last executing test programs: 3.8936744s ago: executing program 0 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x31) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x208}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 3.683937021s ago: executing program 2 (id=621): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000180)={0x1d, r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f00000000c0), 0x10) 3.539967686s ago: executing program 0 (id=622): r0 = epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xa) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="00008100", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r5}, 0x14) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x6002a009}) 3.539162571s ago: executing program 2 (id=623): sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async, rerun: 32) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xac, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x200}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x184, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ea0586c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d4ce6f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x696f17bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57218140}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x195dfee8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4890b67e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ad87d68}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70b14f59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ead9bec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a9809fa}]}, {0x4}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe67a7cf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7af58cf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26c212c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12c50d69}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68789c1a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x271c6b0d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51d7a534}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x400c000}, 0x8004) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000740)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00'}) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x254, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x210, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0xd8ee1ee391d32e68}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xffffff80, @private2, 0xdbf}}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffffffd, @empty, 0x5}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6017a53d06b3e7749f130a04d87ce566c17bc43b2c5f1cfb145fd50f21e8d1f1"}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ff1afa69b9525f00e31538d0e1c9df78e9caeafbcccfd95463a9a83e7b54d051"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @local, 0x5}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8018cabe8b3088a7618b59fc5d690a6f95a522f65eb257d2df091713aa9eabc3"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3f80, @remote, 0xfffffffb}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x254}, 0x1, 0x0, 0x0, 0x40041}, 0x4040001) (async, rerun: 32) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r1) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x51) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r7) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd2c, 0x25dfdbfd, 0x7fff, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x80) (async) r8 = io_uring_setup(0x4ddf, &(0x7f0000000e00)={0x0, 0xe3f7, 0x0, 0x3, 0x2eb}) syz_io_uring_setup(0xe9f, &(0x7f0000000e80)={0x0, 0xfd71, 0x10, 0x1, 0xba, 0x0, r8}, &(0x7f0000000f00), &(0x7f0000000f40)) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000fc0), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x40, r9, 0x100, 0x3, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xb8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001100)={'wpan3\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x8000) r11 = syz_open_dev$sg(&(0x7f0000001200), 0x8, 0x101020) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f0000001240)={0x88, 0xe02, 0x4, "0c25193ca007ee682f93c1f4fb1e47bcd25aaf43b32293e12d37e44d9c4c5d78f321a0b583bf44058c7b0c569de3a43e02a083e1e7ab80a4956c8deabf81e4b3f9ea3073d444e406b1bbdafa321d8ff021cee8eb1f9402fbc9271b2d3550366f7f067ae8aed821e46d884ff25bb5964d6da6d6d5caa01bff712baa5bbb66686fedbbcb82f2a1e5c6"}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0xb4, r12, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f57}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xdc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x42}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) syz_emit_vhci(&(0x7f00000014c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) 3.314012559s ago: executing program 0 (id=625): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x0, 0x268, 0xa, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x300, 0x6, 0x1000}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {0x0, 0xffffe000}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 3.201622863s ago: executing program 0 (id=626): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x0, 0xcd, [0x1ff, 0x4, 0x80, 0x507, 0x1, 0x9, 0x8, 0x2, 0x1, 0xffff]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x0, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x0, 0x26, @random=0x1478}, @NL80211_ATTR_CHANNEL_WIDTH={0x0, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ, @NL80211_ATTR_CENTER_FREQ2={0x0, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x0, 0x122, 0x369}, @NL80211_ATTR_CENTER_FREQ1, @NL80211_ATTR_CHANNEL_WIDTH], @NL80211_ATTR_DURATION={0x0, 0x57, 0x57d}]}, 0x34}}, 0x4004) 3.143130396s ago: executing program 0 (id=628): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x20, 0xc, 0x79, {0x79, 0x24, "6ab27aa76de648a90aa00991e3e54eb0a356536941bee1991c20ed1e253020120e33905f690117f44d2b0026bb62a07e5d1b312701e018c7aaa8eccca16a87e396e95dd12123dcf92feabc34b82fb8c3c4c39a0103c7b1a9f449cbdfcd81395eefe0305d3270d38ac5ac9c25b54f03cbb1c8d9b862d823"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x16, 0x7d, "4da4afba465a71a87be25ea57823e1e4f2052e2b2b59a26080ac38dfe584bcecdcc44425730c4a28623c5f240faee1b2b38e83f7eacf97d257707208f0e1ca52bd7342b35f95cc317401bfe4275f544af20e6c78b2a47179a5a12127e298d11dea63ca47065aaa8ec67467b3467077d94a950db505f0a24786a416eab9"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x0, 0x4f, {0x4d, "cdbe4f99d6f3c449473168fd9538e6113102298ea0cde78cf186376ed6c133cac64cd9be2fb80eef3262feb68f09b8de14f782a252952dfa3fcac7948ce4089480473768da03ccfccbd72441aa"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x8}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b01, 0x0) 2.62946234s ago: executing program 2 (id=632): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0910000000000035090100700000000600000003000000bf98000000000000760800000000000085000000ba000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd2d, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r6, 0x1, 0x7}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r10}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r9, 0x0, 0x4, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc, 0x0, 0xbe]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={r11}) execveat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x400) 2.381058976s ago: executing program 2 (id=635): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x0, 0x268, 0xa, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x300, 0x6, 0x1000}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {0x0, 0xffffff80}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 2.320121511s ago: executing program 2 (id=637): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000000c0)={{@my=0x1}, @any, 0x0, 0x0, 0x400005}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7aa, &(0x7f0000000000)={{@my=0x1}, @local, 0x0, 0x38000000000, 0x0, 0x800}) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0xffffffffffffffd7, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) 1.819476121s ago: executing program 3 (id=640): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000002240)="fbd89b3e8977042b8d34702d075a011fd70630380f4fb526e7863d4634cbfa0bc71f5511e940db08172fad84fa1395f7449057c8f0e95db43f347b2a40fd8272", 0x40}], 0x1}, 0x34000041) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280025fd00e78bd3004d75000000000000000000", @ANYRES32, @ANYBLOB="08000a00020000000800040064010100"], 0x28}}, 0x0) 1.753487404s ago: executing program 3 (id=641): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) r4 = socket(0x11, 0x800000003, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000800)={{&(0x7f0000473000/0x3000)=nil, 0x3000}, 0x4}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2003}, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@mcast2, @remote, [], [], 'bridge_slave_1\x00', 'geneve0\x00', {}, {}, 0x2f, 0x0, 0x4, 0x40}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4000000, 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}, {0x20}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x239f, 0x7f, 0xd0e9, 0x41a, 0x0, 0xf838, 0x100]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x1000000, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x200}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x10000, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x10}, {0xfffffffd, 0x0, 0x0, 0x5, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffb, 0x0, 0x0, 0x6, 0x1}, {}, {}, {0x0, 0xff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0xcb, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffff8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x83f}, {}, {}, {}, {0xffff0001, 0x0, 0x0, 0xfffffffc, 0x0, 0xff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffb}, {}, {}, {0x0, 0x0, 0x40000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x4, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x200000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x40) sendmmsg(r9, &(0x7f0000000180), 0x40000000000007b, 0x4004) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r11 = socket(0x11, 0x2, 0x0) setsockopt(r11, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) timer_delete(r1) socketpair(0x25, 0x3, 0x6, &(0x7f00000007c0)) 1.344135906s ago: executing program 2 (id=642): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_ifreq(r3, 0x8993, &(0x7f00000000c0)={'veth1_vlan\x00', @ifru_mtu=0x4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r4}) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000140)=""/139, 0x8b) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000200)=""/210, 0xd2) (async) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000200)=""/210, 0xd2) openat$incfs(r2, &(0x7f0000000300)='.pending_reads\x00', 0x10020, 0x15c) (async) r5 = openat$incfs(r2, &(0x7f0000000300)='.pending_reads\x00', 0x10020, 0x15c) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) statx(r2, &(0x7f00000003c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400)) (async) statx(r2, &(0x7f00000003c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r5, r6, r8) sendmsg$AUDIT_LIST_RULES(r5, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x10, 0x3f5, 0x4, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002680), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x68, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x810) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x68, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x810) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000027c0)={0x74, 0x0, 0x18}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000002840)={0x25, "e11580fb8976fd728a3e5ea05ff0df700f26672395b500347b612c338295261b30698d821e"}) (async) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000002840)={0x25, "e11580fb8976fd728a3e5ea05ff0df700f26672395b500347b612c338295261b30698d821e"}) openat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', 0x2, 0x87) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', 0x2, 0x87) pidfd_getfd(r10, r2, 0x0) (async) r11 = pidfd_getfd(r10, r2, 0x0) write$FUSE_BMAP(r11, &(0x7f00000028c0)={0x18, 0x0, r7, {0x1}}, 0x18) (async) write$FUSE_BMAP(r11, &(0x7f00000028c0)={0x18, 0x0, r7, {0x1}}, 0x18) syz_usb_connect(0x0, 0xd31, &(0x7f0000002900)={{0x12, 0x1, 0x110, 0x66, 0x5e, 0xe, 0x40, 0x148f, 0x9020, 0x6d17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1f, 0x4, 0x2, 0x0, 0x58, 0x0, [{{0x9, 0x4, 0xaa, 0x7c, 0xa, 0x2e, 0xc5, 0x90, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x5, 0x5}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x7, 0x6, "1cefb4"}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0x8, "31cf3fb8"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x5, 0x2, [0x5, 0x3], 0xfc}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x4, 0x4, "54de08b461"}]}], [{{0x9, 0x5, 0x8c, 0x10, 0x40, 0x1, 0x93, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0x938d}]}}, {{0x9, 0x5, 0x6, 0x8, 0x0, 0x5, 0x10, 0x3, [@generic={0xd5, 0x22, "f1016a81661d56cb787b3c97d2156817735b68808d6143dbc96545e2ba6618ed0af62debb8e2d8685b089cb7299db846ef5b34f90e8312b0ebe7e7fee30f531bbeea89517deb7d7858b40fdb1d894f4ca129e27d6a872dbe790281fe302f0b23ec4aa543c53eb3268db88142e4566fe3e1813b07b3a977424e202247466f8d41729d1f41b5c192d4e0efc1864d82645cd0c708db0ce4191c176ebfc84cc15e1bcb75db2c808b67d904bf5228cff5e15c0c0fa0388781fb25ae0a2a5e6f0ab2378f4332b93ebac46a0b71fca92fab7c6701cbd6"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x2, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xfff}, @generic={0x2c, 0x24, "9d39f2755a5cd972398d38f85effda6d219faf5605ddb5a77338abecdf0d7f0d8ab111686c4a3f8adb35"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x5, 0x5, 0x8}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x5, 0x5, 0x6, [@generic={0xc8, 0x22, "698287299e22c62c39b107e3f6322c91685b3d4bd233eaa78226d0a6d621edeaf0681ee0a5b8c917fc45923fb7286018f07c8bba925b79eb66dcbd3ddae6d952410fa8578ef69391d5bc46ffa90ab07c4b63e52cf5eec3a7f31cc267b76543da38295cfaf489c55de9a69407e43d7a9ddc2e69a625d3fbc215e87c8f19e736effc8f142af6cb3d63214989b4d7dd4379fcdc70de24cc24ec030d53c3cc4b89ce1af21e9fe5fd27e9f4a56c8233963fda860743a8ef0da875b92d65bbdc1038aa5821e7cb9fe9"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xda}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x1, 0x9, 0x9, [@generic={0x5c, 0x21, "41eae3313bdaf0c9f1f7f73e2b2c3a157a0c2932b931cdb7d6428f9160736bd66ee07695b594e6a14c9234699aa5cba01e3b04bc135aa91a72ffa988802a9f90f436360f103878e845a02880e5126426c3a6344d18350a17815d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x3, 0x4, 0xfd}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x5e, 0x7, 0xf4, [@generic={0x2d, 0x31, "89de5d2910e2a65794700d6d4d09dd3f8a9d29cfe29d3fa8e634c1ba35fe93937edb567eebe5e1b0407233"}, @generic={0xb5, 0x7, "903a77d6caf1e4d0d11f45c33363fb5dc905a370482f48e8d69446e4558ea70bbc4e56a0e79b21cdf618b611d138005c32ec51ee9b79680914d129593b1c5ff80332ae8a9378361ea48f959079379afd827926b91fa0ffbee2f07f5cf0634e4969583c22496f40c985dda0001236e3fc64aff0633a68755aec6f11c79321181ed558d63c712af028965bad777abf630e786737bfb730e8283456f2c19760b9aba3f5b3cd0c58728dba8d2f050a030cb0dcdc8d"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x2, 0x5, 0x2, [@generic={0xcb, 0x24, "1db0b81dfc484ad93cf2e6d952b3d63f90fe2978f1abc7a7ba6df3434fa2dd60549063c3daa26ced8f2292054c49284902fac9270bb1db6c93e0666a835c5e63dad844a89c1ca914dd26819a43c72d8d64ed9bca1b6cd3216a5cd250fac9f6cb5a1400dcaa06516069f220cbfb1c655c8aff251e22939e6188294173024ac83a8fdad89a40ecd3c2c837ab74e61957b7c8150139a7edd3d477c3273ea030d2b6a4670f54a3e10765c8c37cf040d33cdf1b3214da39072053f1d50bfc501032c7066321e767c187e88d"}]}}]}}, {{0x9, 0x4, 0xfa, 0x7, 0x0, 0xff, 0xff, 0xff, 0x6}}, {{0x9, 0x4, 0x82, 0x0, 0xd, 0xc1, 0xcb, 0xc3, 0x23, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xb448, 0x1000, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0xfbff, 0x7}, @country_functional={0xe, 0x24, 0x7, 0xe, 0x3, [0x3, 0x9fd3, 0x8, 0xc]}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x4, 0xf, 0x5, [@generic={0x4d, 0x3, "99e5df44499eb7e1fe169cfd33f9b7152aa2571488d1ae7a21932b73aaa9ba85af0625c39475798a8a9fe711fdd8ceedd128631ecee38cf7d1ba52c534056d59f2d99dc91fafdc91c1d759"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x7, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xa}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x8, 0x6, 0x7, [@generic={0x19, 0x24, "7006ff4107f0ff607929d448aedb9300caa4a213ae1a70"}, @generic={0x26, 0x31, "8165fd834c4decb3e0cc04819e4bd54510f75d2f1552b15e7e962907724a96e8df2a0010"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x3, 0x7f, 0x9, [@generic={0x16, 0x31, "45a20f3b85356ec9ac83c22cce53a2de0bbeba5c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x1, 0x10, 0x2, [@generic={0xe, 0x11, "687de824f0db5b341f391903"}, @generic={0x48, 0x38, "187b9f17c2abedb7e2e46a4c1d429a9ec2aa183b23640c747d16ad4787596e80d60e732d8ee45ff4eda21144292d3963114e7189f88f46cd85891bf0b66b12b4d03325f055e7"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x0, 0x1, 0x75, [@generic={0x70, 0xf, "216b85dc84db94ca782ef5b53a14a2098434dc25c4c11b8115a2ff1d931d3a2c2515cc05b0c410c37338e8496644d3dfb4ff388c8a98cce2e7d63749b15209fdaa2c3bc4888bf43e8fb5ba430ad8a160b52275baa50eb487a5a499a1155c4bfdca5889490a785973e7ec1cfe0e83"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x4, 0x9, 0xdb, [@generic={0xb8, 0x21, "e56e1e701f43659ae7285d56f738d596f3e0dde86b79d70f6990bb1cb57eabaa899f09119b15ab376216b213db68d053bed3aed6b8c7c83513de8fe87268751bf34c9dbefa6694a3121e32072adafabb52857c6e00f620c5e1bdb9961dd1bd85e64c692cbad5e0d21382f5dac8bbd09ed00af246e683e9e01819ebbfd0b5f1ad174840f70baf487f2a16cf66870ec57d029f369bc299208c8bcd17d9a89d2b140d0da1c4703c9d0d30f841d7d3aa59a24c3aa508c756"}, @generic={0x8b, 0x21, "a8af8711743fd50a9437598edf1db15812528b0d576d331eceab0bebac452b27ca68ef6d4924ecf4a56fda7d1ab1802977f7d4bb9288f6e1ee7e8b3ca37dbc7ce08c88a1e6c420f04fe9a5f5157935aad8e5d9874d2a2fdaa031587c442998e484ac15953e993230635dc12f611513eea84bc26261bb5b5a30e302fef01a72fa1c9efa6ec7f011c52f"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0x6, 0xa}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x81, 0x4, 0x8}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0x0, 0xb0, 0xdf}}, {{0x9, 0x5, 0xd, 0x8, 0x218, 0x8d, 0x7, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x2, 