: Product: syz [ 143.190572][ T1044] usb 8-1: Manufacturer: syz [ 143.192268][ T1044] usb 8-1: SerialNumber: syz [ 143.199208][ T1044] usb 8-1: config 0 descriptor?? [ 143.205429][ T8702] ubi0: attaching mtd0 [ 143.212281][ T8702] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 143.216042][ T8702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.828'. [ 143.403059][ T8581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.414764][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 143.422914][ T1044] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input20 [ 143.431165][ T1044] imon:send_packet: packet tx failed (-71) [ 143.444375][ T1044] imon 8-1:0.0: panel buttons/knobs setup failed [ 143.504666][ T1044] rc_core: IR keymap rc-imon-pad not found [ 143.507415][ T1044] Registered IR keymap rc-empty [ 143.510341][ T1044] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 143.515882][ T1044] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 143.520498][ T1044] imon:send_packet: packet tx failed (-71) [ 143.536762][ T1044] imon 8-1:0.0: remote input dev register failed [ 143.541744][ T1044] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 143.596510][ T8581] veth0_vlan: entered promiscuous mode [ 143.606519][ T8581] veth1_vlan: entered promiscuous mode [ 143.610595][ T8661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.624502][ T8661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.635639][ T8581] veth0_macvtap: entered promiscuous mode [ 143.641718][ T8581] veth1_macvtap: entered promiscuous mode [ 143.653458][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.662004][ T1044] imon 8-1:0.0: unable to initialize intf0, err 0 [ 143.664800][ T1044] imon:imon_probe: failed to initialize context! [ 143.666763][ T8581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.666866][ T1044] imon 8-1:0.0: unable to register, err -19 [ 143.674332][ T1044] usb 8-1: USB disconnect, device number 12 [ 143.677705][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.684010][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.688379][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.692986][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.795927][ T5742] Bluetooth: hci4: command tx timeout [ 143.811540][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.821282][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.847090][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.851435][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.983878][ T1044] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 144.004300][ T8742] netlink: 11 bytes leftover after parsing attributes in process `syz.4.835'. [ 144.145227][ T1044] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 144.148791][ T1044] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 144.152181][ T1044] usb 8-1: config 0 interface 0 has no altsetting 0 [ 144.156788][ T1044] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 144.159827][ T1044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.162520][ T1044] usb 8-1: Product: syz [ 144.164031][ T1044] usb 8-1: Manufacturer: syz [ 144.165640][ T1044] usb 8-1: SerialNumber: syz [ 144.170040][ T1044] usb 8-1: config 0 descriptor?? [ 144.172331][ T8672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.364765][ T8748] overlayfs: failed to resolve './file0': -2 [ 144.381095][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 144.386444][ T1044] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input22 [ 144.409816][ T8756] netlink: 44 bytes leftover after parsing attributes in process `syz.4.839'. [ 144.666172][ T1044] rc_core: IR keymap rc-imon-pad not found [ 144.668288][ T1044] Registered IR keymap rc-empty [ 144.672366][ T1044] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 144.689952][ T1044] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 144.715860][ T1044] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 144.730287][ T1044] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input23 [ 144.740212][ T8786] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 144.753205][ T1044] imon 8-1:0.0: iMON device (15c2:0045, intf0) on usb<8:13> initialized [ 144.816893][ T8791] overlayfs: failed to resolve './file0': -2 [ 144.891173][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 144.957018][ T8801] netlink: 344 bytes leftover after parsing attributes in process `syz.2.848'. [ 144.986392][ T8803] openvswitch: netlink: Missing key (keys=40, expected=100) [ 145.262912][ T8814] imon:lcd_write: invalid payload size: 0 (expected 8) [ 145.266490][ T8672] imon:lcd_write: invalid payload size: 0 (expected 8) [ 145.296643][ T34] usb 8-1: USB disconnect, device number 13 [ 145.737653][ T8855] netlink: 'syz.2.861': attribute type 4 has an invalid length. [ 145.811350][ T8862] netlink: 132 bytes leftover after parsing attributes in process `syz.4.863'. [ 145.859515][ T8864] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 145.876140][ T5742] Bluetooth: hci4: command tx timeout [ 146.092173][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 146.188567][ T8889] evm: overlay not supported [ 146.409531][ T8902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8902 comm=syz.4.879 [ 146.540426][ T8917] IPv6: Can't replace route, no match found [ 146.581000][ T8920] syzkaller0: entered promiscuous mode [ 146.584451][ T8920] syzkaller0: entered allmulticast mode [ 146.655732][ T8926] tipc: Trying to set illegal importance in message [ 146.660485][ T8926] openvswitch: netlink: Flow key attr not present in new flow. [ 146.710047][ T8930] netlink: 27 bytes leftover after parsing attributes in process `syz.2.887'. [ 146.741280][ T8933] mmap: syz.2.888 (8933) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.828176][ T8940] vcan1: entered allmulticast mode [ 146.899681][ T8948] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 146.935072][ T8951] netlink: 'syz.4.893': attribute type 1 has an invalid length. [ 146.941539][ T34] IPVS: starting estimator thread 0... [ 146.943059][ T8953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.894'. [ 147.033995][ T8954] IPVS: using max 45 ests per chain, 108000 per kthread [ 147.129491][ T8966] xt_socket: unknown flags 0x48 [ 147.291109][ T5742] Bluetooth: hci2: Malformed Event: 0x13 [ 147.316465][ T8984] openvswitch: netlink: Key type 31 is not supported [ 147.364902][ T8992] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 147.403317][ T8995] netlink: 'syz.0.903': attribute type 16 has an invalid length. [ 147.406534][ T8995] netlink: 'syz.0.903': attribute type 17 has an invalid length. [ 147.438089][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.442340][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.488596][ T8995] ip6erspan0: left promiscuous mode [ 147.498679][ T8995] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 147.554313][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.644104][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 147.644119][ T40] audit: type=1400 audit(2000000034.939:994): avc: denied { accept } for pid=9012 comm="syz.0.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.696379][ T40] audit: type=1400 audit(2000000034.999:995): avc: denied { read } for pid=9012 comm="syz.0.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.817352][ T9015] batman_adv: batadv0: Adding interface: gretap1 [ 147.819627][ T9015] batman_adv: batadv0: Interface activated: gretap1 [ 147.954030][ T5742] Bluetooth: hci4: command tx timeout [ 147.976615][ T9020] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 147.991918][ T9020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.014297][ T9020] bond4: (slave gretap2): making interface the new active one [ 148.026211][ T9020] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 148.091891][ T9029] 9pnet_virtio: no channels available for device syz [ 148.100558][ T9023] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 148.105323][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 148.130732][ T9030] tmpfs: Bad value for 'mpol' [ 148.151647][ T40] audit: type=1400 audit(2000000035.449:996): avc: denied { unmount } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 148.510239][ T9045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.518644][ T9045] batadv0: mtu less than device minimum [ 148.522057][ T9045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.528198][ T9045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.532208][ T9045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.536165][ T9045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.540139][ T9045] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.551628][ T9045] batadv_slave_1: entered promiscuous mode [ 148.673808][ T9052] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.919'. [ 148.683094][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.919'. [ 148.958526][ T9060] input: syz0 as /devices/virtual/input/input27 [ 149.077483][ T9069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'. [ 149.260837][ T9071] xt_recent: Unsupported userspace flags (000000b2) [ 149.428597][ T9084] 9pnet_virtio: no channels available for device syz [ 149.747863][ T40] audit: type=1400 audit(2000000037.049:997): avc: denied { watch watch_reads } for pid=9099 comm="syz.4.934" path="/31/file0" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 149.756942][ T40] audit: type=1326 audit(2000000037.049:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.4.934" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1eed99ce59 code=0x0 [ 149.849394][ T40] audit: type=1326 audit(2000000037.149:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.4.934" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1eed99ce59 code=0x0 [ 149.905650][ T9119] binder: 9118:9119 ioctl c0306201 0 returned -14 [ 149.937550][ T40] audit: type=1326 audit(2000000037.239:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9120 comm="syz.3.939" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe4019ce59 code=0x0 [ 150.036115][ T40] audit: type=1400 audit(2000000037.339:1001): avc: denied { setopt } for pid=9125 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.043967][ T5742] Bluetooth: hci4: command tx timeout [ 150.158923][ T40] audit: type=1400 audit(2000000037.459:1002): avc: denied { watch_mount } for pid=9129 comm="syz.3.942" path="/248" dev="tmpfs" ino=1359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 150.207308][ T9134] syzkaller0: entered promiscuous mode [ 150.209276][ T9134] syzkaller0: entered allmulticast mode [ 150.317587][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 150.503907][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.947'. [ 150.508107][ T9142] 9pnet_virtio: no channels available for device syz [ 150.552530][ T40] audit: type=1400 audit(2000000037.849:1003): avc: denied { listen } for pid=9143 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.560776][ T9148] CIFS: VFS: UNC: path must begin with // or \\ [ 150.563064][ T9148] Malformed UNC in devname [ 150.563064][ T9148] [ 150.567291][ T9148] CIFS: VFS: Malformed UNC in devname [ 150.577292][ T9148] binder: 9146:9148 ioctl c0306201 2000000001c0 returned -22 [ 150.607296][ T9152] netlink: 204 bytes leftover after parsing attributes in process `syz.3.948'. [ 150.612832][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 150.616695][ T9152] netlink: 'syz.3.948': attribute type 3 has an invalid length. [ 150.833550][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 150.836868][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 150.890889][ T9175] SELinux: policydb table sizes (-983040,-1) do not match mine (8,7) [ 150.895305][ T9175] SELinux: failed to load policy [ 151.150874][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 151.157043][ T9196] tipc: Started in network mode [ 151.158832][ T9196] tipc: Node identity fe80000000000000000000000000004, cluster identity 4711 [ 151.165632][ T9196] tipc: Enabling of bearer rejected, failed to enable media [ 151.348125][ T9211] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 152.008602][ T9231] comedi comedi1: pcmda12: I/O base address not correctly aligned [ 152.080820][ T9231] ip6gre1: entered allmulticast mode [ 152.084020][ T9231] team0: Device ip6gre1 is of different type [ 152.274499][ T9259] fuse: Unknown parameter '›qG¸·mjÍÞVkÕHÿeªÖ踑ÿ+þÓ¯ºw Î.ÅÉ$8p¡V#5š' [ 152.313619][ T9266] loop5: detected capacity change from 0 to 7 [ 152.368754][ T9266] Dev loop5: unable to read RDB block 7 [ 152.371818][ T9266] loop5: unable to read partition table [ 152.390468][ T9266] loop5: partition table beyond EOD, truncated [ 152.413152][ T9266] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 152.745276][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 152.745296][ T40] audit: type=1400 audit(2000000040.049:1012): avc: denied { write } for pid=9298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.800380][ T40] audit: type=1400 audit(2000000040.099:1013): avc: denied { write } for pid=9315 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.884899][ T9326] ptrace attach of "/syz-executor exec"[9329] was attempted by "/syz-executor exec"[9326] [ 152.889728][ T9330] xt_time: unknown flags 0xf4 [ 152.902351][ T40] audit: type=1400 audit(2000000040.199:1014): avc: denied { write } for pid=9328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.963246][ T40] audit: type=1400 audit(2000000040.259:1015): avc: denied { write } for pid=9333 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.033843][ T5888] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 153.124938][ T9344] 9pnet_virtio: no channels available for device syz [ 153.177409][ T9343] bond5: option primary: mode dependency failed, not supported in mode broadcast(3) [ 153.186037][ T9343] bond5 (unregistering): Released all slaves [ 153.206316][ T5888] usb 5-1: not running at top speed; connect to a high speed hub [ 153.210009][ T5888] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 92, changing to 4 [ 153.215674][ T5888] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 153.218717][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.221507][ T5888] usb 5-1: Product: Ð… [ 153.222987][ T5888] usb 5-1: Manufacturer: 〉 [ 153.399709][ T40] audit: type=1400 audit(2000000040.699:1016): avc: denied { write } for pid=9358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.449948][ T5888] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 153.465762][ T40] audit: type=1400 audit(2000000040.759:1017): avc: denied { write } for pid=9363 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.527680][ T5888] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 153.537684][ T40] audit: type=1400 audit(2000000040.839:1018): avc: denied { write } for pid=9369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.544271][ T5888] usb 5-1: USB disconnect, device number 9 [ 153.584977][ T6587] udevd[6587]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.603144][ T40] audit: type=1400 audit(2000000040.899:1019): avc: denied { write } for pid=9377 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.691735][ T40] audit: type=1400 audit(2000000040.989:1020): avc: denied { write } for pid=9380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.746739][ T40] audit: type=1400 audit(2000000041.049:1021): avc: denied { write } for pid=9384 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.914638][ T5888] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 154.053885][ T5888] usb 5-1: device descriptor read/64, error -71 [ 154.288627][ T9400] __nla_validate_parse: 36 callbacks suppressed [ 154.288653][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 154.303871][ T5888] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 154.309270][ T9400] team1: entered promiscuous mode [ 154.310966][ T9400] team1: entered allmulticast mode [ 154.443947][ T5888] usb 5-1: device descriptor read/64, error -71 [ 154.564999][ T5888] usb usb5-port1: attempt power cycle [ 154.625489][ T9426] nfs4: Unknown parameter 'v4‰Ï^\¨åü\k–‚ êœ' [ 154.700901][ T9430] misc userio: Invalid payload size [ 154.753809][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 154.757920][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 154.761623][ T9432] netlink: 'syz.2.1026': attribute type 15 has an invalid length. [ 154.765652][ T9432] netlink: 'syz.2.1026': attribute type 18 has an invalid length. [ 154.913913][ T5888] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 154.928536][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 154.931588][ T9437] net_ratelimit: 16 callbacks suppressed [ 154.931599][ T9437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.934480][ T5888] usb 5-1: device descriptor read/8, error -71 [ 155.173913][ T5888] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 155.194005][ T5820] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 155.194515][ T5888] usb 5-1: device descriptor read/8, error -71 [ 155.305208][ T5888] usb usb5-port1: unable to enumerate USB device [ 155.345536][ T5820] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 155.350224][ T5820] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 155.355407][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 155.360616][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 155.365273][ T5820] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.374274][ T5820] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 155.378246][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.381548][ T5820] usb 7-1: Product: syz [ 155.383280][ T5820] usb 7-1: Manufacturer: syz [ 155.386697][ T5820] usb 7-1: SerialNumber: syz [ 155.391405][ T9447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'. [ 155.391743][ T5820] usb 7-1: config 0 descriptor?? [ 155.397771][ T9437] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.407203][ T5820] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input28 [ 155.444007][ C0] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 155.519414][ T9450] netlink: 'syz.3.1031': attribute type 1 has an invalid length. [ 155.543485][ T9450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.654432][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.658791][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.661045][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.662360][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.813867][ T5834] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 155.856146][ T5888] usb 7-1: USB disconnect, device number 11 [ 155.856308][ C3] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 155.973828][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 155.977713][ T5834] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.982158][ T5834] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 155.987107][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.996880][ T5834] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 156.000956][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 156.004892][ T5834] usb 8-1: Product: syz [ 156.007170][ T5834] usb 8-1: Manufacturer: syz [ 156.009190][ T5834] usb 8-1: SerialNumber: syz [ 156.014664][ T5834] usb 8-1: config 0 descriptor?? [ 156.083829][ T5834] rc_core: IR keymap rc-imon-rsc not found [ 156.086504][ T5834] Registered IR keymap rc-empty [ 156.090270][ T5834] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 156.096111][ T5834] input: iMON Station as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input29 [ 156.254644][ T5820] usb 8-1: USB disconnect, device number 14 [ 156.421642][ T9456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1032'. syzkaller syzkaller login: [ 156.626799][ T9462] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 156.643358][ T9465] 9pnet_virtio: no channels available for device syz [ 156.681874][ T9462] bond6 (unregistering): Released all slaves [ 156.718340][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 156.731423][ T9470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.741112][ T9469] 9pnet_virtio: no channels available for device syz [ 156.809990][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'. [ 156.828535][ T9476] syzkaller0: entered promiscuous mode [ 156.833893][ T9476] syzkaller0: entered allmulticast mode [ 156.846687][ T9476] tipc: Started in network mode [ 156.848942][ T9476] tipc: Node identity 12a4b0dc788a, cluster identity 4711 [ 156.852129][ T9476] tipc: Enabled bearer , priority 0 [ 156.855616][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'. [ 156.864985][ T9482] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1040'. [ 156.887918][ T9475] tipc: Resetting bearer [ 156.910297][ T9475] tipc: Disabling bearer [ 157.110706][ T9497] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 157.119882][ T9499] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 157.167511][ T9505] netlink: 'syz.2.1049': attribute type 39 has an invalid length. [ 157.188258][ T9505] bond0: (slave syz_tun): Releasing backup interface [ 157.214599][ T9505] syz_tun (unregistering): left allmulticast mode [ 157.224386][ T9507] program syz.2.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.285846][ T9505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=9505 comm=syz.2.1049 [ 157.291973][ T9505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=9505 comm=syz.2.1049 [ 157.360661][ T9518] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 157.373109][ T9522] overlayfs: maximum fs stacking depth exceeded [ 157.578196][ T9530] overlay: Bad value for 'workdir' [ 157.579764][ T9531] overlay: Bad value for 'workdir' [ 157.720591][ T9536] xt_hashlimit: max too large, truncated to 1048576 [ 157.729365][ T9536] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.657599][ T9565] Invalid logical block size (160) [ 158.699251][ T9567] 9p: Bad value for 'rfdno' [ 159.259723][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 159.259748][ T40] audit: type=1400 audit(2000000046.559:1036): avc: denied { name_bind } for pid=9578 comm="syz.0.1072" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 159.690382][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.698198][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.703402][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.710945][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.717211][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.059691][ T9598] 9pnet_virtio: no channels available for device syz [ 160.164796][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.167773][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.170829][ T9583] bridge_slave_0: entered allmulticast mode [ 160.174883][ T9583] bridge_slave_0: entered promiscuous mode [ 160.180091][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.183524][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.186661][ T9583] bridge_slave_1: entered allmulticast mode [ 160.190397][ T9583] bridge_slave_1: entered promiscuous mode [ 160.219294][ T9583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.226732][ T9583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.246475][ T9583] team0: Port device team_slave_0 added [ 160.250127][ T9583] team0: Port device team_slave_1 added [ 160.265944][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.268252][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.277408][ T9583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.282021][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.284371][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.293414][ T9583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.321197][ T9583] hsr_slave_0: entered promiscuous mode [ 160.324580][ T9583] hsr_slave_1: entered promiscuous mode [ 160.326883][ T9583] debugfs: 'hsr0' already exists in 'hsr' [ 160.328775][ T9583] Cannot create hsr debugfs directory [ 160.461975][ T9583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.469551][ T9583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.474361][ T9583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.478562][ T9583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.481472][ T9583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.487909][ T9583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.492163][ T9583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.498242][ T9583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.533152][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.536542][ T9583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.540405][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.543578][ T9583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.609366][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.626487][ T526] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.632189][ T526] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.647632][ T9583] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.656796][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.659940][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.671627][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.674094][ T526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.986347][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.134951][ T9583] veth0_vlan: entered promiscuous mode [ 161.144656][ T9583] veth1_vlan: entered promiscuous mode [ 161.162645][ T9583] veth0_macvtap: entered promiscuous mode [ 161.168462][ T9583] veth1_macvtap: entered promiscuous mode [ 161.185209][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.191663][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.194016][ T5834] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.199647][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.204956][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.208661][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.214710][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.274216][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.278776][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.311295][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.314374][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.321990][ T40] audit: type=1400 audit(2000000048.619:1037): avc: denied { mounton } for pid=9583 comm="syz-executor" path="/syzkaller.Q3tA3o/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 161.356182][ T5834] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 161.360697][ T5834] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.364965][ T5834] usb 5-1: config 0 has no interface number 0 [ 161.367518][ T5834] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 161.371116][ T5834] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.378706][ T5834] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 161.382166][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.386526][ T5834] usb 5-1: Product: syz [ 161.387972][ T5834] usb 5-1: Manufacturer: syz [ 161.389859][ T5834] usb 5-1: SerialNumber: syz [ 161.406374][ T5834] usb 5-1: config 0 descriptor?? [ 161.409261][ T9621] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.417919][ T5834] hdpvr 5-1:0.33: Could not find bulk-in endpoint [ 161.420732][ T5834] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12 [ 161.438834][ T9633] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.505889][ T9639] overlayfs: failed to resolve './file0/file1': -2 [ 161.608373][ T40] audit: type=1400 audit(2000000048.909:1038): avc: denied { setattr } for pid=9641 comm="syz.2.1079" path="socket:[34041]" dev="sockfs" ino=34041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.632760][ T40] audit: type=1400 audit(2000000048.929:1039): avc: denied { ioctl } for pid=9647 comm="syz.5.1082" path="socket:[36066]" dev="sockfs" ino=36066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.649839][ T9621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.740416][ T5834] usb 5-1: USB disconnect, device number 14 [ 161.759123][ T40] audit: type=1400 audit(2000000049.059:1040): avc: denied { watch } for pid=9655 comm="syz.2.1084" path="/295/file0" dev="tmpfs" ino=1615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.793901][ T5751] Bluetooth: hci3: command tx timeout [ 161.880944][ T9668] binder: 9667:9668 unknown command 0 [ 161.882790][ T9668] binder: 9667:9668 ioctl c0306201 200000000080 returned -22 [ 161.944665][ T40] audit: type=1400 audit(2000000049.249:1041): avc: denied { ioctl } for pid=9675 comm="syz.5.1089" path="socket:[33362]" dev="sockfs" ino=33362 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 161.984600][ T9678] Illegal XDP return value 4232904704 on prog (id 97) dev N/A, expect packet loss! [ 161.997544][ T9680] xt_hashlimit: size too large, truncated to 1048576 [ 162.105041][ T40] audit: type=1400 audit(2000000049.409:1042): avc: denied { remount } for pid=9685 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.121172][ T9686] __nla_validate_parse: 1 callbacks suppressed [ 162.121189][ T9686] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1093'. [ 162.127029][ T9686] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1093'. [ 162.131455][ T9686] netlink: 'syz.2.1093': attribute type 6 has an invalid length. [ 162.135275][ T9686] netlink: 'syz.2.1093': attribute type 5 has an invalid length. [ 162.138217][ T9686] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1093'. [ 162.316475][ T40] audit: type=1400 audit(2000000049.619:1043): avc: denied { setattr } for pid=9696 comm="syz.0.1097" name="NETLINK" dev="sockfs" ino=34171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.701948][ T9719] 9pnet_virtio: no channels available for device syz [ 162.856342][ T40] audit: type=1400 audit(2000000050.159:1044): avc: denied { write } for pid=9723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.925972][ T40] audit: type=1400 audit(2000000050.229:1045): avc: denied { write } for pid=9730 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.384053][ T5882] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 163.537559][ T5882] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 163.553850][ T5882] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has an invalid bInterval 69, changing to 10 [ 163.558440][ T5882] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 26310, setting to 1024 [ 163.563225][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.570037][ T5882] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.575841][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 163.579047][ T5882] usb 5-1: Product: syz [ 163.580489][ T5882] usb 5-1: Manufacturer: syz [ 163.582081][ T5882] usb 5-1: SerialNumber: syz [ 163.587088][ T5882] usb 5-1: config 0 descriptor?? [ 163.589422][ T9740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.595181][ T5882] usb 5-1: selecting invalid altsetting 0 [ 163.802188][ T1006] usb 5-1: USB disconnect, device number 15 [ 163.874468][ T5751] Bluetooth: hci3: command tx timeout [ 163.979041][ T9776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=9776 comm=syz.2.1112 [ 164.230677][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.235344][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.241798][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.246330][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.250059][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.253564][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.257024][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.260077][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.263478][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.266875][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.271687][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.276205][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.279345][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.282298][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.287466][ T9799] overlayfs: maximum fs stacking depth exceeded [ 164.369788][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 164.369808][ T40] audit: type=1400 audit(2000000051.669:1059): avc: denied { connect } for pid=9809 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.463820][ T40] audit: type=1400 audit(2000000051.759:1060): avc: denied { mount } for pid=9814 comm="syz.2.1126" name="/" dev="ramfs" ino=35339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 164.543115][ T40] audit: type=1400 audit(2000000051.839:1061): avc: denied { mount } for pid=9821 comm="syz.0.1129" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 164.546080][ T9822] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 164.555484][ T40] audit: type=1400 audit(2000000051.839:1062): avc: denied { mounton } for pid=9821 comm="syz.0.1129" path="/288/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 164.563449][ T9824] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 164.774454][ T4906] IPVS: starting estimator thread 0... [ 164.863900][ T9830] IPVS: using max 43 ests per chain, 103200 per kthread [ 164.888355][ T9831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.277915][ T9835] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 165.298107][ T9835] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.317159][ T9835] bond5: (slave geneve2): making interface the new active one [ 165.322381][ T9835] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 165.379900][ T40] audit: type=1400 audit(2000000052.679:1063): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 165.439928][ T40] audit: type=1400 audit(2000000052.739:1064): avc: denied { bind } for pid=9844 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.450188][ T40] audit: type=1400 audit(2000000052.739:1065): avc: denied { listen } for pid=9844 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.654323][ T9850] wireguard0: entered allmulticast mode [ 165.713194][ T9853] gfs2: gfs2 mount does not exist [ 165.873168][ T9866] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 165.892705][ T9866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.953964][ T5751] Bluetooth: hci3: command tx timeout [ 166.023769][ T9871] binder: 9870:9871 unknown command 0 [ 166.025379][ T9871] binder: 9870:9871 ioctl c0306201 200000000080 returned -22 [ 166.075002][ T40] audit: type=1400 audit(2000000053.379:1066): avc: denied { accept } for pid=9872 comm="syz.0.