last executing test programs: 2.210436731s ago: executing program 3 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d706f5b3d696e74657269656176651d16ac1d7402002c00a80c9c69eda5e684f1e688bcb3a5bcc7af580a722303e12ab8b4a8bc4e4a389debad6fa54e1888cc87a1c1b158ea90740db1358ca1c6e798b850aefb8a78f5e0944faa41c2f8c72bf2d3a77efbef342a511b79e18b4273da49ae6f2265f80badeafef2cb398f2cab709612cb7f079e"]) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414bb050004"], 0x40}}, 0x0) sendto$packet(r5, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000280)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='efivarfs\x00', 0x2000c0, &(0x7f0000000180)='-\x00') sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x3, 0x7}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2.210075597s ago: executing program 0 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000200), 0x1024820, &(0x7f0000000240)={'trans=xen,', {[{@nodevmap}, {@version_L}], [{@fsname={'fsname', 0x3d, '#'}}, {@subj_user={'subj_user', 0x3d, 'upperdir'}}]}}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.14991474s ago: executing program 0 (id=390): socket(0xa, 0x3, 0x3a) (async) socket$netlink(0x10, 0x3, 0x9) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x80100, 0x0) ioctl$BSG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x3, 0x300) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0xffffffff}, {0x81}, {0x3, 0x0, 0x80}, {0x16, 0x0, 0xff}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2.007751872s ago: executing program 2 (id=392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x6002000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000001440)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 1.839559167s ago: executing program 2 (id=396): close(0x3) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRESHEX=r0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000300000100c280000800050058a3cacc08000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000080)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000480)={0x0, 0xb, 0x5dbcf01a, 0x4baf, 0x3, 0x40, 0x5, 0x0, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x7, 0x4, 0x4, 0x4, 0xfffffffd}}, &(0x7f0000000540)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x0, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001, r5}, 0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x3d6e}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={r6, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x1, 0x15a1, 0x5, 0x7f, 0x20, 0x2, 0x5}, 0x9c) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x6c041) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r10, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_fuse_handle_req(r10, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, &(0x7f00000000c0)={0x400, 0x1, 0x1, 0x9, 0x1, [0x8, 0xb0, 0x10]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0) 1.640596953s ago: executing program 1 (id=399): rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000080)={0x3, 0x0, 0x7}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c00000001040500000000000000000000000000060006400000000008000540000000000500010001"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) 1.639947694s ago: executing program 1 (id=400): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x10001, 0xa0000) ioctl$VIDIOC_S_FBUF(r5, 0x4030560b, &(0x7f00000000c0)={0xb1, 0x25, 0x0, {0x4, 0x6, 0x32314d59, 0x1, 0x5, 0x6, 0x8}}) r6 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x84000, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x42, 0x95, 0x33, 0x8, 0x1430, 0x6cdc, 0x85cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x80, 0x5, "", [{{0x9, 0x4, 0xc6, 0x0, 0x0, 0xff, 0x5d, 0x1, 0x4}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="18000000010000", 0x7) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0x11) ioctl$TCSETSF2(r6, 0x8910, 0x0) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\xfd\xa8\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\xf9\xff\xff\xff\x00\x00\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\'4Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xf9\xff\xff\xffT\xc8\f\xe5\x89\xbf3\xd3\xae\xd2\a\x11\xa9\xa5^\xff\x01\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80}8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xc1\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x15\xf9\x18<\xab\xc5\xba{a\xe5\x9ei\x857X\xe2\a\x17\xf5\xa2\x0fZk \x15\xe4\xca\x17\x1a\xcaL:i\xe9r\xb9T\x16~\x06\r\xf02\xcdH\xc5\xd5\t\x86\x14\x00\xd4\x97\x06\xa3\x84\xbf\xeatt\b9i\xcf\xe5!