0x5, 0x7}}]}}, {{0x9, 0x4, 0x4, 0x3, 0x7, 0x2d, 0xb9, 0x34, 0x1, [@generic={0xfd, 0x23, "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"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x96, 0x5, 0x1}]}], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x1, 0x64, 0xf, [@generic={0x3b, 0x20, "cfd1edfc8a82523e0e99535edbaca7631f62f03f06f56b7e970cd3e2eae80ad77b5f668614d3bde7a82a711e72a6d542ff19c271f409dc8cee"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}, @generic={0xdc, 0x11, "6df50ad31e3aa8c980ee91755b3878141c23af5cb30365205958ebd52294320eea4bc8caa9cfd45583ec15e07e507ac7a02f2641939c4396c35bf7e34d4d2b53b8d4fa19d61802fadfda46d7d3197483f0981b20e99bff44a4af295c75fd4abadf520b629b35511e61c5eb55cba15dc70c6e2f33807153bc3d2f0378c1f8cab9d744118abea853cc65345d8f7312b90e4a008315644630815ca2390c1894899e7cb8a3445aa891f4e9b88992119e187793e443e65259441d92788383c9ee32404e6b801429a0b04bcb6cce343ea3c26f68c777d48bb64882d39d"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x2, 0x8, 0xb3, [@generic={0xd6, 0xa, "ae9b0a30a93d1fba5dcd5874b7081c558a072ea681474a25d3e3a61f39f02dcbfe569f2e22779d3638fc1a22ac01caaa759f08da8d21fe2f559759ea0248f85f21807a5072a0d51551c6adb948e5b2d07f50a882654c031e686e7a6dfd64bb5dc5224915ff8f9504e02d21d97e04bb923cd23137632818575b3a2669ea2340fb10b50cf25a94c1450bb4a5933b4f0ee0b62b7ba6ba4315ab2042fb8a5f6d2d8ca7597f3291fb7c3c55251cc4e84b3f09d86a32c2765c113761f8b950c9499af283a77df3480825f58decd3232e25ab44a134ecea"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x120}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x9, 0x0, 0xa9, [@generic={0x7d, 0x10, "33de888ac503feb5794d18281d8c25eca6181442cdb9badfc7073b9483a1db06f47ae5ddf362d17e5f6d878b47bed37d61df1de7c360b9c0bef1c14a82c194c74037882875ac3d755a7ca0a0f5cd9f5600f0c836ddd079e9d1a5c903f5b55d3818f7fc1336ca7c889bfce133fc6eda475006e73b9d079b3fdc4e85"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x8}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x3, 0x81, 0x3, [@generic={0x89, 0x7, "73b95ce233bcef4be426ef651ce64576a9a894ea00d81219393f294ea09d99a4bbe4e492090e92e94c2896d101a2b3f91f925d60fa0dbc9023f774950f1078d64d7268bc8c7fc44c074b5f4f544f3b8316bb4292c2a28b671d2b4c356cc62d4dd8cf719f60c259b0218d40536354fe481e8b18e3b2f1d5ce4623fa8ffe6dbcd6641e722596d1d2"}, @generic={0xc4, 0x23, "682ee104df8eec3bf73fa47d00b46c1bdcc4ebc6c8b1467639e1f502db261917f41d663a2db1775ac5f8c6bdab698463281ddf6352053431524ee09bbe88168f4fee5b0d291fb620f46e9358fab2410d8ce180f1af7f0568863719d6a7d3c656742fb131dbed02dece7df578d2cc1a63d9bc7503096bc08fce315c66b7170be5314535fe6797d8502a9bf307a590978d00babf54b52cfc63718667cbd1a720cf2aa0372139b826d37a348b326e3c34642a5631cabe58b45d85d9bdeaf83c8c04c0df"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}]}}, {{0x9, 0x5, 0x8, 0xbb83b61913783121, 0xe05f0e14b8baf009, 0x9, 0xc4, 0x3}}]}}]}}]}}, &(0x7f0000003940)={0xa, &(0x7f0000003640)={0xa, 0x6, 0x201, 0x8, 0x8, 0xff, 0x0, 0xff}, 0x2c, &(0x7f0000003680)={0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x0, 0x0, 0xfff7, [0x3f0f, 0x0, 0xff00c0, 0x3ff0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x93, 0xf, 0x0, 0xfff6, 0x2}]}, 0x8, [{0x4f, &(0x7f00000036c0)=@string={0x4f, 0x3, "3b569bb198ab87196017abe8c9b7e4e4591e57bf5966a2f800aa2287e3a0d8b0e57c86eb8a264315522615cc18123a7a72ea987ad34027279ff9af373cc5b64862bfa5fa2aaa157925e0ff6768"}}, {0x10, &(0x7f0000003740)=@string={0x10, 0x3, "9bdb2829e8efce3a1442e27a9103"}}, {0x4, &(0x7f0000003780)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000003800)=@lang_id={0x4, 0x3, 0x41a}}, {0x43, &(0x7f0000003840)=@string={0x43, 0x3, "639d7b27fce69f5608278a3407a2ff95f46d833c1970ae36339d50aa8d2b582c4d9ae4f4028cea8198f29fffd67db9d727bff01069a9988886b35318066eccf2a0"}}, {0x4, &(0x7f00000038c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000003900)=@lang_id={0x4, 0x3, 0x1004}}]}) r12 = accept$inet(0xffffffffffffffff, &(0x7f0000003a00)={0x2, 0x0, @local}, &(0x7f0000003a40)=0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003a80)=@o_path={&(0x7f00000039c0)='./file0\x00', r2, 0x4000, r12}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003a80)=@o_path={&(0x7f00000039c0)='./file0\x00', r2, 0x4000, r12}, 0x18) getpid() 827.729056ms ago: executing program 3 (id=644): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x0, 0x5, 0xcb0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000980)='sched_switch\x00', r3}, 0x18) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast, @remote}, &(0x7f0000000840)=0xc) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000880)={0x0, 0x1, 0x81, r4, 0x1ff}, 0xc) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000000000000000de95e6ff179be5ed00002000000095000000000080003078e711313f8244db7df94799f844de58ffdcb1d58d20f2d2d7dfbf0dff4c58b6b9e24db489dd00"/86], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02742f4680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = gettid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) (async) ioctl$int_in(r7, 0x5452, &(0x7f00000007c0)=0x1ff) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'sit0\x00', 0x0}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0xa1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000500000000000000000000001800000002000000000000000500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000040b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x4d661009, 0x1000, &(0x7f0000002340)=""/4096, 0x40f00, 0x30, '\x00', r9, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r2, 0x4, 0x0, &(0x7f00000006c0)=[{0x1, 0x4, 0x6, 0xb}, {0x0, 0x4, 0xe, 0x3}, {0x3, 0x4, 0x0, 0x2}, {0x4, 0x2, 0xe, 0xb}], 0x10, 0x5, @void, @value}, 0x21) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) fcntl$setsig(r7, 0xa, 0x12) (async) r12 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r13 = accept4(r12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r13) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r13, 0x84, 0x79, &(0x7f0000000300)={0x0, 0x43, 0x6}, 0x8) (async) sendmsg$alg(r13, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000002240)="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", 0x100}], 0x1, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) ppoll(&(0x7f0000000100)=[{r8}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) (async) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) (async) syz_clone(0x600, &(0x7f0000000a00)="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", 0x1000, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)="990d9b1ddfd656205ca56b7bf1b3c108b20ff5ff439c712bdb239189d489e2c73d2155fd4cbb9c40ff4fcd4246d15469ecc13f83b39d4f39677281e801a4acbf185d3c6f6c4dcfda31d087e570e6e43f5f2b03a9644a872d56b24e2f1677b5a051319c323610adf05cd1885b6d0faeb478c6ebce51ed68844b47ba65544f9491d93b23ba937c9f43fbdd9fc0ee9c27305ed4c9ee8ed460224d31066bcf44e5913f188a877bd7bb2107f01673a0c900f4f18bb19d8bee44f392b289feada722539286066ebc681bca815dfa40983b00ab283a0e78b10311a774046591cedb7c43c5368c596bc832") 826.960714ms ago: executing program 3 (id=646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa0b009078030000004500000000000000002f0000ac14140ae0000001040086dd0000ffffcca37296a7"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r4]) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) r6 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000007200200026bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0800010000080001000000000008000100010000000800010000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x2, 0x0, [{0xb, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x1, 0x9, 0x0, '\x00', 0x74}, {0xa, 0x3, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0x4b, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0x9}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x8}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa0b009078030000004500000000000000002f0000ac14140ae0000001040086dd0000ffffcca37296a7"], 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r4]) (async) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000007200200026bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0800010000080001000000000008000100010000000800010000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x2, 0x0, [{0xb, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x1, 0x9, 0x0, '\x00', 0x74}, {0xa, 0x3, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0x4b, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0x9}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x8}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}}) (async) 824.610576ms ago: executing program 1 (id=648): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6000000, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 753.777203ms ago: executing program 1 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x8, 0x5, [{0x6, 0xd, 0x0, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = getuid() setfsuid(r4) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000300)={'trans=unix,', {[], [{@subj_user={'subj_user', 0x3d, 'multiq\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x62, 0x65, 0x34, 0x31, 0x66, 0x37, 0x34], 0x2d, [0x36, 0x63, 0x64, 0x65], 0x2d, [0x0, 0x34, 0x32, 0x38], 0x2d, [0x36, 0x37, 0x35, 0x64], 0x2d, [0x61, 0x32, 0x37, 0x35, 0x62, 0x36, 0x36, 0x30]}}}, {@fowner_lt={'fowner<', r4}}, {@obj_user={'obj_user', 0x3d, '^(\'[9[!d['}}, {@dont_measure}, {@seclabel}, {@subj_type={'subj_type', 0x3d, '}]+,-'}}, {@appraise_type}]}}) socket(0x1e, 0x0, 0x6) 557.08507ms ago: executing program 1 (id=650): r0 = creat(&(0x7f0000000580)='./file0\x00', 0x0) (async, rerun: 64) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async, rerun: 64) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x10001011, r1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"2790573ff4f3fe82a0463f09edb2e503", 0x0, 0x0, {0xc2, 0x8000}, {0x2}, 0x4, [0x0, 0x8, 0x7fffffff, 0x3, 0x80000001, 0x8, 0x7f, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x6, 0x3, 0xd7bc, 0x2e7, 0x81]}) (async) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000005c0)={0x0, "a01be1511715f58a6246077f05189ca4"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000015c0)={{r0}, r3, 0xc, @inherit={0x58, &(0x7f0000000240)={0x1, 0x2, 0x1f9, 0x8, {0x30, 0x5, 0x5, 0x1, 0x200}, [0x7, 0x4]}}, @devid=r4}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0)) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x2) (rerun: 32) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') 452.579303ms ago: executing program 1 (id=651): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x27, 0x0, 0x0, @binary="d847b0d44ca7ba9b542be6ce"}]}]}, 0x38}], 0x1}, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)=@delpolicy={0x354, 0x14, 0x400, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x3ff, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x3c, r3, r6}, 0x6e6bb0}, [@migrate={0x134, 0x11, [{@in=@remote, @in=@multicast2, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x2b, 0x1, 0x0, 0x3504, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x2f}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@broadcast, @in=@local, 0x9c, 0x4, 0x0, 0x3503, 0x2, 0xa}, {@in=@local, @in=@broadcast, @in6=@remote, @in=@empty, 0x1c13baac5f13b634, 0x4, 0x0, 0x3502, 0xa, 0x2}, {@in=@rand_addr=0x64010100, @in=@local, @in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3c, 0x4, 0x0, 0x3500, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x2}, @etimer_thresh={0x8, 0xc, 0x3}, @etimer_thresh={0x8, 0xc, 0x4}, @proto={0x5, 0x19, 0x32}, @extra_flags={0x8, 0x18, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e24, @in=@multicast2}}, @migrate={0x180, 0x11, [{@in=@multicast2, @in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in=@multicast1, @in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@remote, 0x6c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@private=0xa010100, 0x32, 0x2, 0x0, 0x34ff, 0x0, 0x2}, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in=@loopback, @in=@private=0xa010102, 0x2b, 0x0, 0x0, 0x3501, 0x2, 0xa}, {@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008044) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) (async) recvmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) (async) socket$inet(0xa, 0x801, 0x84) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0xa) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x27, 0x0, 0x0, @binary="d847b0d44ca7ba9b542be6ce"}]}]}, 0x38}], 0x1}, 0x4) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)=@delpolicy={0x354, 0x14, 0x400, 0x70bd28, 0x25dfdbfc, {{@in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x3ff, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x3c, r3, r6}, 0x6e6bb0}, [@migrate={0x134, 0x11, [{@in=@remote, @in=@multicast2, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x2b, 0x1, 0x0, 0x3504, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x2f}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@broadcast, @in=@local, 0x9c, 0x4, 0x0, 0x3503, 0x2, 0xa}, {@in=@local, @in=@broadcast, @in6=@remote, @in=@empty, 0x1c13baac5f13b634, 0x4, 0x0, 0x3502, 0xa, 0x2}, {@in=@rand_addr=0x64010100, @in=@local, @in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3c, 0x4, 0x0, 0x3500, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x2}, @etimer_thresh={0x8, 0xc, 0x3}, @etimer_thresh={0x8, 0xc, 0x4}, @proto={0x5, 0x19, 0x32}, @extra_flags={0x8, 0x18, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e24, @in=@multicast2}}, @migrate={0x180, 0x11, [{@in=@multicast2, @in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in=@multicast1, @in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@remote, 0x6c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@private=0xa010100, 0x32, 0x2, 0x0, 0x34ff, 0x0, 0x2}, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x44}, @in=@loopback, @in=@private=0xa010102, 0x2b, 0x0, 0x0, 0x3501, 0x2, 0xa}, {@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@broadcast, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008044) (async) listen(r1, 0x8) (async) accept4(r1, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) 293.373806ms ago: executing program 3 (id=652): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) close(r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, &(0x7f0000000040)) 292.837125ms ago: executing program 1 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x1004, 0x804, 0x4, 0xf, 0x120000, 0xff, 0xffffffffffffffff, 0x9, 0x8000000000000005, 0x4, 0x0, 0x101, 0x400000000000006, 0x8], 0x8000000, 0x108858}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=', @ANYRESDEC=0x0]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 290.589243ms ago: executing program 3 (id=654): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c, 0x100000}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000024c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0xffffffff, 0x20000000, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020007000200000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r11 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000002000010328bd70001000000002"], 0x30}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) 32.286726ms ago: executing program 0 (id=655): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x4a810da0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x2f, 0x1, 0x0, "1c13ebdaf2f20d55806ba058e8edb1439bfcc1000000efffffffffffffff00", 0x494e4f4b}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206017ba17d51d3d8ac3600000000000900020073797a30000000000c000780080012400006000805000500000000000d000300686173683a6d61630000000005000400000000000500010007"], 0x54}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0xb, 0x9, 0x81, 0x7fff, 0x6, 0x5, 0x5}, &(0x7f0000000100)=0x20) r8 = dup(r6) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800003a"]) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x74, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x91}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500068220768a068ac2def4f", @ANYRES16=r10, @ANYBLOB="01082cbd7000000000000b00590008000300", @ANYRES32=r13, @ANYBLOB="28005080110001004abe740000000000000000000000000005000200030000000800030002ac0f"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12c, 0x12c, 0xa, [@union={0xc, 0x8, 0x0, 0x5, 0x1, 0x800, [{0xa, 0x5, 0x5a8d}, {0x4, 0x5, 0x1}, {0x9, 0x3, 0x1}, {0xe, 0x3, 0x2}, {0x7, 0x4, 0x3}, {0x5, 0x1, 0xfd26}, {0xe, 0x1, 0x9}, {0x6, 0x1, 0x9}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x9, 0x3}, {0x6, 0x1}, {0xe, 0x1}, {0xf, 0x1}, {0xc, 0x5}, {0x2}, {0x10, 0x4}, {0xb, 0x2}, {0xb, 0x2}]}, @union={0xa, 0x3, 0x0, 0x5, 0x0, 0x4, [{0xc, 0x5, 0x4377}, {0x1, 0x2, 0x5}, {0xd, 0x5}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @const={0x6, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x5f, 0x2e, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000340)=""/95, 0x14e, 0x5f, 0x1, 0x2d26fabd, 0x0, @void, @value}, 0x28) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x2, '\x00', 0x0, r14, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xe8802, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000000)="950edd6f21dbdbeaefbc6496c0b06c7cc5dead5d600510c793cfc5bb048f2cdfaaa63d0be7279156cf83f2afdd7bcec6f155824d9954bcd274ad5703940e793f57c5488fe4b7190e1f23657050cc382bd6bf1460a129167094743f44163f80bfbd05e61465360ce91a30a62c6fb25700d0469a8ada039e570ec6af0feeb545bb7f1c4da00c2167d25428d7c1948e6ed0d2c762edce6532342f38ad2d76f3960054", &(0x7f00000000c0)=""/215, &(0x7f00000001c0)="7bb53c3f2d2c0526d1", &(0x7f0000000200)="5bd261de99262a5695459402164f871960ff1c4112ad25", 0x4, r15, 0x4}, 0x38) 0s ago: executing program 1 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0x4000004) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x208, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x68}}}}, [@NL80211_ATTR_IE={0xed, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7b, 0x38, 0x7}}, @measure_req={0x26, 0x7a, {0x0, 0xff, 0x40, "e9e1de43a466d953197f155d090d3a1832518155a296de5bc30c82bb420c902f1b099763ff63e52f700f6b1109fdc6457844fbcc51baf7eb1a2ec58fa61a5280ffaabfd74321a87b3563c3c724a1f38620839a21cacbf54d11375f308760ca6e94eca07c12326abaf3dc0cdf407dbbcc22beab8854db87"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x50, 0x28}}, @channel_switch={0x25, 0x3, {0x1, 0xd7, 0x6}}, @cf={0x4, 0x6, {0xe, 0x81, 0x400, 0x549}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @preq={0x82, 