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.227652][ T9847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.313043][ T9886] 9pnet_virtio: no channels available for device syz [ 166.396406][ T9896] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1148'. [ 166.407363][ T9896] netlink: 'syz.2.1148': attribute type 3 has an invalid length. [ 166.703873][ T1006] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 166.809265][ T9906] 8021q: VLANs not supported on wg0 [ 166.855621][ T1006] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.859498][ T1006] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 166.863931][ T1006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 166.867451][ T1006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 166.871506][ T1006] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.877328][ T1006] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 166.880691][ T1006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.883850][ T1006] usb 7-1: Product: syz [ 166.885330][ T1006] usb 7-1: Manufacturer: syz [ 166.886979][ T1006] usb 7-1: SerialNumber: syz [ 166.889965][ T1006] usb 7-1: config 0 descriptor?? [ 166.893261][ T9901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.898121][ T1006] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input30 [ 167.153158][ T9911] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 167.337887][ T4906] usb 7-1: USB disconnect, device number 12 [ 167.337945][ C1] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 167.707398][ T9923] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 167.755377][ T9925] trusted_key: syz.0.1159 sent an empty control message without MSG_MORE. [ 167.819232][ T40] audit: type=1400 audit(2000000055.119:1067): avc: denied { listen } for pid=9926 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.889980][ T9927] kvm: pic: non byte write [ 167.964621][ T40] audit: type=1400 audit(2000000055.269:1068): avc: denied { lock } for pid=9932 comm="syz.2.1161" path="socket:[33755]" dev="sockfs" ino=33755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.986244][ T9935] openvswitch: netlink: IPv4 tun info is not correct [ 168.044736][ T5751] Bluetooth: hci3: command tx timeout [ 168.059456][ T9939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9939 comm=syz.2.1163 [ 168.124538][ T9941] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 168.275451][ T9942] kvm: pic: non byte write [ 168.293477][ T9942] kvm: user requested TSC rate below hardware speed [ 168.303500][ T9949] netlink: 'syz.0.1167': attribute type 15 has an invalid length. [ 168.304253][ T9950] netlink: 'syz.0.1167': attribute type 15 has an invalid length. [ 168.315211][ T9949] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 168.318230][ T9949] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 168.325370][ T9949] vhci_hcd vhci_hcd.0: Device attached [ 168.330038][ T9949] vhci_hcd vhci_hcd.0: port 0 already used [ 168.593940][ T24] usb 38-1: SetAddress Request (2) to port 0 [ 168.598537][ T24] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 168.633438][ T9951] vhci_hcd: connection reset by peer [ 168.635827][ T1164] vhci_hcd vhci_hcd.0: stop threads [ 168.637809][ T1164] vhci_hcd vhci_hcd.0: release socket [ 168.641164][ T1164] vhci_hcd vhci_hcd.0: disconnect device [ 169.058668][ T5742] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.072298][ T5742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.076819][ T5742] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.090723][ T5742] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.094619][ T5742] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.144310][ T9973] input: syz0 as /devices/virtual/input/input31 [ 169.152389][ T9973] input: failed to attach handler leds to device input31, error: -6 [ 169.404004][ T9991] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1176'. [ 169.474730][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1177'. [ 169.547252][ T9994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9994 comm=syz.5.1177 [ 169.620207][ T9999] kvm: pic: non byte write [ 169.633588][ T9999] kvm: user requested TSC rate below hardware speed [ 169.634493][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 169.688123][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.691419][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.695308][ T9970] bridge_slave_0: entered allmulticast mode [ 169.700615][ T9970] bridge_slave_0: entered promiscuous mode [ 169.706432][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.710673][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.716333][ T9970] bridge_slave_1: entered allmulticast mode [ 169.720590][ T9970] bridge_slave_1: entered promiscuous mode [ 169.752443][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.757139][T10019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.761784][T10019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.769362][T10019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.772651][T10019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.781600][T10019] batman_adv: batadv0: Interface deactivated: gretap1 [ 169.790237][T10019] batman_adv: batadv0: Removing interface: gretap1 [ 169.803565][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 169.803585][ T40] audit: type=1400 audit(2000000057.099:1070): avc: denied { ioctl } for pid=10017 comm="syz.2.1183" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 169.838052][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.866552][ T9970] team0: Port device team_slave_0 added [ 169.891198][ T9970] team0: Port device team_slave_1 added [ 169.911684][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.914234][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.922590][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.931065][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.943396][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.952972][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.990441][ T9970] hsr_slave_0: entered promiscuous mode [ 169.993075][ T9970] hsr_slave_1: entered promiscuous mode [ 169.998970][ T9970] debugfs: 'hsr0' already exists in 'hsr' [ 170.001421][ T9970] Cannot create hsr debugfs directory [ 170.188641][T10035] tipc: Started in network mode [ 170.190309][T10035] tipc: Node identity aa31f02aef36, cluster identity 4711 [ 170.192955][T10035] tipc: Enabled bearer , priority 0 [ 170.199806][T10035] syzkaller0: mtu less than device minimum [ 170.226330][T10034] tipc: Disabling bearer [ 170.253394][ T9970] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 170.259951][ T9970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.265895][ T9970] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 170.271488][ T9970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.276408][ T9970] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 170.283344][ T9970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.287305][ T9970] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 170.296932][ T9970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.319268][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.322400][ T9970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.325243][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.327626][ T9970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.430575][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.441393][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.447021][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.474806][ T9970] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.483444][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.483894][ T5834] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 170.487102][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.502026][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.504846][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.649586][ T5834] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 170.659628][ T5834] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 170.675319][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 170.679185][ T5834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.683168][ T5834] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 170.689156][ T5834] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 170.695001][ T5834] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 170.698956][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.708722][ T5834] usb 10-1: config 0 descriptor?? [ 170.711951][T10037] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 170.756433][ T40] audit: type=1400 audit(2000000058.059:1071): avc: denied { read } for pid=10059 comm="syz.0.1193" path="socket:[37150]" dev="sockfs" ino=37150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.844057][ T9970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.919941][ T5834] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 171.048642][ T9970] veth0_vlan: entered promiscuous mode [ 171.060384][ T9970] veth1_vlan: entered promiscuous mode [ 171.089579][ T9970] veth0_macvtap: entered promiscuous mode [ 171.097256][ T9970] veth1_macvtap: entered promiscuous mode [ 171.117077][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.123093][ C1] usblp0: nonzero read bulk status received: -71 [ 171.124592][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.126784][ T5886] usb 10-1: USB disconnect, device number 2 [ 171.165796][ T5742] Bluetooth: hci5: command tx timeout [ 171.217940][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.224961][ T1199] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.229820][ T1199] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.235641][ T1199] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.357436][T10037] usblp0: removed [ 171.414025][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.418701][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.438575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.443797][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.531925][T10084] netlink: 'syz.2.1197': attribute type 11 has an invalid length. [ 171.664472][T10098] openvswitch: netlink: Flow key attribute not present in set flow. [ 171.717878][T10086] SQUASHFS error: Failed to read block 0x0: -5 [ 171.720249][T10086] unable to read squashfs_super_block [ 171.722226][T10098] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 171.736664][T10098] bridge0: entered allmulticast mode [ 171.810015][T10107] netlink: 'syz.0.1202': attribute type 10 has an invalid length. [ 171.813432][T10107] batman_adv: batadv0: Interface deactivated: dummy0 [ 171.824878][T10107] batman_adv: batadv0: Removing interface: dummy0 [ 171.829110][ T40] audit: type=1400 audit(2000000059.129:1072): avc: denied { setopt } for pid=10112 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.837161][ T40] audit: type=1400 audit(2000000059.129:1073): avc: denied { getopt } for pid=10112 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 171.880001][T10119] EXT4-fs (nbd6): unable to read superblock [ 172.007478][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1210'. [ 172.117391][T10141] program syz.2.1213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.147231][T10130] bond1: option arp_all_targets: invalid value (18446744073709551614) [ 172.152792][T10130] bond1 (unregistering): Released all slaves [ 172.176058][T10147] cgroup: Name too long [ 172.397713][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1218'. [ 172.470192][T10164] netlink: 'syz.5.1222': attribute type 1 has an invalid length. [ 172.486765][T10164] bond1: entered promiscuous mode [ 172.492120][T10164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.506170][T10164] vlan2: entered allmulticast mode [ 172.507945][T10164] bond1: entered allmulticast mode [ 172.527300][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'. [ 172.535364][T10174] sctp: [Deprecated]: syz.0.1223 (pid 10174) Use of int in max_burst socket option deprecated. [ 172.535364][T10174] Use struct sctp_assoc_value instead [ 172.543490][T10166] bond1: (slave bridge1): making interface the new active one [ 172.546224][T10166] bridge1: entered promiscuous mode [ 172.548201][T10166] bridge1: entered allmulticast mode [ 172.556212][T10166] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 172.590432][T10164] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 172.698228][T10179] netlink: 'syz.5.1224': attribute type 3 has an invalid length. [ 172.701103][T10179] netlink: 'syz.5.1224': attribute type 1 has an invalid length. [ 172.703602][T10179] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1224'. [ 172.729745][T10183] loop2: detected capacity change from 0 to 7 [ 172.736583][T10183] Dev loop2: unable to read RDB block 7 [ 172.738611][T10183] loop2: AHDI p1 p2 p3 [ 172.740161][T10183] loop2: partition table partially beyond EOD, truncated [ 172.742970][T10183] loop2: p1 start 1601398130 is beyond EOD, truncated [ 172.745791][T10183] loop2: p2 start 1702059890 is beyond EOD, truncated [ 172.757904][ T40] audit: type=1400 audit(2000000060.049:1074): avc: denied { block_suspend } for pid=10186 comm="syz.2.1226" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.778269][ T5146] Dev loop2: unable to read RDB block 7 [ 172.785219][ T5146] loop2: AHDI p1 p2 p3 [ 172.787216][ T5146] loop2: partition table partially beyond EOD, truncated [ 172.791135][ T5146] loop2: p1 start 1601398130 is beyond EOD, truncated [ 172.794356][ T5146] loop2: p2 start 1702059890 is beyond EOD, truncated [ 172.798634][T10189] XFS (nbd5): SB validate failed with error -5. [ 172.913061][T10202] binder: 10200:10202 ioctl 400c620e 200000000180 returned -22 [ 173.184622][ T40] audit: type=1400 audit(2000000060.489:1075): avc: denied { map } for pid=10215 comm="syz.0.1234" path="socket:[37554]" dev="sockfs" ino=37554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.195019][ T40] audit: type=1400 audit(2000000060.489:1076): avc: denied { read } for pid=10215 comm="syz.0.1234" path="socket:[37554]" dev="sockfs" ino=37554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.243910][ T5742] Bluetooth: hci5: command tx timeout [ 173.268799][T10220] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 173.414072][T10232] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1241'. [ 173.433678][T10235] xt_NFQUEUE: number of total queues is 0 [ 173.437191][T10236] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1238'. [ 173.460603][T10232] syzkaller0: entered promiscuous mode [ 173.463094][T10232] syzkaller0: entered allmulticast mode [ 173.466223][T10235] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 173.467445][T10238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.530157][T10244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.533443][T10244] IPv6: NLM_F_CREATE should be set when creating new route [ 173.536679][T10244] IPv6: NLM_F_CREATE should be set when creating new route [ 173.539725][T10244] IPv6: NLM_F_CREATE should be set when creating new route [ 173.636496][ T24] usb 38-1: device descriptor read/8, error -110 [ 173.692513][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 173.696945][T10251] openvswitch: netlink: Key type 9223 is out of range max 32 [ 173.804564][ T5741] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 173.835552][T10256] input: syz0 as /devices/virtual/input/input32 [ 173.968806][ T5741] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 173.972503][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.978488][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.993817][ T5741] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 173.999471][ T5741] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 174.002577][ T5741] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 174.006855][ T5741] usb 5-1: Manufacturer: syz [ 174.018781][ T5741] usb 5-1: config 0 descriptor?? [ 174.053258][ T24] usb usb38-port1: attempt power cycle [ 174.157884][T10260] 9pnet_fd: Insufficient options for proto=fd [ 174.230026][ T40] audit: type=1400 audit(2000000061.529:1077): avc: denied { map } for pid=10264 comm="syz.5.1250" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 174.447227][ T5741] hid_parser_main: 7 callbacks suppressed [ 174.447245][ T5741] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 174.604097][ T5741] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 174.635421][ T24] usb usb38-port1: unable to enumerate USB device [ 174.979403][ T4906] usb 5-1: USB disconnect, device number 16 [ 175.017665][T10285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1257'. [ 175.038022][T10283] fido_id[10283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 175.210026][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'. [ 175.313507][T10287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1257'. [ 175.325258][ T5742] Bluetooth: hci5: command tx timeout [ 176.937923][T10276] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 177.216780][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 177.325431][T10315] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 177.347783][T10317] binder: BINDER_SET_CONTEXT_MGR already set [ 177.349973][T10317] binder: 10316:10317 ioctl 4018620d 200000000100 returned -16 [ 177.388329][T10317] binder: 10316:10317 ioctl c0306201 2000000003c0 returned -14 [ 177.393226][T10318] binder: 10316:10318 ioctl c0306201 2000000003c0 returned -14 [ 177.400602][ T5742] Bluetooth: hci5: command tx timeout [ 177.410685][T10317] binder: 10316:10317 ioctl c0306201 200000000300 returned -14 [ 177.528160][T10335] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 177.791150][ T40] audit: type=1400 audit(2000000065.089:1078): avc: denied { mounton } for pid=10340 comm="syz.0.1273" path="/336/file0" dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 178.022155][T10380] netlink: 'syz.2.1280': attribute type 8 has an invalid length. [ 178.034695][T10372] ntfs3(sr0): Primary boot signature is not NTFS. [ 178.061881][T10372] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 178.071300][T10384] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 178.108999][T10387] 9pnet_virtio: no channels available for device syz [ 178.113303][T10387] overlay: Unknown parameter 'volatile:/' [ 178.159360][T10392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=10392 comm=syz.2.1284 [ 178.169026][T10393] 9pnet_virtio: no channels available for device syz [ 178.211181][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 178.549454][T10411] loop5: detected capacity change from 0 to 7 [ 178.574397][T10411] Dev loop5: unable to read RDB block 7 [ 178.586059][T10411] loop5: unable to read partition table [ 178.589116][T10411] loop5: partition table beyond EOD, truncated [ 178.596062][T10411] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.876522][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1291'. [ 178.888556][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'. [ 179.098504][T10419] netlink: 'syz.5.1292': attribute type 63 has an invalid length. [ 179.101135][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1292'. [ 179.115303][ T40] audit: type=1400 audit(2000000066.419:1079): avc: denied { shutdown } for pid=10420 comm="syz.2.