\xba5\xde\xd6D\xbb\xc8\xbf\xdf\b\x95\xc5\xcb\x84~\xa5\x96N\xa1\x19\x87L\xa7\xb7\xb2\xf25\xc5\x1b^\xc2/\x16v\x1e\xb0&\x04\xb2W\' \xcdf\x90\xc8\x81W\x10\x84\xe9T\xaf\xd7f\xacH\xb2DX\xa1\x1b\x92\x9b\x8d\xd6)\xa3\xfe\xf0\xd7F\x7fjS\xe1\x04|\x16\x8bee\x8eg\x02\x13\xbb\xa7\x81\xac\x80\xa4\x8e\x12\xec\xac\xfb\x11', 0x4e945cc5a187b463) write$binfmt_script(r8, &(0x7f0000000040), 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x26, 0x2, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffe0, 0x7}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000140)='!#-\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='/dev/video#\x00']}, &(0x7f0000000680)={[&(0x7f00000003c0)='./cgroup.net/syz1\x00', &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', &(0x7f0000000500)='[\v\xdbX\xae[\xfd\xa8\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\xf9\xff\xff\xff\x00\x00\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\'4Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xf9\xff\xff\xffT\xc8\f\xe5\x89\xbf3\xd3\xae\xd2\a\x11\xa9\xa5^\xff\x01\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80}8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xc1\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x15\xf9\x18<\xab\xc5\xba{a\xe5\x9ei\x857X\xe2\a\x17\xf5\xa2\x0fZk \x15\xe4\xca\x17\x1a\xcaL:i\xe9r\xb9T\x16~\x06\r\xf02\xcdH\xc5\xd5\t\x86\x14\x00\xd4\x97\x06\xa3\x84\xbf\xeatt\b9i\xcf\xe5!\xba5\xde\xd6D\xbb\xc8\xbf\xdf\b\x95\xc5\xcb\x84~\xa5\x96N\xa1\x19\x87L\xa7\xb7\xb2\xf25\xc5\x1b^\xc2/\x16v\x1e\xb0&\x04\xb2W\' \xcdf\x90\xc8\x81W\x10\x84\xe9T\xaf\xd7f\xacH\xb2DX\xa1\x1b\x92\x9b\x8d\xd6)\xa3\xfe\xf0\xd7F\x7fjS\xe1\x04|\x16\x8bee\x8eg\x02\x13\xbb\xa7\x81\xac\x80\xa4\x8e\x12\xec\xac\xfb\x11', &(0x7f0000000640)='$]:/:@)\x00']}) 1.249811443s ago: executing program 0 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='83\x00\x00', @ANYRES16=r5, @ANYBLOB="010004000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a801800038014000500020007000500070001000500c94e0100"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a12f7207f7ed4c87ed78a000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) memfd_secret(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) semget$private(0x0, 0x6, 0x3b1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x1, 0x3, 0xfec00000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x800000, 0xe, 0x80, 0x0, 0x100000001, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xfffe, 0xfffffffffffffffe, 0x7, 0x80000002, 0x5, 0xc3e2, 0x9880, 0x4000000000080, 0x6, 0x8, 0x2, 0x3, 0x20000000009, 0x2, 0x1fd, 0x80008, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x1fe, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x7ff, 0x5, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000002, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x8, 0xa, 0x0, 0x24000008, 0xdac, 0xe96, 0x7, 0xfffffffffffffffc, 0xa7, 0x3, 0x0, 0x9, 0x0, 0x7, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc02, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x3, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x8fc3, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xfffd, 0x1, 0x50, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 1.158093487s ago: executing program 2 (id=402): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000000c0)='n\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x6dc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}}, 0x80, 0x0}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0xfffffffffffffe4b) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x200001, 0x5, 0x3, 0x0, 'syz0\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x10001, 'syz0\x00', 0x0}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x1, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r5, 0x25, 0x10, @val=@perf_event={0xfff}}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x200640, 0x0) r9 = socket(0x5, 0x80002, 0xffffffff) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) connect$l2tp6(r10, &(0x7f0000000100)={0xa, 0x0, 0x5, @empty, 0x1, 0x3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff0700000084b6709ad4fb26e397ee97ffe086679dd2e36e3c3bae050a84a38c9da838cb7b5aa86b953112f35caafdaf8cfc660dca3fe06dd4", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="00010100ffffffff00000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.040938759s ago: executing program 0 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1}, 0x8001}], 0x2, 0x10002, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x0, 0x200000, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) r4 = socket(0x2b, 0x1, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @local, 0x1}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x11, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 700.45821ms ago: executing program 3 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x101, 0x70bd25, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x1ff}]}, 