0x3b, {{0x1, 0x0, 0x1}, 0xb2, 0x6, 0x6, @device_b, 0xce8, @void, 0x401, 0x401, 0x3, [{{}, @broadcast, 0x9}, {{0x1}, @broadcast, 0x10000}, {{0x1}, @broadcast, 0x4}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x24}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_IE={0xd8, 0x2a, [@dsss={0x3, 0x1, 0xae}, @preq={0x82, 0x20, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0xfa, 0x1, 0x9, @device_b, 0x7ff, @value=@device_b, 0x3, 0x3}}, @link_id={0x65, 0x12, {@random="0813f95dcdf7", @device_a, @device_b}}, @gcr_ga={0xbd, 0x6, @device_b}, @ibss={0x6, 0x2, 0xbe}, @random={0x2, 0x7d, "7ea6479545d5d091bebd76ceeed2be319013a20fb218b3d8d075bfc9ebbc8412ebbd961340cab67a6e0bb3be47ebf85df8d04ce17187860e0fd7ea28b43fbdad6a493337cd7630b20429af53dd6b14d8faef158a065f65ae165f41df7fc7f1d09b597cf02580fcfd8bb8512a357bb21a1a6180ebd61699462f945f393b"}, @channel_switch={0x25, 0x3, {0x1, 0x84, 0x6}}, @sec_chan_ofs={0x3e, 0x1}, @peer_mgmt={0x75, 0x6, {0x1, 0x0, @val=0xb, @void, @void}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}]}, 0x208}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000540)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @generic={0x1e, "1df9bf542441218ba620f87d8f78"}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)='geneve0\x00', 0x1ff, 0x10000, 0x7fff}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x42}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0x40) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'syzkaller0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000c00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x90, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000c40)='macsec0\x00') r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000cc0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x6, 0x4000}}, 0x30) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$vhost_msg_v2(r10, &(0x7f0000000ec0)={0x2, 0x0, {&(0x7f0000000d40)=""/216, 0xd8, &(0x7f0000000e40)=""/75, 0x1, 0x4}}, 0x48) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000002140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002100)={&(0x7f0000001000)={0x10cc, r11, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x6c, 0xc5, "162163cc9fef0cf3446620ec56d6b3b0e7bd960ebd341c494819560df64c5c7fd21a403c4767cdb7c92c43c4e65afd231df60232f4bb6d3af69ce4e65cd042674b939ed677bccdccf8f0b1109354263e495d76d6f385d8a1d9ec9860f644d20582a1db403c19d577"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x10, 0xc5, "3e1f7048b0fcf6b06ce05060"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffd}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}]}, 0x10cc}, 0x1, 0x0, 0x0, 0x4000055}, 0x400) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$UHID_INPUT(r13, &(0x7f00000021c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000003200)={'batadv_slave_1\x00'}) syz_clone3(&(0x7f0000003440)={0x0, &(0x7f0000003240), &(0x7f0000003280)=0x0, &(0x7f00000032c0), {0x2e}, &(0x7f0000003300)=""/45, 0x2d, &(0x7f0000003340)=""/129, &(0x7f0000003400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r8}}, 0x58) prlimit64(r14, 0x5, &(0x7f00000034c0)={0x9d2, 0x8}, &(0x7f0000003500)) socket$inet6(0xa, 0xa, 0x3ff) kernel console output (not intermixed with test programs): [ 96.265640][ T40] audit: type=1400 audit(1747068479.900:65): avc: denied { siginh } for pid=5923 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:8889' (ED25519) to the list of known hosts. [ 101.945793][ T40] audit: type=1400 audit(1747068485.610:66): avc: denied { name_bind } for pid=5933 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 102.042292][ T40] audit: type=1400 audit(1747068485.720:67): avc: denied { write } for pid=5934 comm="sh" path="pipe:[4815]" dev="pipefs" ino=4815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 102.083712][ T40] audit: type=1400 audit(1747068485.750:68): avc: denied { execute } for pid=5934 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 102.108663][ T40] audit: type=1400 audit(1747068485.780:69): avc: denied { execute_no_trans } for pid=5934 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 105.946359][ T40] audit: type=1400 audit(1747068489.620:70): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 105.952168][ T5934] cgroup: Unknown subsys name 'net' [ 105.971847][ T40] audit: type=1400 audit(1747068489.620:71): avc: denied { mount } for pid=5934 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 106.009331][ T40] audit: type=1400 audit(1747068489.690:72): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 106.159189][ T5934] cgroup: Unknown subsys name 'cpuset' [ 106.208016][ T5934] cgroup: Unknown subsys name 'rlimit' [ 106.490852][ T40] audit: type=1400 audit(1747068490.150:73): avc: denied { setattr } for pid=5934 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.520525][ T40] audit: type=1400 audit(1747068490.160:74): avc: denied { create } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.559551][ T40] audit: type=1400 audit(1747068490.160:75): avc: denied { write } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.637323][ T5936] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 108.521613][ T5934] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.655162][ T837] cfg80211: failed to load regulatory.db [ 117.743240][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 117.743256][ T40] audit: type=1400 audit(1747068501.430:84): avc: denied { execmem } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 118.160440][ T40] audit: type=1400 audit(1747068501.810:85): avc: denied { create } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.169609][ T40] audit: type=1400 audit(1747068501.810:86): avc: denied { read write } for pid=5952 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 118.190535][ T40] audit: type=1400 audit(1747068501.810:87): avc: denied { open } for pid=5952 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 118.278974][ T40] audit: type=1400 audit(1747068501.940:88): avc: denied { ioctl } for pid=5952 comm="syz-executor" path="socket:[7286]" dev="sockfs" ino=7286 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.322868][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.343119][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.347378][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.362198][ T68] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.366992][ T68] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.392017][ T68] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.465388][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.470876][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.487657][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.535397][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.543156][ T5967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.547921][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.549086][ T40] audit: type=1400 audit(1747068502.220:89): avc: denied { read } for pid=5952 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.549143][ T5965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.551375][ T5965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.552217][ T5965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.552380][ T5965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.553184][ T5965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.582247][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.605217][ T40] audit: type=1400 audit(1747068502.220:90): avc: denied { open } for pid=5952 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.615276][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.615630][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.668056][ T40] audit: type=1400 audit(1747068502.220:91): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 119.127505][ T40] audit: type=1400 audit(1747068502.800:92): avc: denied { module_request } for pid=5955 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 119.312632][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 119.327051][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 119.616439][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 119.674256][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 119.819973][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.824739][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.829408][ T5955] bridge_slave_0: entered allmulticast mode [ 119.837848][ T5955] bridge_slave_0: entered promiscuous mode [ 119.881329][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.885688][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.892213][ T5952] bridge_slave_0: entered allmulticast mode [ 119.899778][ T5952] bridge_slave_0: entered promiscuous mode [ 119.908151][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.918315][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.924061][ T5952] bridge_slave_1: entered allmulticast mode [ 119.929868][ T5952] bridge_slave_1: entered promiscuous mode [ 119.947918][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.954055][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.958633][ T5955] bridge_slave_1: entered allmulticast mode [ 119.962562][ T5955] bridge_slave_1: entered promiscuous mode [ 120.399311][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.474585][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.505456][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.563745][ T68] Bluetooth: hci0: command tx timeout [ 120.580271][ T68] Bluetooth: hci1: command tx timeout [ 120.583601][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.602918][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.606013][ T5960] bridge_slave_0: entered allmulticast mode [ 120.612787][ T5960] bridge_slave_0: entered promiscuous mode [ 120.620679][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.651301][ T5957] Bluetooth: hci2: command tx timeout [ 120.662325][ T68] Bluetooth: hci3: command tx timeout [ 120.684444][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.687654][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.709336][ T5960] bridge_slave_1: entered allmulticast mode [ 120.713771][ T5960] bridge_slave_1: entered promiscuous mode [ 120.963603][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.966525][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.972314][ T5959] bridge_slave_0: entered allmulticast mode [ 120.981664][ T5959] bridge_slave_0: entered promiscuous mode [ 121.122742][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.125846][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.128701][ T5959] bridge_slave_1: entered allmulticast mode [ 121.135694][ T5959] bridge_slave_1: entered promiscuous mode [ 121.226414][ T5955] team0: Port device team_slave_0 added [ 121.232897][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.249483][ T5952] team0: Port device team_slave_0 added [ 121.260387][ T5952] team0: Port device team_slave_1 added [ 121.393623][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.420101][ T5955] team0: Port device team_slave_1 added [ 121.426622][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.509236][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.705311][ T5960] team0: Port device team_slave_0 added [ 121.712611][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.716141][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.732059][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.882302][ T5960] team0: Port device team_slave_1 added [ 121.914306][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.926234][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.942756][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.959229][ T5959] team0: Port device team_slave_0 added [ 121.965012][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.968560][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.980316][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.986178][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.995977][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.026239][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.108097][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.126734][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.180004][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.206393][ T5959] team0: Port device team_slave_1 added [ 122.218620][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.221089][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.241285][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.481198][ T5952] hsr_slave_0: entered promiscuous mode [ 122.486903][ T5952] hsr_slave_1: entered promiscuous mode [ 122.501701][ T5955] hsr_slave_0: entered promiscuous mode [ 122.506714][ T5955] hsr_slave_1: entered promiscuous mode [ 122.515486][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.520001][ T5955] Cannot create hsr debugfs directory [ 122.604654][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.607905][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.632188][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.640638][ T68] Bluetooth: hci0: command tx timeout [ 122.645616][ T68] Bluetooth: hci1: command tx timeout [ 122.720470][ T68] Bluetooth: hci2: command tx timeout [ 122.721157][ T5957] Bluetooth: hci3: command tx timeout [ 122.822616][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.841193][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.854480][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.871619][ T5960] hsr_slave_0: entered promiscuous mode [ 122.876069][ T5960] hsr_slave_1: entered promiscuous mode [ 122.884043][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.887891][ T5960] Cannot create hsr debugfs directory [ 123.319292][ T5959] hsr_slave_0: entered promiscuous mode [ 123.325039][ T5959] hsr_slave_1: entered promiscuous mode [ 123.328708][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.343937][ T5959] Cannot create hsr debugfs directory [ 124.102219][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.184132][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.222968][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.238585][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.302080][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.320356][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.347532][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.381375][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.546341][ T5960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.565538][ T5960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.581460][ T5960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.609184][ T5960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.720683][ T5957] Bluetooth: hci1: command tx timeout [ 124.725913][ T5957] Bluetooth: hci0: command tx timeout [ 124.749153][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.800808][ T5957] Bluetooth: hci3: command tx timeout [ 124.803867][ T68] Bluetooth: hci2: command tx timeout [ 124.855305][ T5959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.866635][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.919706][ T5959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.951489][ T5959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.959901][ T5959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.005247][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.008900][ T1252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.016944][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.025072][ T1252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.080015][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.156029][ T5952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.167685][ T5952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.198813][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.359862][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.365927][ T40] audit: type=1400 audit(1747068509.040:93): avc: denied { sys_module } for pid=5952 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 125.451706][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.456158][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.472160][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.476348][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.517782][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.574140][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.577230][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.582092][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.585279][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.639232][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.663447][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.708297][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.817206][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.821637][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.873967][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.878011][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.903836][ T5952] veth0_vlan: entered promiscuous mode [ 125.966395][ T5952] veth1_vlan: entered promiscuous mode [ 126.054622][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.193141][ T5952] veth0_macvtap: entered promiscuous mode [ 126.199246][ T5955] veth0_vlan: entered promiscuous mode [ 126.232645][ T5955] veth1_vlan: entered promiscuous mode [ 126.242028][ T5952] veth1_macvtap: entered promiscuous mode [ 126.323390][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.343295][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.375442][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.382333][ T5952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.400841][ T5952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.404849][ T5952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.408550][ T5952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.459221][ T5955] veth0_macvtap: entered promiscuous mode [ 126.475881][ T5955] veth1_macvtap: entered promiscuous mode [ 126.545314][ T5960] veth0_vlan: entered promiscuous mode [ 126.561257][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.580720][ T5960] veth1_vlan: entered promiscuous mode [ 