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.523887][ T1006] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 179.686630][ T1006] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.690184][ T1006] usb 7-1: config 0 has no interfaces? [ 179.695954][ T1006] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 179.699448][ T1006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.702199][ T1006] usb 7-1: Product: syz [ 179.703995][ T1006] usb 7-1: Manufacturer: syz [ 179.706336][ T1006] usb 7-1: SerialNumber: syz [ 179.714531][ T1006] usb 7-1: config 0 descriptor?? [ 179.807402][T10453] bond7: Removing last arp target with arp_interval on [ 179.813006][T10453] netlink: 'syz.0.1302': attribute type 27 has an invalid length. [ 179.870260][T10455] tmpfs: Cannot change global quota limit on remount [ 179.901148][T10453] bridge0: left allmulticast mode [ 180.244098][T10453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.259048][T10453] batadv_slave_1: left promiscuous mode [ 180.282847][ T40] audit: type=1400 audit(2000000067.579:1080): avc: denied { listen } for pid=10434 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 180.629928][T10453] bond1: left promiscuous mode [ 180.634303][T10453] vlan2: left allmulticast mode [ 180.636450][T10453] bond1: left allmulticast mode [ 180.639025][T10453] bond2: left promiscuous mode [ 180.641701][T10453] bond2: left allmulticast mode [ 180.644545][T10453] bond3: left promiscuous mode [ 180.653455][T10453] vlan0: left allmulticast mode [ 180.655767][T10453] bond4: left allmulticast mode [ 180.734136][T10453] wireguard0: left allmulticast mode [ 180.752443][T10455] can0: slcan on ptm0. [ 180.812934][T10459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.821078][T10459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.855739][T10459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.860790][T10459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.868965][T10459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.873791][T10459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.882257][T10459] veth1_vlan: left promiscuous mode [ 180.886771][T10459] veth0_vlan: left promiscuous mode [ 180.890470][T10459] veth0_vlan: entered promiscuous mode [ 180.895969][T10459] veth1_vlan: entered promiscuous mode [ 180.898060][T10465] xt_policy: neither incoming nor outgoing policy selected [ 180.902481][T10459] veth1_macvtap: left promiscuous mode [ 180.907346][T10459] veth0_macvtap: left promiscuous mode [ 180.910300][T10459] veth0_macvtap: entered promiscuous mode [ 180.913913][T10459] veth1_macvtap: entered promiscuous mode [ 180.920833][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.929161][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.933003][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.937237][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.948200][T10459] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 181.002748][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.006108][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.012746][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.015893][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.036804][T10456] can0 (unregistered): slcan off ptm0. [ 181.093345][ T5834] IPVS: starting estimator thread 0... [ 181.107642][T10472] netlink: 'syz.6.1308': attribute type 2 has an invalid length. [ 181.135208][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1308'. [ 181.146130][T10472] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 181.176883][ T40] audit: type=1400 audit(2000000068.479:1081): avc: denied { map } for pid=10471 comm="syz.6.1308" path="/29/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 181.193952][T10473] IPVS: using max 30 ests per chain, 72000 per kthread [ 181.288288][T10477] syzkaller1: entered promiscuous mode [ 181.290508][T10477] syzkaller1: entered allmulticast mode [ 181.470663][ T40] audit: type=1400 audit(2000000068.769:1082): avc: denied { read } for pid=10480 comm="syz.0.1311" dev="sockfs" ino=39637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 181.546636][ T40] audit: type=1400 audit(2000000068.849:1083): avc: denied { open } for pid=10485 comm="syz.0.1313" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 181.626873][T10493] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1316'. [ 181.933078][T10522] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1323'. [ 181.999571][T10525] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 182.009581][T10525] netlink: 'syz.6.1324': attribute type 3 has an invalid length. [ 182.012501][T10525] netlink: 'syz.6.1324': attribute type 1 has an invalid length. [ 182.018428][T10525] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1324'. [ 182.022464][T10525] NCSI netlink: No device for ifindex 33022 [ 182.027504][ T40] audit: type=1326 audit(2000000069.329:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10524 comm="syz.6.1324" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe85239ce59 code=0x0 [ 182.288733][ T6080] usb 7-1: USB disconnect, device number 13 [ 182.333939][T10528] batadv_slave_0: entered promiscuous mode [ 182.636109][ T40] audit: type=1804 audit(2000000069.939:1085): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1326" name="/newroot/62/file0" dev="tmpfs" ino=352 res=1 errno=0 [ 182.649649][T10533] kernel read not supported for file /file1 (pid: 10533 comm: syz.5.1326) [ 182.655378][ T40] audit: type=1800 audit(2000000069.959:1086): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1326" name="file1" dev="mqueue" ino=38822 res=0 errno=0 [ 182.709408][T10532] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1326'. [ 182.717310][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1326'. [ 182.742317][ T40] audit: type=1400 audit(2000000070.039:1087): avc: denied { write } for pid=10534 comm="syz.0.1327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 182.856372][T10539] 9pnet_virtio: no channels available for device syz [ 183.168241][T10527] batadv_slave_0: left promiscuous mode [ 184.187101][T10578] fuse: Bad value for 'fd' [ 184.384904][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 184.384929][ T40] audit: type=1400 audit(2000000071.679:1089): avc: denied { create } for pid=10580 comm="syz.0.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 184.549080][T10560] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.705995][T10590] openvswitch: netlink: Missing key (keys=40, expected=80) [ 184.730210][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.740571][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.748519][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.757324][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.764135][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.854911][T10560] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.061786][T10560] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.255527][T10560] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.312904][T10611] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 185.488317][T10592] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.491515][T10592] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.497915][T10592] bridge_slave_0: entered allmulticast mode [ 185.504834][T10592] bridge_slave_0: entered promiscuous mode [ 185.508834][T10592] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.520783][T10592] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.526009][T10592] bridge_slave_1: entered allmulticast mode [ 185.542412][T10592] bridge_slave_1: entered promiscuous mode [ 185.683598][T10592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.720457][T10592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.785494][T10592] team0: Port device team_slave_0 added [ 185.789818][T10592] team0: Port device team_slave_1 added [ 185.822122][T10632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1347'. [ 185.870470][T10634] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1348'. [ 185.923358][T10637] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1348'. [ 186.085835][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 186.267276][T10560] bridge_slave_1: left allmulticast mode [ 186.270112][T10560] bridge_slave_1: left promiscuous mode [ 186.278422][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.287981][T10560] bridge_slave_0: left allmulticast mode [ 186.292476][T10560] bridge_slave_0: left promiscuous mode [ 186.294937][T10560] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.837464][ T5751] Bluetooth: hci3: command tx timeout [ 186.849347][T10560] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 