126.633258][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.639623][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.654187][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.730591][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.735323][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.743989][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.795216][ T5960] veth0_macvtap: entered promiscuous mode [ 126.803564][ T68] Bluetooth: hci0: command tx timeout [ 126.805584][ T5957] Bluetooth: hci1: command tx timeout [ 126.813747][ T5955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.818609][ T5955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.824483][ T5955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.828977][ T5955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.880947][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.884125][ T5957] Bluetooth: hci3: command tx timeout [ 126.885564][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.896491][ T5957] Bluetooth: hci2: command tx timeout [ 126.950458][ T5960] veth1_macvtap: entered promiscuous mode [ 127.024524][ T5959] veth0_vlan: entered promiscuous mode [ 127.040231][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.062488][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.074299][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.098771][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.104779][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.123562][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.141087][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.174265][ T5959] veth1_vlan: entered promiscuous mode [ 127.214847][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.225450][ T40] audit: type=1400 audit(1747068510.900:94): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.228302][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.264794][ T40] audit: type=1400 audit(1747068510.900:95): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/syzkaller.y7IGUJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 127.274557][ T5960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.284553][ T40] audit: type=1400 audit(1747068510.910:96): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 127.303187][ T5960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.305162][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.309064][ T5960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.309390][ T5960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.309415][ T5960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.309438][ T5960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.412172][ T40] audit: type=1400 audit(1747068510.910:97): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/syzkaller.y7IGUJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 127.439650][ T40] audit: type=1400 audit(1747068510.910:98): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/syzkaller.y7IGUJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 127.481406][ T40] audit: type=1400 audit(1747068510.910:99): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.491615][ T1258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.502560][ T40] audit: type=1400 audit(1747068510.990:100): avc: denied { mounton } for pid=5952 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 127.505612][ T1258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.516462][ T40] audit: type=1400 audit(1747068510.990:101): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="gadgetfs" ino=8426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 127.516505][ T40] audit: type=1400 audit(1747068510.990:102): avc: denied { mount } for pid=5952 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.552743][ T5952] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 127.619414][ T5959] veth0_macvtap: entered promiscuous mode [ 127.652932][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.657678][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.665995][ T5959] veth1_macvtap: entered promiscuous mode [ 127.712403][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.734666][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.757644][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.763987][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.776155][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.781004][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.802725][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.975576][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.984876][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.000034][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.000050][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.000062][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.000070][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.000079][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.005685][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.061815][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.066937][ T5959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.132328][ T5959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.136349][ T5959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.140096][ T5959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.247373][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.251049][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.281150][ T6026] [U] [ 128.282611][ T6026] [U] [ 128.296337][ T6026] [U] [ 128.307705][ T6026] [U] [ 128.312199][ T6026] [U] [ 128.327394][ T6026] [U] [ 128.328903][ T6026] [U] [ 128.330481][ T6026] [U] [ 128.348967][ T6026] [U] [ 128.350816][ T6026] [U] [ 128.352507][ T6026] [U] [ 128.354041][ T6026] [U] [ 128.356010][ T6026] [U] [ 128.357248][ T6026] [U] [ 128.358436][ T6026] [U] [ 128.377722][ T6026] [U] [ 128.388764][ T6024] [U] [ 128.645300][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.677371][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.691016][ T6041] netlink: 'syz.3.11': attribute type 29 has an invalid length. [ 128.764234][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 128.809978][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.826011][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.986263][ T6061] netlink: 156 bytes leftover after parsing attributes in process `syz.2.17'. [ 129.033389][ T57] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 129.066751][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.249925][ T57] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.260718][ T57] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.271757][ T57] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.281503][ T5994] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.294106][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.492109][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 129.516213][ T57] usb 8-1: usb_control_msg returned -32 [ 129.519106][ T57] usbtmc 8-1:16.0: can't read capabilities [ 129.572027][ T5994] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.578625][ T5994] usb 5-1: config 1 interface 0 has no altsetting 0 [ 129.590939][ T5994] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 129.606553][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.612835][ T5994] usb 5-1: Product: syz [ 129.626594][ T5994] usb 5-1: Manufacturer: 섖秏կᑲ滂嫂閺ᓀ疆梁눶Ậꉳ孝舂龌ွ䶔睠䌚觚柽ⱍ茉菥ג鑵켄Ꟁ僚盵瞎љ퍚ﰮ꠮䏏늂䱜ꗝ鶽뜵翤엃鑢㾩磯壵섟矾┸ﺈ柃敹粥ᶸ硨ἶ澿伙ᶪ셫胬袵ᮇ蒼鎣ᢴᔲ⫳籝筚 [ 129.650092][ T5994] usb 5-1: SerialNumber: syz [ 129.898680][ T6080] usbtmc 8-1:16.0: INDICATOR_PULSE returned 4d [ 129.953098][ T5994] usbhid 5-1:1.0: can't add hid device: -71 [ 129.964932][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.967756][ T5994] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 130.006145][ T5994] usb 5-1: USB disconnect, device number 2 [ 130.069454][ T6082] process 'syz.2.23' launched './file2' with NULL argv: empty string added [ 130.103392][ T60] usb 8-1: USB disconnect, device number 2 [ 130.450690][ C3] vkms_vblank_simulate: vblank timer overrun [ 130.455703][ T5994] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.611556][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 130.611572][ T40] audit: type=1400 audit(1747068514.290:167): avc: denied { unmount } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 130.651658][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 130.659211][ T5994] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.666986][ T5994] usb 5-1: config 1 interface 0 has no altsetting 0 [ 130.680945][ T5994] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 130.687231][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.695933][ T5994] usb 5-1: Product: syz [ 130.697810][ T5994] usb 5-1: Manufacturer: syz [ 130.698744][ C3] vkms_vblank_simulate: vblank timer overrun [ 130.703984][ T5994] usb 5-1: SerialNumber: syz [ 130.772640][ T6094] dlm: no locking on control device [ 130.776969][ T40] audit: type=1400 audit(1747068514.450:168): avc: denied { append } for pid=6093 comm="syz.2.27" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.831792][ T40] audit: type=1400 audit(1747068514.500:169): avc: denied { create } for pid=6095 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.875333][ T40] audit: type=1400 audit(1747068514.550:170): avc: denied { name_bind } for pid=6095 comm="syz.3.28" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 130.974185][ T6103] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.980467][ T40] audit: type=1400 audit(1747068514.550:171): avc: denied { node_bind } for pid=6095 comm="syz.3.28" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 131.028189][ T40] audit: type=1400 audit(1747068514.660:172): avc: denied { connect } for pid=6100 comm="syz.2.30" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.058829][ T5994] usbhid 5-1:1.0: can't add hid device: -71 [ 131.064440][ T5994] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 131.110728][ C3] vkms_vblank_simulate: vblank timer overrun [ 131.122186][ T40] audit: type=1400 audit(1747068514.660:173): avc: denied { ioctl } for pid=6095 comm="syz.3.28" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 131.140781][ T40] audit: type=1400 audit(1747068514.690:174): avc: denied { write } for pid=6100 comm="syz.2.30" path="socket:[10305]" dev="sockfs" ino=10305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.158135][ T5994] usb 5-1: USB disconnect, device number 3 [ 131.182021][ T40] audit: type=1400 audit(1747068514.860:175): avc: denied { create } for pid=6058 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.190185][ T40] audit: type=1400 audit(1747068514.860:176): avc: denied { connect } for pid=6058 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.209608][ T6115] overlayfs: conflicting options: metacopy=off,verity=on [ 131.219353][ C3] vkms_vblank_simulate: vblank timer overrun [ 131.290734][ C3] vkms_vblank_simulate: vblank timer overrun [ 131.533638][ C3] vkms_vblank_simulate: vblank timer overrun [ 131.998170][ T5994] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 132.071949][ T6140] netlink: 'syz.1.39': attribute type 2 has an invalid length. [ 132.083190][ T6140] syz.1.39: attempt to access beyond end of device [ 132.083190][ T6140] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 132.096299][ T6140] EXT4-fs (nbd1): unable to read superblock [ 132.170253][ T5994] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.174336][ T5994] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.182494][ T5994] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.200940][ T5994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.203451][ T6143] loop2: detected capacity change from 0 to 7 [ 132.217870][ T6143] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 132.235274][ T6143] loop2: partition table partially beyond EOD, truncated [ 132.248974][ T6143] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 132.268248][ T6145] : renamed from lo (while UP) [ 132.410091][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 132.425621][ T5994] usb 7-1: usb_control_msg returned -32 [ 132.436261][ T6148] Cannot find set identified by id 0 to match [ 132.450009][ T5994] usbtmc 7-1:16.0: can't read capabilities [ 132.650696][ T6157] pimreg: entered allmulticast mode [ 132.827372][ T6166] capability: warning: `syz.3.50' uses deprecated v2 capabilities in a way that may be insecure [ 132.845057][ T6164] usbtmc 7-1:16.0: INDICATOR_PULSE returned 4d [ 132.931368][ T6167] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 132.964525][ T6167] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 132.969838][ T6167] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 132.991221][ T6167] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 133.062196][ T58] usb 7-1: USB disconnect, device number 2 [ 134.510322][ T6002] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 134.592201][ T6227] openvswitch: netlink: Duplicate key (type 0). [ 134.654684][ C3] vkms_vblank_simulate: vblank timer overrun [ 134.771957][ T6002] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.814677][ C3] vkms_vblank_simulate: vblank timer overrun [ 134.818623][ T6002] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.840530][ T6002] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.844083][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.021218][ T6242] netlink: 'syz.3.69': attribute type 21 has an invalid length. [ 135.034962][ C3] vkms_vblank_simulate: vblank timer overrun [ 135.134255][ T6002] usb 7-1: usb_control_msg returned -32 [ 135.139363][ T6002] usbtmc 7-1:16.0: can't read capabilities [ 135.296852][ C3] vkms_vblank_simulate: vblank timer overrun [ 135.464534][ T6257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.495209][ T6260] usbtmc 7-1:16.0: INDICATOR_PULSE returned 4d [ 135.549842][ T6261] netlink: 'syz.1.77': attribute type 1 has an invalid length. [ 135.565380][ T6261] netlink: 500 bytes leftover after parsing attributes in process `syz.1.77'. [ 135.702399][ T9] usb 7-1: USB disconnect, device number 3 [ 135.746020][ T6265] Cannot find set identified by id 0 to match [ 135.894268][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 135.894278][ T40] audit: type=1400 audit(1747068519.570:229): avc: denied { create } for pid=6274 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.932514][ C3] vkms_vblank_simulate: vblank timer overrun [ 135.961022][ T40] audit: type=1400 audit(1747068519.600:230): avc: denied { create } for pid=6274 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 135.991181][ T40] audit: type=1400 audit(1747068519.600:231): avc: denied { ioctl } for pid=6274 comm="syz.0.82" path="socket:[10495]" dev="sockfs" ino=10495 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.010219][ T40] audit: type=1400 audit(1747068519.630:232): avc: denied { bind } for pid=6274 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.036245][ C3] vkms_vblank_simulate: vblank timer overrun [ 136.043884][ T6276] fuse: Bad value for 'fd' [ 136.059598][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'. [ 136.079106][ T6280] overlayfs: missing 'lowerdir' [ 136.199376][ T40] audit: type=1400 audit(1747068519.850:233): avc: denied { create } for pid=6283 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.230198][ T40] audit: type=1400 audit(1747068519.850:234): avc: denied { bind } for pid=6283 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.923283][ T6301] Cannot find set identified by id 0 to match [ 137.163730][ C3] vkms_vblank_simulate: vblank timer overrun [ 137.170259][ T40] audit: type=1400 audit(1747068520.820:235): avc: denied { read write } for pid=6302 comm="syz.0.90" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 137.230426][ T40] audit: type=1400 audit(1747068520.820:236): avc: denied { open } for pid=6302 comm="syz.0.90" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 137.259106][ T40] audit: type=1400 audit(1747068520.830:237): avc: denied { bind } for pid=6302 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.268405][ T40] audit: type=1400 audit(1747068520.900:238): avc: denied { map } for pid=6302 comm="syz.0.90" path="socket:[9588]" dev="sockfs" ino=9588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.434925][ C3] vkms_vblank_simulate: vblank timer overrun [ 137.754669][ C3] vkms_vblank_simulate: vblank timer overrun [ 137.780910][ T6012] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 137.815081][ C3] vkms_vblank_simulate: vblank timer overrun [ 137.846981][ C3] vkms_vblank_simulate: vblank timer overrun [ 137.903965][ T6324] Cannot find set identified by id 0 to match [ 138.048996][ C3] vkms_vblank_simulate: vblank timer overrun [ 138.071602][ T6012] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.078292][ T6012] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.121011][ T6335] raw_sendmsg: syz.0.100 forgot to set AF_INET. Fix it! [ 138.134397][ T6012] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.150917][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.331032][ C3] vkms_vblank_simulate: vblank timer overrun [ 138.337580][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6343 comm=syz.1.103 [ 138.379571][ T6012] usb 7-1: usb_control_msg returned -32 [ 138.381684][ T6012] usbtmc 7-1:16.0: can't read capabilities [ 138.496280][ T6350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.105'. [ 138.500039][ T6350] nbd: must specify at least one socket [ 138.563207][ T6354] Cannot find set identified by id 0 to match [ 138.720072][ T6359] can: request_module (can-proto-3) failed. [ 138.818785][ T6368] usbtmc 7-1:16.0: INDICATOR_PULSE returned 4d [ 138.943415][ T6374] syz.3.113 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.982764][ C3] vkms_vblank_simulate: vblank timer overrun [ 139.007341][ T6371] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 139.033361][ T6371] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 139.040567][ T60] usb 7-1: USB disconnect, device number 4 [ 139.193979][ T6381] syz.1.116 uses obsolete (PF_INET,SOCK_PACKET) [ 139.834599][ C3] vkms_vblank_simulate: vblank timer overrun [ 140.082877][ T6392] Cannot find add_set index 4 as target [ 140.088938][ T6392] overlayfs: failed to resolve './file0': -2 [ 140.163403][ T6396] could not allocate digest TFM handle md4-generic [ 140.451495][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.127'. [ 140.455573][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.127'. [ 