186.852065][T10560] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - ca:44:3e:32:c0:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 186.858097][T10560] bridge1 (unregistering): left promiscuous mode [ 186.861087][T10560] bridge1 (unregistering): left allmulticast mode [ 186.864295][T10560] bond1 (unregistering): (slave bridge2): making interface the new active one [ 186.868278][T10560] bridge2 (unregistering): entered promiscuous mode [ 186.871296][T10560] bridge2 (unregistering): entered allmulticast mode [ 187.158131][T10560] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 187.160769][T10560] bridge2 (unregistering): left promiscuous mode [ 187.162834][T10560] bridge2 (unregistering): left allmulticast mode [ 187.281559][T10560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.469565][T10560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.612055][T10560] bond0 (unregistering): Released all slaves [ 187.624381][T10560] bond1 (unregistering): Released all slaves [ 187.651677][T10636] bond0: (slave bond_slave_0): Releasing backup interface [ 187.694216][T10636] bond_slave_0: left allmulticast mode [ 187.699052][T10636] bond0: (slave bond_slave_1): Releasing backup interface [ 187.744314][T10636] bond_slave_1: left allmulticast mode [ 187.758205][T10636] team0: Port device team_slave_0 removed [ 187.768274][T10636] team0: Port device team_slave_1 removed [ 187.774738][T10636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.782820][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.790156][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.809865][T10637] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.813105][T10637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.816290][T10637] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.819469][T10637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.828049][T10637] __nla_validate_parse: 1 callbacks suppressed [ 187.828071][T10637] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1348'. [ 187.831812][T10638] team0: Mode changed to "loadbalance" [ 187.849951][T10640] bridge5: entered promiscuous mode [ 187.880173][T10637] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.883472][T10637] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.899403][T10592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.903284][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.927935][T10592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.933880][T10592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.936618][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.953882][T10592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.021444][T10652] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 188.120926][T10592] hsr_slave_0: entered promiscuous mode [ 188.125088][T10592] hsr_slave_1: entered promiscuous mode [ 188.128800][T10592] debugfs: 'hsr0' already exists in 'hsr' [ 188.131435][T10592] Cannot create hsr debugfs directory [ 188.278812][T10672] gfs2: error -5 reading superblock [ 188.290682][T10674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10674 comm=syz.2.1354 [ 188.303567][T10674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10674 comm=syz.2.1354 [ 188.380522][T10680] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1354'. [ 188.507202][ T40] audit: type=1400 audit(2000000075.809:1090): avc: denied { write } for pid=10684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.568670][ T40] audit: type=1400 audit(2000000075.869:1091): avc: denied { write } for pid=10688 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.647856][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 188.883368][T10560] hsr_slave_0: left promiscuous mode [ 188.891653][T10560] hsr_slave_1: left promiscuous mode [ 188.904356][T10560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.911524][T10560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.913952][ T5751] Bluetooth: hci3: command tx timeout [ 188.922154][T10560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.925981][T10560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.926519][ T40] audit: type=1400 audit(2000000076.229:1092): avc: denied { write } for pid=10697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.980210][ T6080] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 189.004636][ T6080] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 189.010095][T10560] veth1_macvtap: left promiscuous mode [ 189.017437][T10560] veth0_macvtap: left promiscuous mode [ 189.022351][T10560] veth1_vlan: left promiscuous mode [ 189.027467][T10560] veth0_vlan: left promiscuous mode [ 189.063272][ T40] audit: type=1400 audit(2000000076.359:1093): avc: denied { write } for pid=10711 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.166879][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1365'. [ 189.268791][T10560] team0 (unregistering): Port device team_slave_1 removed [ 189.277970][T10560] team0 (unregistering): Port device team_slave_0 removed [ 189.463854][ T5833] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 189.483973][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 189.623540][ T5833] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 189.628606][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.633240][ T5833] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 189.638419][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.644727][ T5833] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 189.650192][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.659599][ T5833] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 189.665580][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.666694][T10592] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 189.670826][ T5833] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 189.679038][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.680682][T10592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.682956][ T5833] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 189.685660][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.689722][T10592] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 189.695652][ T5833] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 189.703812][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.708881][T10592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.712183][T10592] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 189.712979][ T5833] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 189.723522][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.727300][ T5833] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 189.734874][ T5833] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 189.741683][T10592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.744058][ T5833] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 189.746811][ T5833] usb 5-1: Product: syz [ 189.748263][ T5833] usb 5-1: Manufacturer: syz [ 189.749993][ T5833] usb 5-1: SerialNumber: syz [ 189.753362][T10592] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 189.762119][T10592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.767007][ T40] audit: type=1400 audit(2000000077.069:1094): avc: denied { write } for pid=10733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.770561][ T5833] usb 5-1: config 0 descriptor?? [ 189.856783][ T40] audit: type=1400 audit(2000000077.159:1095): avc: denied { write } for pid=10743 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.890602][T10592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.912369][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 189.970539][T10592] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.988039][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.990936][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.991691][ T24] usb 5-1: USB disconnect, device number 17 [ 190.014768][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.017471][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.093602][T10560] IPVS: stop unused estimator thread 0... [ 190.121237][T10758] support for the xor transformation has been removed. [ 190.139441][ T40] audit: type=1400 audit(2000000077.439:1096): avc: denied { write } for pid=10755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.203019][ T40] audit: type=1400 audit(2000000077.499:1097): avc: denied { write } for pid=10768 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.255518][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 190.356133][T10781] netlink: 'syz.6.1376': attribute type 3 has an invalid length. [ 190.358930][T10781] netlink: 'syz.6.1376': attribute type 1 has an invalid length. [ 190.362099][T10781] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1376'. [ 190.366345][T10781] NCSI netlink: No device for ifindex 0 qemu-system-x86_64: hw/ide/core.c:934: ide_dma_cb: Assertion `prep_size >= 0 && prep_size <= n * 512' failed. Connection to localhost closed by remote host.