140.779628][ T6416] erspan0: entered promiscuous mode [ 140.812057][ T6416] erspan0: left promiscuous mode [ 140.951592][ T6439] Cannot find set identified by id 0 to match [ 140.977006][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 140.977020][ T40] audit: type=1400 audit(1747068524.650:286): avc: denied { sqpoll } for pid=6425 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 141.050431][ T5994] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 141.261681][ T5994] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.293307][ T5994] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.312083][ T5994] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.316980][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.431193][ T40] audit: type=1400 audit(1747068525.110:287): avc: denied { write } for pid=6449 comm="syz.2.134" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.529710][ T40] audit: type=1400 audit(1747068525.200:288): avc: denied { read } for pid=6453 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.555911][ T40] audit: type=1400 audit(1747068525.200:289): avc: denied { write } for pid=6453 comm="syz.0.136" path="socket:[11405]" dev="sockfs" ino=11405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.601290][ T5994] usb 6-1: usb_control_msg returned -32 [ 141.614332][ T5994] usbtmc 6-1:16.0: can't read capabilities [ 141.708886][ T40] audit: type=1400 audit(1747068525.380:290): avc: denied { read } for pid=6461 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.759018][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 141.761525][ T6464] Bluetooth: MGMT ver 1.23 [ 141.767925][ T40] audit: type=1400 audit(1747068525.440:291): avc: denied { bind } for pid=6460 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.954907][ T6469] usbtmc 6-1:16.0: INDICATOR_PULSE returned 4d [ 141.993193][ T6468] Cannot find set identified by id 0 to match [ 142.050350][ T6027] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.156814][ T60] usb 6-1: USB disconnect, device number 2 [ 142.210903][ T6027] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.210929][ T6027] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 142.210943][ T6027] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.210975][ T6027] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 142.210995][ T6027] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 142.212454][ T6027] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.272045][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.287248][ T6027] usb 5-1: Product: syz [ 142.288921][ T6027] usb 5-1: Manufacturer: syz [ 142.305668][ T6027] cdc_wdm 5-1:1.0: skipping garbage [ 142.308619][ T6027] cdc_wdm 5-1:1.0: skipping garbage [ 142.330524][ T6027] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 142.332836][ T6027] cdc_wdm 5-1:1.0: Unknown control protocol [ 142.359126][ T6486] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.371868][ T6486] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.385482][ T6486] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.389106][ T6486] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.493486][ T40] audit: type=1400 audit(1747068526.170:292): avc: denied { read } for pid=6485 comm="syz.2.146" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 142.510357][ T40] audit: type=1400 audit(1747068526.170:293): avc: denied { open } for pid=6485 comm="syz.2.146" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 142.526727][ T40] audit: type=1400 audit(1747068526.180:294): avc: denied { ioctl } for pid=6485 comm="syz.2.146" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 142.579076][ T40] audit: type=1400 audit(1747068526.250:295): avc: denied { mount } for pid=6461 comm="syz.0.140" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 142.806670][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 142.809350][ T6496] netlink: 'syz.2.148': attribute type 27 has an invalid length. [ 142.907165][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.911727][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.455699][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.467583][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.763787][ T6496] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.768797][ T6496] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.787080][ T6496] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.792573][ T6496] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.386808][ T6496] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.391107][ T6496] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.402459][ T6496] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.406428][ T6496] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.583711][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.593712][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.654096][ T6495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.661130][ T6501] warning: `syz.1.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.807799][ T6515] Cannot find set identified by id 0 to match [ 144.896812][ T6012] usb 5-1: USB disconnect, device number 4 [ 145.195497][ T6528] overlayfs: failed to resolve './file0': -2 [ 145.443536][ T6012] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 145.625455][ T6012] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.632615][ T6012] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.638871][ T6012] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.644019][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.875261][ T6012] usb 5-1: usb_control_msg returned -32 [ 145.879527][ T6012] usbtmc 5-1:16.0: can't read capabilities [ 146.017143][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 146.017158][ T40] audit: type=1400 audit(1747068529.690:303): avc: denied { remount } for pid=6540 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 146.208131][ T6539] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 146.237649][ T6545] usbtmc 5-1:16.0: INDICATOR_PULSE returned 4d [ 146.381320][ T6551] Cannot find set identified by id 0 to match [ 146.448464][ T57] usb 5-1: USB disconnect, device number 5 [ 146.600307][ T40] audit: type=1400 audit(1747068530.250:304): avc: denied { setopt } for pid=6554 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.652395][ T40] audit: type=1400 audit(1747068530.330:305): avc: denied { read } for pid=6554 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.007868][ T40] audit: type=1400 audit(1747068530.670:306): avc: denied { write } for pid=6578 comm="syz.2.171" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 147.023850][ T40] audit: type=1400 audit(1747068530.670:307): avc: denied { open } for pid=6578 comm="syz.2.171" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 147.040433][ T40] audit: type=1400 audit(1747068530.700:308): avc: denied { ioctl } for pid=6578 comm="syz.2.171" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 147.107925][ T6585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 147.126875][ T6585] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.135028][ T6585] vhci_hcd vhci_hcd.0: Device attached [ 147.138884][ T6588] vhci_hcd: unknown pdu 2 [ 147.141843][ T40] audit: type=1400 audit(1747068530.800:309): avc: denied { read } for pid=6584 comm="syz.0.173" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 147.159285][ T80] vhci_hcd: stop threads [ 147.180360][ T80] vhci_hcd: release socket [ 147.185642][ T80] vhci_hcd: disconnect device [ 147.226171][ T40] audit: type=1400 audit(1747068530.800:310): avc: denied { open } for pid=6584 comm="syz.0.173" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 147.250228][ T40] audit: type=1400 audit(1747068530.860:311): avc: denied { remove_name } for pid=6586 comm="syz.2.174" name="file0" dev="9p" ino=35913877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.264080][ T40] audit: type=1400 audit(1747068530.860:312): avc: denied { unlink } for pid=6586 comm="syz.2.174" name="file0" dev="9p" ino=35913877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.279913][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 147.330357][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'. [ 147.339686][ T6599] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.781955][ T6618] Cannot find set identified by id 0 to match [ 147.826313][ T5994] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 148.011797][ T5994] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.018113][ T5994] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.040097][ T5994] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.073712][ T5994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.258669][ T6643] SELinux: truncated policydb string identifier [ 148.263848][ T6643] SELinux: failed to load policy [ 148.340801][ T5994] usb 8-1: usb_control_msg returned -32 [ 148.343580][ T5994] usbtmc 8-1:16.0: can't read capabilities [ 148.388527][ T6649] Cannot find set identified by id 0 to match [ 148.593713][ T6655] overlayfs: failed to resolve './file0': -2 [ 148.748526][ T6667] usbtmc 8-1:16.0: INDICATOR_PULSE returned 4d [ 148.838240][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.974270][ T60] usb 8-1: USB disconnect, device number 3 [ 148.983687][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 149.094543][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.154066][ T6679] Cannot find set identified by id 0 to match [ 149.194589][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.443950][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.447558][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.460418][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 149.651008][ T9] usb 6-1: device descriptor read/64, error -71 [ 149.714507][ T6700] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.742683][ T6701] binder: 6696:6701 ioctl 4002f516 2000000001c0 returned -22 [ 149.748038][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 149.919363][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 150.073116][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.091334][ T9] usb 6-1: device descriptor read/64, error -71 [ 150.147840][ T6712] Cannot find set identified by id 0 to match [ 150.210043][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.224359][ T9] usb usb6-port1: attempt power cycle [ 150.572333][ T58] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 150.600710][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 150.641034][ T9] usb 6-1: device descriptor read/8, error -71 [ 150.658505][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.742886][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.746670][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.754397][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.759302][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.887985][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 150.931891][ T9] usb 6-1: device descriptor read/8, error -71 [ 151.026561][ T58] usb 5-1: usb_control_msg returned -32 [ 151.028663][ T58] usbtmc 5-1:16.0: can't read capabilities [ 151.042348][ T9] usb usb6-port1: unable to enumerate USB device [ 151.258227][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.414558][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.423088][ T6736] usbtmc 5-1:16.0: INDICATOR_PULSE returned 4d [ 151.624822][ T6739] Cannot find set identified by id 0 to match [ 151.627948][ T9] usb 5-1: USB disconnect, device number 6 [ 151.643058][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.850509][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.884416][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 151.884432][ T40] audit: type=1400 audit(1747068535.570:343): avc: denied { append } for pid=6742 comm="syz.2.229" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.960617][ T40] audit: type=1400 audit(1747068535.640:344): avc: denied { ioctl } for pid=6742 comm="syz.2.229" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.983410][ T5957] Bluetooth: hci3: unexpected event for opcode 0x041b [ 152.322674][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.375424][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 152.375865][ T40] audit: type=1400 audit(1747068536.060:345): avc: denied { create } for pid=6758 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.401445][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 152.414780][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 152.426077][ T40] audit: type=1400 audit(1747068536.080:346): avc: denied { setopt } for pid=6758 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.552075][ T6766] Cannot find set identified by id 0 to match [ 152.607096][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'. [ 152.742228][ T6778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6778 comm=syz.1.240 [ 152.750447][ T6778] netlink: 48 bytes leftover after parsing attributes in process `syz.1.240'. [ 153.150478][ T6002] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 153.330776][ T6002] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.360229][ T6002] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.406377][ T6002] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.413652][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.557645][ T6797] Zero length message leads to an empty skb [ 153.629891][ T6002] usb 6-1: usb_control_msg returned -32 [ 153.634895][ T6002] usbtmc 6-1:16.0: can't read capabilities [ 153.660051][ T6002] usb 6-1: USB disconnect, device number 7 [ 153.937619][ T6807] Cannot find set identified by id 0 to match [ 154.023603][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 154.436756][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.470712][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.532439][ T6027] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 154.573934][ T6823] mmap: syz.1.253 (6823) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.704573][ T6027] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.724772][ T6027] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.730000][ T6027] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.735467][ T6027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.836128][ T40] audit: type=1400 audit(1747068538.510:347): avc: denied { mount } for pid=6825 comm="syz.2.254" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 155.029153][ T6813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.037091][ T6832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.258'. [ 155.058796][ T6813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.062701][ T6027] usb 8-1: usb_control_msg returned -32 [ 155.062743][ T6027] usbtmc 8-1:16.0: can't read capabilities [ 155.119912][ T6834] Cannot find set identified by id 0 to match [ 155.249171][ T40] audit: type=1400 audit(1747068538.920:348): avc: denied { remount } for pid=6839 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 155.272562][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.276738][ T6845] Cannot find map_set index 0 as target [ 155.321511][ T6847] input: syz0 as /devices/virtual/input/input6 [ 155.342892][ T40] audit: type=1400 audit(1747068539.020:349): avc: denied { read } for pid=5332 comm="acpid" name="event4" dev="devtmpfs" ino=2904 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.372103][ T40] audit: type=1400 audit(1747068539.050:350): avc: denied { open } for pid=5332 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2904 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.389750][ T40] audit: type=1400 audit(1747068539.050:351): avc: denied { ioctl } for pid=5332 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2904 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.442615][ T60] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 155.452125][ T40] audit: type=1400 audit(1747068539.130:352): avc: denied { create } for pid=6812 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 155.483497][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 155.507107][ T6849] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 155.588884][ T5994] usb 8-1: USB disconnect, device number 4 [ 155.662226][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.667824][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.677896][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.685466][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.688906][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.714129][ T6857] program syz.2.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.946574][ T60] usb 5-1: usb_control_msg returned -32 [ 155.949586][ T60] usbtmc 5-1:16.0: can't read capabilities [ 156.154731][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.526472][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.770780][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.902605][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 156.902622][ T40] audit: type=1400 audit(1747068540.570:358): avc: denied { setopt } for pid=6902 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.935379][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.166316][ T6910] ALSA: mixer_oss: invalid index 40000 [ 157.335642][ T6913] XFS (nbd1): no-recovery mounts must be read-only. [ 157.622312][ T6923] ======================================================= [ 157.622312][ T6923] WARNING: The mand mount option has been deprecated and [ 157.622312][ T6923] and is ignored by this kernel. Remove the mand [ 157.622312][ T6923] option from the mount to silence this warning. [ 157.622312][ T6923] ======================================================= [ 157.794456][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.143120][ T6935] kAFS: unable to lookup cell '/,cL' [ 158.343044][ T6939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=6939 comm=syz.3.288 [ 158.360440][ T40] audit: type=1400 audit(1747068542.020:359): avc: denied { mounton } for pid=6938 comm="syz.3.288" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 158.384847][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.729028][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 158.797663][ T6957] Cannot find set identified by id 0 to match [ 159.263215][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.297'. [ 159.288972][ T6968] afs: Unknown parameter '+' [ 159.318523][ T6970] overlay: filesystem on ./bus not supported as upperdir [ 159.450002][ T40] audit: type=1400 audit(1747068543.120:360): avc: denied { write } for pid=6973 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 159.459001][ T40] audit: type=1400 audit(1747068543.130:361): avc: denied { setopt } for pid=6973 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 159.519021][ T6978] bridge0: port 3(veth0_to_bridge) entered blocking state [ 159.523226][ T6978] bridge0: port 3(veth0_to_bridge) entered disabled state [ 159.538395][ T6978] veth0_to_bridge: entered allmulticast mode [ 159.542199][ T6978] veth0_to_bridge: entered promiscuous mode [ 159.600310][ T6981] Cannot find set identified by id 0 to match [ 160.057811][ T40] audit: type=1800 audit(1747068543.730:362): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.307" name="bus" dev="overlay" ino=503 res=0 errno=0 [ 160.131399][ T7002] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 160.137395][ T7002] overlayfs: missing 'lowerdir' [ 160.245926][ T7002] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.577613][ T40] audit: type=1400 audit(1747068544.250:363): avc: denied { read write } for pid=7019 comm="syz.3.316" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.598208][ T40] audit: type=1400 audit(1747068544.250:364): avc: denied { open } for pid=7019 comm="syz.3.316" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.615002][ T40] audit: type=1400 audit(1747068544.250:365): avc: denied { ioctl } for pid=7019 comm="syz.3.316" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 160.674828][ T40] audit: type=1326 audit(1747068544.350:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7025 comm="syz.2.318" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f657f38e969 code=0x0 [ 160.767891][ T40] audit: type=1400 audit(1747068544.440:367): avc: denied { mount } for pid=7025 comm="syz.2.318" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 161.043612][ T6837] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 161.102648][ T58] usb 5-1: USB disconnect, device number 7 [ 161.262557][ T7038] netlink: 14 bytes leftover after parsing attributes in process `syz.0.321'. [ 161.375648][ T7038] vxcan1: entered allmulticast mode [ 161.381570][ T7038] vxcan1: left allmulticast mode [ 161.387584][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 161.603894][ T7051] ip6tnl1: entered promiscuous mode [ 161.606114][ T7051] ip6tnl1: entered allmulticast mode [ 161.625847][ T7051] team0: Device ip6tnl1 is of different type [ 161.752855][ T6027] IPVS: starting estimator thread 0... [ 161.860705][ T7060] IPVS: using max 31 ests per chain, 74400 per kthread [ 161.973978][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 161.973992][ T40] audit: type=1400 audit(1747068545.650:374): avc: denied { bind } for pid=7066 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.059056][ T40] audit: type=1400 audit(1747068545.730:375): avc: denied { create } for pid=7069 comm="syz.1.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 162.096853][ T7071] delete_channel: no stack [ 162.106602][ T60] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 162.111320][ T40] audit: type=1400 audit(1747068545.780:376): avc: denied { append } for pid=7070 comm="syz.0.332" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.200618][ T7075] ./bus: Can't lookup blockdev [ 162.205706][ T40] audit: type=1400 audit(1747068545.880:377): avc: denied { mounton } for pid=7070 comm="syz.0.332" path="/56/bus" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 162.300431][ T60] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.326475][ T60] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.346048][ T60] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.356468][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.604651][ T60] usb 8-1: usb_control_msg returned -32 [ 162.607132][ T60] usbtmc 8-1:16.0: can't read capabilities [ 162.612240][ T60] usb 8-1: USB disconnect, device number 5 [ 162.642426][ T7091] Cannot find set identified by id 0 to match [ 163.207902][ T7109] pimreg3: entered allmulticast mode [ 163.259086][ T7108] Illegal XDP return value 4294967294 on prog (id 165) dev N/A, expect packet loss! [ 163.294266][ T40] audit: type=1400 audit(1747068546.970:378): avc: denied { name_connect } for pid=7110 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 163.325518][ T40] audit: type=1400 audit(1747068547.000:379): avc: denied { shutdown } for pid=7110 comm="syz.3.344" lport=43245 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.382778][ T7121] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 163.406173][ T7121] overlayfs: overlapping lowerdir path [ 163.468663][ T7131] Cannot find set identified by id 0 to match [ 163.505613][ T40] audit: type=1400 audit(1747068547.180:380): avc: denied { unmount } for pid=5960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 163.748409][ T7160] SELinux: syz.1.350 (7160) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 163.937716][ T40] audit: type=1400 audit(1747068547.610:381): avc: denied { allowed } for pid=7169 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 163.990585][ T60] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 164.083654][ T7162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.202101][ T60] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.213841][ T60] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.219924][ T60] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.227799][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.365439][ T7162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.458574][ T60] usb 7-1: GET_CAPABILITIES returned 4d [ 164.461016][ T60] usbtmc 7-1:16.0: can't read capabilities [ 164.625056][ T7162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.837148][ T7162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.096862][ T7189] Cannot find set identified by id 0 to match [ 165.214740][ T7162] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.225024][ T7191] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.239162][ T7191] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.253455][ T7191] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 165.258366][ T7191] geneve2: entered promiscuous mode [ 165.263368][ T7191] geneve2: entered allmulticast mode [ 165.307581][ T7162] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.339944][ T7162] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.362495][ T7162] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.501626][ T7197] netlink: 'syz.0.362': attribute type 32 has an invalid length. [ 165.518336][ T7197] netlink: 48 bytes leftover after parsing attributes in process `syz.0.362'. [ 165.584208][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 165.585467][ T40] audit: type=1400 audit(1747068549.260:382): avc: denied { nlmsg_read } for pid=7198 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.027714][ T7213] Cannot find set identified by id 0 to match [ 166.049835][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 166.065864][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 166.073444][ T40] audit: type=1400 audit(1747068549.750:383): avc: denied { bind } for pid=7211 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.555763][ T7235] syz.1.376: attempt to access beyond end of device [ 166.555763][ T7235] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 166.575354][ T7235] XFS (nbd1): SB validate failed with error -5. [ 166.698660][ T7245] openvswitch: netlink: IPv6 tunnel dst address is zero [ 166.744601][ T7247] Cannot find set identified by id 0 to match [ 167.006188][ C2] vkms_vblank_simulate: vblank timer overrun [ 167.056480][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 167.056497][ T40] audit: type=1400 audit(1747068550.730:388): avc: denied { ioctl } for pid=7254 comm="syz.0.383" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 167.120241][ C2] vkms_vblank_simulate: vblank timer overrun [ 167.149716][ T7124] Bluetooth: hci4: Frame reassembly failed (-84) [ 167.154673][ T7124] Bluetooth: hci4: Frame reassembly failed (-84) [ 167.380399][ C2] vkms_vblank_simulate: vblank timer overrun [ 167.664440][ T7260] bridge_slave_0: left allmulticast mode [ 167.674586][ T7260] bridge_slave_0: left promiscuous mode [ 167.689537][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.726885][ T7260] bridge_slave_1: left allmulticast mode [ 167.729990][ T7260] bridge_slave_1: left promiscuous mode [ 167.736877][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.814405][ T7260] bond0: (slave bond_slave_0): Releasing backup interface [ 167.899322][ T7260] bond0: (slave bond_slave_1): Releasing backup interface [ 168.007282][ T7260] team0: Port device team_slave_0 removed [ 168.041246][ T7260] team0: Port device team_slave_1 removed [ 168.045777][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.050320][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.057498][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.064234][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.210338][ T5957] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 169.210374][ T68] Bluetooth: hci4: command 0xfc11 tx timeout [ 169.251135][ T7255] sp0: Synchronizing with TNC [ 169.484192][ T40] audit: type=1400 audit(1747068553.160:389): avc: denied { read write } for pid=7280 comm="syz.1.393" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 169.493408][ T40] audit: type=1400 audit(1747068553.160:390): avc: denied { open } for pid=7280 comm="syz.1.393" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 169.620540][ T40] audit: type=1400 audit(1747068553.290:391): avc: denied { map } for pid=7284 comm="syz.3.394" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.691637][ T7158] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 169.709549][ T7067] usb 7-1: USB disconnect, device number 5 [ 169.712443][ T40] audit: type=1400 audit(1747068553.290:392): avc: denied { ioctl } for pid=7284 comm="syz.3.394" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 169.891276][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 169.962735][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 169.968075][ T7295] Cannot find set identified by id 0 to match [ 170.025296][ T40] audit: type=1400 audit(1747068553.700:393): avc: denied { create } for pid=7289 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.044807][ T29] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 170.078292][ T40] audit: type=1400 audit(1747068553.700:394): avc: denied { bind } for pid=7289 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.078338][ T40] audit: type=1400 audit(1747068553.700:395): avc: denied { write } for pid=7289 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.159782][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.164585][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.171691][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.178541][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.182301][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.187437][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.203201][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.212209][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.224235][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.231620][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.245281][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.250376][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.258887][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.266393][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.277433][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.290385][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.295357][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.299349][ T7309] netlink: 172 bytes leftover after parsing attributes in process `syz.2.402'. [ 170.300466][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.302126][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.313499][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.320249][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.328980][ T29] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.342206][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.349186][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.359703][ T29] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 170.379999][ T29] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 170.389837][ T29] usb 8-1: Product: syz [ 170.411202][ T29] usb 8-1: Manufacturer: syz [ 170.413649][ T29] usb 8-1: SerialNumber: syz [ 170.431501][ T29] usb 8-1: config 0 descriptor?? [ 170.444920][ T29] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 170.585926][ T7320] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 170.630986][ T60] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 170.651856][ T6027] usb 8-1: USB disconnect, device number 6 [ 170.682814][ T6027] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 170.687473][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 170.812258][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.816148][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.823136][ C2] vkms_vblank_simulate: vblank timer overrun [ 170.846933][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.891055][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.985135][ T40] audit: type=1400 audit(1747068554.650:396): avc: denied { write } for pid=7332 comm="syz.2.409" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 171.118643][ T60] usb 5-1: GET_CAPABILITIES returned 4d [ 171.148726][ T60] usbtmc 5-1:16.0: can't read capabilities [ 171.204472][ T7341] dlm: non-version read from control device 0 [ 171.526504][ T40] audit: type=1400 audit(1747068555.190:397): avc: denied { execute_no_trans } for pid=7345 comm="syz.1.414" path="/140/file2" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.131996][ T40] audit: type=1400 audit(1747068555.800:398): avc: denied { read } for pid=7352 comm="syz.3.418" laddr=fe80::11 lport=57257 faddr=fe80::aa fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.422512][ C2] vkms_vblank_simulate: vblank timer overrun [ 172.515728][ T40] audit: type=1400 audit(1747068556.200:399): avc: denied { connect } for pid=7361 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.551645][ T5848] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 172.713654][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.718962][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.743705][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.757923][ T5848] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.772499][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.791784][ T5848] usb 6-1: config 0 descriptor?? [ 173.095762][ T7133] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.128912][ T40] audit: type=1400 audit(1747068556.800:400): avc: denied { write } for pid=7370 comm="syz.3.423" name="cgroup.subtree_control" dev="cgroup2" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.149748][ T40] audit: type=1400 audit(1747068556.800:401): avc: denied { open } for pid=7370 comm="syz.3.423" path="" dev="cgroup2" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.225508][ T40] audit: type=1400 audit(1747068556.900:402): avc: denied { setopt } for pid=7372 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.258043][ T5848] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 173.264398][ T5848] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 173.317423][ T5848] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 173.459517][ T7355] 9pnet_fd: Insufficient options for proto=fd [ 173.523213][ T6027] usb 6-1: USB disconnect, device number 8 [ 173.978281][ C2] vkms_vblank_simulate: vblank timer overrun [ 174.177310][ C2] vkms_vblank_simulate: vblank timer overrun [ 174.274394][ C2] vkms_vblank_simulate: vblank timer overrun [ 174.474347][ C2] vkms_vblank_simulate: vblank timer overrun [ 174.531424][ T40] audit: type=1400 audit(1747068558.200:403): avc: denied { read } for pid=7401 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.644230][ T40] audit: type=1400 audit(1747068558.320:404): avc: denied { mount } for pid=7401 comm="syz.1.432" name="/" dev="pstore" ino=6161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 174.676832][ T40] audit: type=1400 audit(1747068558.320:405): avc: denied { remount } for pid=7401 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 174.724889][ T40] audit: type=1400 audit(1747068558.400:406): avc: denied { unmount } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 174.871210][ T6027] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 174.980323][ T40] audit: type=1400 audit(1747068558.620:407): avc: denied { name_bind 0x1000000 } for pid=7414 comm="syz.1.436" path="socket:[15972]" dev="sockfs" ino=15972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.082268][ T6027] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.086524][ T6027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 175.094014][ T6027] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.098476][ T6027] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 175.104893][ T6027] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 175.108199][ T6027] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 175.112972][ T6027] usb 8-1: Manufacturer: syz [ 175.117822][ T6027] usb 8-1: config 0 descriptor?? [ 175.120695][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 175.133703][ T7418] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 175.159135][ C2] vkms_vblank_simulate: vblank timer overrun [ 175.168014][ T7418] overlayfs: missing 'lowerdir' [ 175.305508][ C2] vkms_vblank_simulate: vblank timer overrun [ 175.401433][ T7426] netlink: 'syz.2.439': attribute type 10 has an invalid length. [ 175.443855][ T7426] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.454406][ T7426] bond0: (slave team0): Enslaving as an active interface with an up link [ 175.470671][ T6027] rc_core: IR keymap rc-hauppauge not found [ 175.479777][ T6027] Registered IR keymap rc-empty [ 175.482399][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.510362][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.532651][ T6027] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 175.561267][ T6027] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input8 [ 175.606642][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.662584][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.683145][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.710617][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.731089][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.750644][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.770372][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.790377][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.820413][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.867382][ C2] vkms_vblank_simulate: vblank timer overrun [ 175.882391][ T6027] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 175.929296][ T6027] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 175.936502][ T6027] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 175.984376][ T6027] usb 8-1: USB disconnect, device number 7 [ 176.222380][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.289386][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.323466][ T7311] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 176.345944][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.377792][ T6002] usb 5-1: USB disconnect, device number 8 [ 176.469689][ T7470] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.492534][ T7470] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.498559][ T7470] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.517453][ T7470] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.528109][ T7470] geneve2: entered promiscuous mode [ 176.533031][ T7470] geneve2: entered allmulticast mode [ 176.553998][ T7470] ip6tnl1: entered promiscuous mode [ 176.601146][ T6027] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 176.793107][ T6027] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 176.797747][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.806373][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.820461][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.820492][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.827773][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.842305][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.908839][ C2] vkms_vblank_simulate: vblank timer overrun [ 176.923692][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.929615][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.965606][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.971536][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.980963][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.005113][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.011107][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.042988][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.049174][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.057325][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.063479][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.078296][ C2] vkms_vblank_simulate: vblank timer overrun [ 177.127625][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.133945][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.140669][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.192587][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 177.192602][ T40] audit: type=1400 audit(1747068560.860:410): avc: denied { unmount } for pid=5955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 177.201357][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.260897][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.286933][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.296765][ T6027] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.303924][ T6027] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.310619][ T6027] usb 8-1: config 0 interface 0 has no altsetting 0 [ 177.318123][ T6027] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 177.325432][ T6027] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 177.330837][ T6027] usb 8-1: Product: syz [ 177.333617][ T6027] usb 8-1: Manufacturer: syz [ 177.338899][ T6027] usb 8-1: SerialNumber: syz [ 177.345917][ T6027] usb 8-1: config 0 descriptor?? [ 177.362370][ T6027] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 177.483533][ T7484] openvswitch: netlink: Message has 8 unknown bytes. [ 177.601133][ T6002] usb 8-1: USB disconnect, device number 8 [ 177.612540][ T40] audit: type=1400 audit(1747068561.250:411): avc: denied { mount } for pid=7464 comm="syz.3.450" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 177.664801][ T6002] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 177.695126][ T40] audit: type=1400 audit(1747068561.250:412): avc: denied { search } for pid=7464 comm="syz.3.450" name="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.710473][ T40] audit: type=1400 audit(1747068561.250:413): avc: denied { mounton } for pid=7464 comm="syz.3.450" path="/" dev="configfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.757340][ T40] audit: type=1400 audit(1747068561.430:414): avc: denied { relabelfrom } for pid=7485 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 177.794935][ T40] audit: type=1400 audit(1747068561.430:415): avc: denied { relabelto } for pid=7485 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 177.848532][ T7490] Cannot find set identified by id 0 to match [ 178.097906][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 178.168579][ T6050] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 178.342804][ T6050] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.347281][ T6050] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.354095][ T40] audit: type=1400 audit(1747068562.020:416): avc: denied { create } for pid=7497 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.375733][ T6050] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.397587][ T6050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.430782][ T40] audit: type=1400 audit(1747068562.110:417): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 178.472143][ T40] audit: type=1400 audit(1747068562.140:418): avc: denied { setcurrent } for pid=7508 comm="syz.1.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 178.492621][ T40] audit: type=1401 audit(1747068562.140:419): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 178.620726][ T6050] usb 5-1: GET_CAPABILITIES returned 4d [ 178.625425][ T6050] usbtmc 5-1:16.0: can't read capabilities [ 179.331212][ T7528] capability: warning: `syz.2.472' uses 32-bit capabilities (legacy support in use) [ 179.778523][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 179.790898][ T7545] IPVS: Error joining to the multicast group [ 179.856685][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 180.200010][ T7572] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 180.249641][ T7575] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 180.302111][ T7572] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 180.322983][ T7575] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 180.329042][ T7575] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 180.334895][ T7572] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 180.992391][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 181.355159][ T7599] netlink: 'syz.2.495': attribute type 10 has an invalid length. [ 181.358654][ T7599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.495'. [ 181.365362][ T7599] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.368765][ T7599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.379358][ T7599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.391650][ T7599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.405387][ T7599] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 181.415000][ T7599] team0: Failed to send options change via netlink (err -105) [ 181.419547][ T7599] team0: Port device geneve0 added [ 181.849512][ T68] Bluetooth: hci1: command 0x0406 tx timeout [ 182.103161][ T7626] autofs: Unknown parameter 'fp0x0000000000000000' [ 182.179511][ T7626] loop6: detected capacity change from 0 to 63 [ 182.189829][ T6466] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.202510][ T6466] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.209339][ T6466] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.223145][ T6466] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.232400][ T6466] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.252163][ T6466] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.277743][ T6466] Buffer I/O error on dev loop6, logical block 3, async page read [ 182.278758][ T7625] sit0: entered promiscuous mode [ 182.338515][ T7625] netlink: 'syz.2.505': attribute type 1 has an invalid length. [ 182.344487][ T7625] netlink: 1 bytes leftover after parsing attributes in process `syz.2.505'. [ 182.776214][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 182.776231][ T40] audit: type=1400 audit(1747068566.430:435): avc: denied { connect } for pid=7632 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.833606][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 182.837519][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 182.850386][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 182.853757][ T40] audit: type=1400 audit(1747068566.490:436): avc: denied { map } for pid=7632 comm="syz.2.508" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.869646][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 182.901125][ T40] audit: type=1400 audit(1747068566.530:437): avc: denied { execute } for pid=7632 comm="syz.2.508" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.210092][ T40] audit: type=1400 audit(1747068566.880:438): avc: denied { append } for pid=7644 comm="syz.1.511" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 183.262895][ T7645] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.466915][ T7656] netlink: 'syz.1.515': attribute type 8 has an invalid length. [ 183.480422][ T7656] __nla_validate_parse: 29 callbacks suppressed [ 183.480439][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 183.558519][ T7660] input: syz0 as /devices/virtual/input/input10 [ 183.730627][ T7667] tmpfs: Bad value for 'huge' [ 183.795679][ T7671] loop6: detected capacity change from 0 to 524287999 [ 183.840449][ T7492] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 183.878488][ T58] usb 5-1: USB disconnect, device number 9 [ 183.929496][ T5957] Bluetooth: hci1: command 0x0406 tx timeout [ 183.953004][ T7678] vivid-007: kernel_thread() failed [ 184.084703][ T7689] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 184.093398][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 184.171098][ T7689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.525'. [ 184.237460][ T7687] bridge1: entered promiscuous mode [ 184.241319][ T7687] bridge1: entered allmulticast mode [ 184.299709][ T7687] tipc: Failed to obtain node identity [ 184.304570][ T7687] tipc: Enabling of bearer rejected, failed to enable media [ 184.358856][ T40] audit: type=1400 audit(1747068568.030:439): avc: denied { append } for pid=7686 comm="syz.0.524" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.441419][ T7710] binder: 7708:7710 ioctl c0306201 0 returned -14 [ 184.543119][ T40] audit: type=1400 audit(1747068568.220:440): avc: denied { map } for pid=7708 comm="syz.1.531" path="socket:[17525]" dev="sockfs" ino=17525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.730415][ T40] audit: type=1400 audit(1747068568.400:441): avc: denied { map } for pid=7718 comm="syz.1.535" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.754451][ T7720] can0: slcan on ptm0. [ 184.754687][ T40] audit: type=1400 audit(1747068568.400:442): avc: denied { execute } for pid=7718 comm="syz.1.535" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.890716][ T7718] can0 (unregistered): slcan off ptm0. [ 185.044860][ T5957] Bluetooth: hci3: unexpected event for opcode 0x0406 [ 185.047755][ T40] audit: type=1400 audit(1747068568.720:443): avc: denied { ioctl } for pid=7727 comm="syz.2.538" path="socket:[17539]" dev="sockfs" ino=17539 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.174186][ T7730] 9pnet_fd: Insufficient options for proto=fd [ 185.198374][ C1] hrtimer: interrupt took 427086 ns [ 185.354319][ T40] audit: type=1400 audit(1747068569.020:444): avc: denied { sqpoll } for pid=7734 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 185.807995][ T7723] team0 (unregistering): Port device team_slave_0 removed [ 185.849412][ T7723] team0 (unregistering): Port device team_slave_1 removed [ 185.993146][ T7747] pim6reg: entered allmulticast mode [ 186.019638][ T7747] pim6reg: left allmulticast mode [ 186.207811][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 186.340462][ T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 186.437636][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 186.459196][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'. [ 186.502809][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 186.509065][ T58] usb 7-1: config 2 interface 0 has no altsetting 0 [ 186.521351][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.550'. [ 186.533014][ T58] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 186.539548][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.555467][ T58] usb 7-1: Product: syz [ 186.558038][ T58] usb 7-1: Manufacturer: syz [ 186.561087][ T58] usb 7-1: SerialNumber: syz [ 186.627174][ T7763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.550'. [ 186.817316][ T7769] Cannot find set identified by id 0 to match [ 186.853156][ T7773] netlink: 160 bytes leftover after parsing attributes in process `syz.1.551'. [ 186.934488][ T7778] binder: 7777:7778 ioctl c018620c 200000000140 returned -1 [ 187.014649][ T7785] netlink: 84 bytes leftover after parsing attributes in process `syz.1.555'. [ 187.034188][ T58] usb 7-1: USB disconnect, device number 6 [ 187.967081][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 187.967096][ T40] audit: type=1400 audit(1747068571.640:454): avc: denied { bind } for pid=7832 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.004644][ T40] audit: type=1400 audit(1747068571.650:455): avc: denied { unlink } for pid=7832 comm="syz.2.571" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.026647][ T7845] Cannot find set identified by id 0 to match [ 188.490301][ T40] audit: type=1400 audit(1747068572.150:456): avc: denied { read write } for pid=7864 comm="syz.0.581" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 188.498891][ T40] audit: type=1400 audit(1747068572.150:457): avc: denied { open } for pid=7864 comm="syz.0.581" path="/101/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 188.882745][ T7883] Cannot find set identified by id 0 to match [ 189.690564][ T57] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 189.757248][ T7918] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 189.887348][ T57] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 189.894125][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.898885][ T57] usb 7-1: Product: syz [ 189.901232][ T57] usb 7-1: Manufacturer: syz [ 189.920834][ T57] usb 7-1: SerialNumber: syz [ 189.948156][ T57] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 190.061419][ T40] audit: type=1400 audit(1747068573.740:458): avc: denied { firmware_load } for pid=29 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 190.119985][ T29] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 190.439335][ T40] audit: type=1400 audit(1747068574.110:459): avc: denied { setopt } for pid=7912 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 190.473781][ T57] usb 7-1: USB disconnect, device number 7 [ 190.492195][ T40] audit: type=1400 audit(1747068574.130:460): avc: denied { ioctl } for pid=7912 comm="syz.2.596" path="socket:[19039]" dev="sockfs" ino=19039 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 190.556116][ T40] audit: type=1400 audit(1747068574.230:461): avc: denied { map } for pid=7943 comm="syz.1.604" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.577153][ T40] audit: type=1400 audit(1747068574.230:462): avc: denied { execute } for pid=7943 comm="syz.1.604" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.694769][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.701681][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.719602][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.756268][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.759751][ T7953] Cannot find set identified by id 0 to match [ 190.759974][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.768328][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.774357][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.781424][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.785918][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.797166][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.802145][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.814092][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.827741][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.831863][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.836542][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.840758][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.849077][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.855502][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.869210][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904661][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904685][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904701][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904716][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904732][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904748][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904763][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904779][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904795][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904811][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904827][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904843][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904860][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904877][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904895][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904912][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904930][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904948][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904967][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.904984][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.905002][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.905019][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.905035][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.905150][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 190.911228][ T5848] hid-generic 0000:007F:FFFFFFFE.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 191.210707][ T29] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 191.216511][ T29] ath9k_htc: Failed to initialize the device [ 191.245374][ T57] usb 7-1: ath9k_htc: USB layer deinitialized [ 191.319515][ T68] Bluetooth: hci1: unexpected event for opcode 0x0c46 [ 191.328362][ T7978] SELinux: failed to load policy [ 191.398261][ T7984] Cannot find set identified by id 0 to match [ 191.472846][ T40] audit: type=1400 audit(1747068575.140:463): avc: denied { mounton } for pid=7977 comm="syz.3.615" path="/proc/429/task" dev="proc" ino=19051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 191.742330][ T6027] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 191.794767][ T8003] __nla_validate_parse: 4 callbacks suppressed [ 191.794788][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 191.908128][ T6027] usb 8-1: Using ep0 maxpacket: 16 [ 191.922422][ T6027] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.929304][ T6027] usb 8-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 191.977961][ T6027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.001615][ T6027] usb 8-1: config 0 descriptor?? [ 192.148252][ T8023] Cannot find set identified by id 0 to match [ 192.227015][ T6027] usbhid 8-1:0.0: can't add hid device: -71 [ 192.246427][ T6027] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 192.251948][ T6027] usb 8-1: USB disconnect, device number 9 [ 192.259566][ T8027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.626'. [ 192.341698][ T68] Bluetooth: hci2: command tx timeout [ 192.642481][ T6012] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 192.814738][ T6012] usb 5-1: device descriptor read/64, error -71 [ 192.880231][ T8054] netlink: 'syz.2.632': attribute type 32 has an invalid length. [ 192.909245][ T8056] vivid-001: ================= START STATUS ================= [ 192.914281][ T8056] vivid-001: Radio HW Seek Mode: Bounded [ 192.919045][ T8056] vivid-001: Radio Programmable HW Seek: false [ 192.923454][ T8056] vivid-001: RDS Rx I/O Mode: Block I/O [ 192.926757][ T8056] vivid-001: Generate RBDS Instead of RDS: false [ 192.935783][ T8056] vivid-001: RDS Reception: true [ 192.941801][ T8056] vivid-001: RDS Program Type: 0 inactive [ 192.947056][ T8056] vivid-001: RDS PS Name: inactive [ 192.952679][ T8056] vivid-001: RDS Radio Text: inactive [ 192.956315][ T8056] vivid-001: RDS Traffic Announcement: false inactive [ 192.963145][ T8056] vivid-001: RDS Traffic Program: false inactive [ 192.990450][ T8056] vivid-001: RDS Music: false inactive [ 192.996127][ T8059] overlay: Bad value for 'workdir' [ 192.999516][ T8056] vivid-001: ================== END STATUS ================== [ 193.025998][ T8059] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 193.029396][ T8059] NCSI netlink: No device for ifindex 0 [ 193.055398][ T6012] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 193.184291][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'. [ 193.203750][ T6012] usb 5-1: device descriptor read/64, error -71 [ 193.206954][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 193.216104][ T8056] netlink: 'syz.3.633': attribute type 20 has an invalid length. [ 193.232086][ T40] audit: type=1400 audit(1747068576.910:464): avc: denied { getopt } for pid=8055 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 193.300542][ T6012] usb usb5-port1: attempt power cycle [ 193.600544][ T7067] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 193.650265][ T6012] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 193.690079][ T6012] usb 5-1: device descriptor read/8, error -71 [ 193.771784][ T7067] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.777561][ T7067] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 193.782802][ T7067] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 193.787289][ T7067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.795802][ T8074] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 193.804957][ T7067] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.940738][ T6012] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 193.975583][ T6012] usb 5-1: device descriptor read/8, error -71 [ 194.041637][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.049609][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.080546][ T6012] usb usb5-port1: unable to enumerate USB device [ 194.088652][ T60] usb 6-1: USB disconnect, device number 9 [ 194.191700][ T40] audit: type=1400 audit(1747068577.870:465): avc: denied { ioctl } for pid=8087 comm="syz.1.643" path="socket:[20241]" dev="sockfs" ino=20241 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 194.317494][ T40] audit: type=1400 audit(1747068577.990:466): avc: denied { ioctl } for pid=8087 comm="syz.1.643" path="/218/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 194.401842][ T5957] Bluetooth: hci2: command 0x0406 tx timeout [ 194.420056][ T8100] netlink: 'syz.1.645': attribute type 11 has an invalid length. [ 194.464445][ T8100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.645'. [ 194.540435][ T7067] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 194.601593][ T8098] xt_CT: No such helper "pptp" [ 194.712934][ T7067] usb 7-1: config 2 has an invalid interface number: 170 but max is 3 [ 194.717114][ T7067] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 194.744011][ T7067] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 4 [ 194.751452][ T40] audit: type=1400 audit(1747068578.420:467): avc: denied { connect } for pid=8110 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.756001][ T7067] usb 7-1: config 2 has no interface number 0 [ 194.756059][ T7067] usb 7-1: config 2 interface 170 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 194.756081][ T7067] usb 7-1: config 2 interface 170 has no altsetting 0 [ 194.758992][ T7067] usb 7-1: New USB device found, idVendor=148f, idProduct=9020, bcdDevice=6d.17 [ 194.759022][ T7067] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.759040][ T7067] usb 7-1: Product: Б [ 194.759054][ T7067] usb 7-1: Manufacturer: ⤨㫎䈔竢Α [ 194.759067][ T7067] usb 7-1: SerialNumber: ఉ [ 194.996990][ T7067] usb 7-1: USB disconnect, device number 8 [ 195.015178][ T40] audit: type=1400 audit(1747068578.690:468): avc: denied { read } for pid=8118 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.022335][ T40] audit: type=1400 audit(1747068578.690:469): avc: denied { create } for pid=8118 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 195.064192][ T40] audit: type=1400 audit(1747068578.690:470): avc: denied { getopt } for pid=8118 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 195.275490][ T8127] fuse: Invalid rootmode [ 195.284025][ T8127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.336238][ T8131] netlink: 3 bytes leftover after parsing attributes in process `syz.3.654'. [ 195.340032][ T8131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.410818][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.654'. [ 195.468403][ T8129] 9pnet: Found fid 0 not clunked [ 195.470681][ T8129] 9pnet: Tag 0 still in use [ 195.473659][ T8129] ------------[ cut here ]------------ [ 195.477992][ T8129] refcount_t: underflow; use-after-free. [ 195.485309][ T8129] WARNING: CPU: 0 PID: 8129 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 195.498343][ T8129] Modules linked in: [ 195.502128][ T8129] CPU: 0 UID: 0 PID: 8129 Comm: syz.3.654 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 195.523183][ T8129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.538908][ T8129] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 195.541597][ T8129] Code: ff 89 de e8 e8 3e ea fc 84 db 0f 85 66 ff ff ff e8 fb 43 ea fc c6 05 e8 79 9c 0b 01 90 48 c7 c7 a0 2f f4 8b e8 77 d1 a9 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 d8 43 ea fc 0f b6 1d c3 79 9c 0b 31 [ 195.565763][ T8129] RSP: 0018:ffffc90007fb79e0 EFLAGS: 00010282 [ 195.568904][ T8129] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90006d41000 [ 195.572798][ T8129] RDX: 0000000000080000 RSI: ffffffff817ac005 RDI: 0000000000000001 [ 195.575980][ T8129] RBP: ffff88802a0f0778 R08: 0000000000000001 R09: 0000000000000000 [ 195.578875][ T8129] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a0f0778 [ 195.601251][ T8129] R13: ffff88804e7e9400 R14: dffffc0000000000 R15: 1ffff92000ff6f47 [ 195.605435][ T8129] FS: 00007fc5946e06c0(0000) GS:ffff8880d69e1000(0000) knlGS:0000000000000000 [ 195.610199][ T8129] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.614577][ T8129] CR2: 00007f2958572720 CR3: 000000002f6e7000 CR4: 0000000000352ef0 [ 195.624740][ T8129] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.635499][ T8129] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 195.641860][ T8129] Call Trace: [ 195.643451][ T8129] [ 195.644824][ T8129] p9_req_put+0x1ec/0x250 [ 195.652061][ T8129] p9_client_destroy+0x22b/0x480 [ 195.659092][ T8129] ? __pfx_p9_client_destroy+0x10/0x10 [ 195.661846][ T8129] ? v9fs_session_init+0xb87/0x1a80 [ 195.663985][ T8129] v9fs_session_init+0xbab/0x1a80 [ 195.666050][ T8129] ? __pfx_v9fs_session_init+0x10/0x10 [ 195.669583][ T8129] v9fs_mount+0xc5/0xa30 [ 195.671792][ T8129] ? __pfx_v9fs_mount+0x10/0x10 [ 195.673961][ T8129] ? cap_capable+0xb3/0x250 [ 195.676620][ T8129] ? __pfx_v9fs_mount+0x10/0x10 [ 195.679332][ T8129] legacy_get_tree+0x109/0x220 [ 195.682534][ T8129] vfs_get_tree+0x8b/0x340 [ 195.685690][ T8129] path_mount+0x14d4/0x1f20 [ 195.688746][ T8129] ? kmem_cache_free+0x2d4/0x4d0 [ 195.693530][ T8129] ? __pfx_path_mount+0x10/0x10 [ 195.696394][ T8129] ? putname+0x154/0x1a0 [ 195.698854][ T8129] __x64_sys_mount+0x28d/0x310 [ 195.701755][ T8129] ? __pfx___x64_sys_mount+0x10/0x10 [ 195.705219][ T8129] ? rcu_is_watching+0x12/0xc0 [ 195.709017][ T8129] do_syscall_64+0xcd/0x260 [ 195.713017][ T8129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.716513][ T8129] RIP: 0033:0x7fc59378e969 [ 195.719082][ T8129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.734356][ T8129] RSP: 002b:00007fc5946e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.741892][ T8129] RAX: ffffffffffffffda RBX: 00007fc5939b5fa0 RCX: 00007fc59378e969 [ 195.748242][ T8129] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000040 [ 195.755094][ T8129] RBP: 00007fc593810ab1 R08: 0000200000000940 R09: 0000000000000000 [ 195.759681][ T8129] R10: 0000000000800488 R11: 0000000000000246 R12: 0000000000000000 [ 195.764841][ T8129] R13: 0000000000000000 R14: 00007fc5939b5fa0 R15: 00007ffe7a1068c8 [ 195.768318][ T8129] [ 195.770819][ T8129] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.775817][ T8129] CPU: 0 UID: 0 PID: 8129 Comm: syz.3.654 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 195.782869][ T8129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.788677][ T8129] Call Trace: [ 195.790396][ T8129] [ 195.791677][ T8129] dump_stack_lvl+0x3d/0x1f0 [ 195.794563][ T8129] panic+0x71c/0x800 [ 195.797698][ T8129] ? __pfx_panic+0x10/0x10 [ 195.800762][ T8129] ? show_trace_log_lvl+0x29b/0x3e0 [ 195.803875][ T8129] ? refcount_warn_saturate+0x14a/0x210 [ 195.807364][ T8129] check_panic_on_warn+0xab/0xb0 [ 195.810354][ T8129] __warn+0xf6/0x3c0 [ 195.812707][ T8129] ? preempt_schedule_notrace+0x62/0xe0 [ 195.815812][ T8129] ? refcount_warn_saturate+0x14a/0x210 [ 195.818773][ T8129] report_bug+0x3c3/0x580 [ 195.821208][ T8129] ? refcount_warn_saturate+0x14a/0x210 [ 195.824305][ T8129] handle_bug+0x184/0x210 [ 195.827002][ T8129] exc_invalid_op+0x17/0x50 [ 195.830183][ T8129] asm_exc_invalid_op+0x1a/0x20 [ 195.834249][ T8129] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 195.838081][ T8129] Code: ff 89 de e8 e8 3e ea fc 84 db 0f 85 66 ff ff ff e8 fb 43 ea fc c6 05 e8 79 9c 0b 01 90 48 c7 c7 a0 2f f4 8b e8 77 d1 a9 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 d8 43 ea fc 0f b6 1d c3 79 9c 0b 31 [ 195.849701][ T8129] RSP: 0018:ffffc90007fb79e0 EFLAGS: 00010282 [ 195.853132][ T8129] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90006d41000 [ 195.876285][ T8129] RDX: 0000000000080000 RSI: ffffffff817ac005 RDI: 0000000000000001 [ 195.879773][ T8129] RBP: ffff88802a0f0778 R08: 0000000000000001 R09: 0000000000000000 [ 195.883718][ T8129] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a0f0778 [ 195.888063][ T8129] R13: ffff88804e7e9400 R14: dffffc0000000000 R15: 1ffff92000ff6f47 [ 195.902901][ T8129] ? __warn_printk+0x1a5/0x350 [ 195.905424][ T8129] p9_req_put+0x1ec/0x250 [ 195.907868][ T8129] p9_client_destroy+0x22b/0x480 [ 195.910896][ T8129] ? __pfx_p9_client_destroy+0x10/0x10 [ 195.914020][ T8129] ? v9fs_session_init+0xb87/0x1a80 [ 195.916463][ T8129] v9fs_session_init+0xbab/0x1a80 [ 195.933067][ T8129] ? __pfx_v9fs_session_init+0x10/0x10 [ 195.935774][ T8129] v9fs_mount+0xc5/0xa30 [ 195.944031][ T8129] ? __pfx_v9fs_mount+0x10/0x10 [ 195.946887][ T8129] ? cap_capable+0xb3/0x250 [ 195.954945][ T8129] ? __pfx_v9fs_mount+0x10/0x10 [ 195.957306][ T8129] legacy_get_tree+0x109/0x220 [ 195.973352][ T8129] vfs_get_tree+0x8b/0x340 [ 195.978084][ T8129] path_mount+0x14d4/0x1f20 [ 195.980532][ T8129] ? kmem_cache_free+0x2d4/0x4d0 [ 195.994114][ T8129] ? __pfx_path_mount+0x10/0x10 [ 195.999108][ T8129] ? putname+0x154/0x1a0 [ 196.003150][ T8129] __x64_sys_mount+0x28d/0x310 [ 196.006471][ T8129] ? __pfx___x64_sys_mount+0x10/0x10 [ 196.009723][ T8129] ? rcu_is_watching+0x12/0xc0 [ 196.014060][ T8129] do_syscall_64+0xcd/0x260 [ 196.016207][ T8129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.018987][ T8129] RIP: 0033:0x7fc59378e969 [ 196.021918][ T8129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.031867][ T8129] RSP: 002b:00007fc5946e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.036677][ T8129] RAX: ffffffffffffffda RBX: 00007fc5939b5fa0 RCX: 00007fc59378e969 [ 196.041021][ T8129] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000040 [ 196.045727][ T8129] RBP: 00007fc593810ab1 R08: 0000200000000940 R09: 0000000000000000 [ 196.050296][ T8129] R10: 0000000000800488 R11: 0000000000000246 R12: 0000000000000000 [ 196.054771][ T8129] R13: 0000000000000000 R14: 00007fc5939b5fa0 R15: 00007ffe7a1068c8 [ 196.059531][ T8129] [ 196.067398][ T8129] Kernel Offset: disabled [ 196.069915][ T8129] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:49:40 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff973aa998 RBX=0000000000000006 RCX=0000000000000007 RDX=0000000000000000 RSI=0000000000000007 RDI=ffffffff973170d8 RBP=0000000000000030 RSP=ffffc90007fb7070 R8 =ffffffff95ac4890 R9 =0000000000000002 R10=ffffc90007fb7208 R11=0000000000000000 R12=ffffffff81979870 R13=ffffc90007fb7110 R14=ffffffff8197a380 R15=ffffffff973170d8 RIP=ffffffff8197b90a RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fc5946e06c0 ffffffff 00c00000 GS =0000 ffff8880d69e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2958572720 CR3=000000002f6e7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055978ab16600 000055978ab16600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3fb12540 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756f63666572205d 3932313854205b5d 3239393737342e35 393120205b203a6c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697373696d726570 2074656b636f735f 70756b6f6f6c5f62 69665f6b6e696c74 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e3d7373616c63 7420745f6d646173 79733a725f6d6461 7379733a746f6f72 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d747865746e6f63 7420745f6d646173 79733a725f6d6461 7379733a746f6f72 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d747865746e6f63 7320223135362e31 2e7a7973223d6d6d 6f6320383131383d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=ffff8880280d8000 RCX=ffffffff8699c282 RDX=00000000ffffffff RSI=ffffffff8699c28f RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900006a0ec0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff8880280d96b8 R14=ffff8880280d92d0 R15=0000000000000000 RIP=ffffffff8699c2c9 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f29594496c0 ffffffff 00c00000 GS =0000 ffff8880d6ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2d3e7f CR3=000000005452b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2958611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2958611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2958611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2958611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2958611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2958611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000376f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000144c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000003ffffff RCX=ffffffff816b2d77 RDX=ffff88802de8c880 RSI=0000000000000cc0 RDI=ffff88801b44c500 RBP=ffffc9000432fbb8 RSP=ffffc9000432fb60 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88801b44c500 R13=0000000000000cc0 R14=0000000000000040 R15=0000000000000000 RIP=ffffffff821645b9 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 000fffff 00000000 FS =0000 00005555775a4500 000fffff 00000000 GS =0000 ffff8880d6be1000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe1521851d3 CR3=0000000023fea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1bf41360 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000cfe7f RBX=0000000000000003 RCX=ffffffff8b6ce419 RDX=0000000000000000 RSI=ffffffff8dbe198b RDI=ffffffff8bf483a0 RBP=ffffed1003bd5000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dea8000 R14=ffffffff9084f710 R15=0000000000000000 RIP=ffffffff8b6cccaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe152f7ef98 CR3=000000004d98e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1bf41360 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe152211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000