0x28}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000000c0)=@arm64) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_open_procfs(r4, &(0x7f0000000000)='oom_score\x00') 619.978563ms ago: executing program 3 (id=405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2124, &(0x7f0000001640), 0x12) (async) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86", 0x11}, {&(0x7f00000001c0)="b700", 0x2}], 0x57) 529.955427ms ago: executing program 3 (id=406): ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x10201, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x52, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0, 0x61}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 401.874164ms ago: executing program 2 (id=407): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xf) 401.027029ms ago: executing program 3 (id=408): rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000080)={0x3, 0x0, 0x7}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="1008040020100000240012801100010062726964"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c00000001040500000000000000000000000000060006400000000008000540000000000500010001"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) 371.619659ms ago: executing program 2 (id=409): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 369.928052ms ago: executing program 3 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000002f00090027bd7000fddbdf250400000004001980"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x300c072, &(0x7f0000002480)=ANY=[@ANYBLOB='stats=globan,\x00']) 279.780494ms ago: executing program 1 (id=411): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 277.610927ms ago: executing program 2 (id=412): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x34}}, 0x4004050) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x40810) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0xf, 0x6, 0x801, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x1}, [@nested={0x8, 0x6f, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6008810}, 0xb3d13ff49c23d45f) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000080}, 0x800) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000005c0)='syz0\x00', 0x1ff) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000600)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000640)=0x8, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r6, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r5) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf4, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d63e25f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x48010) connect$vsock_stream(r4, &(0x7f0000000a40)={0x28, 0x0, 0x476cab56df59b799, @host}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) ioctl$XFS_IOC_COMMIT_RANGE(r8, 0x40585883, &(0x7f0000000ac0)={r9, 0x0, 0x401, 0x9, 0x8, 0x8, [0x5, 0x2, 0x2, 0x101, 0x1, 0x8]}) fcntl$setownex(r5, 0xf, &(0x7f0000000b40)={0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000bc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000001e00)=0x0) sendmmsg(r10, &(0x7f0000002b00)=[{{&(0x7f0000000c00)=@nfc_llcp={0x27, r11, 0xffffffffffffffff, 0x7, 0x2, 0x3, "cd3f7f775095b832e320176362efce54ae87274224ba9b3fcf306a2defc9e30bf95e24eaa9d67a9f887cc11113b1e1860b5a92c48a29a1c467b0133c988f21", 0x13}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="34158115f3413af3ad3b5252bb8b47d138f165ddbc8c367d41255f05c809c5d22d95038c8fe8c0725b132a20ffa723bc6b35e91b20460c7a44e4fda14ea0a8a72103d4d6c57238d3e3b9819e961eb9ce8e0dbc5be70bc07bb2a4498de2f9a52da3c7625dd7b9be4524b82c039bc906a2d0988d45aa5954bc", 0x78}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="8d7b2eab0de06a60c122b0576a39a49669e0745e0d3e34e29db53c091c76ea86868dab797173c092bf02e270815c831eaf8d4aaa15e5049a7961344649d3acf2bbb0777d3bc6d2282ac9c66196c536c7325affb8c31bb24c099f5dbef890353074168a3d2d1a12b275b998b0acc0912630453ccef78603f06e97b886acf19e27c0ebfc0f7426e9c54fe810796468f0be34e3d7b9bdc2b42981e6901426a672b922f0bca14fd8d83b7b2de22128eb2f2f3ee01d1a6809594d06da", 0xba}], 0x3}}, {{&(0x7f0000001e40)=@nfc={0x27, r12, 0x1, 0x2}, 0x80, &(0x7f0000001ec0), 0x0, &(0x7f0000001f00)=[{0x80, 0x88, 0x7f, "21a14b0dc38b1cb2d3873c81130ff7cea2a0ac1983ec3a876f29e1e57645255dc7145fcebb0889438af45d32dcd5139069ea6a29bfbb58eb002357787e0cb52560a580221c5471474c41778dfa9fb2d28bca54c6336ab8b8cc6b7bf752d75e3c402cdca0e60dff078b9f"}, {0x70, 0x10d, 0x5, "e9f29a4cf9708a1d1a66f8853d9d2569160b2d3cd5e208af56dded97a90f4c2eef1c711602f386ce652d52634cbd6936a21357debc8e30c703d2cb0f68e919b3325a28f488aa693f8d639f831ee21790545efef93896c22f27e9"}, {0xe0, 0x10b, 0xffff, "72cb06ccf206724c4b2763d2e73b7fcd5497fd22d3172330404364fa6489193a991ae6fa0571ff7ac648ad4242e05acbb8297c98d0a9a4b7f4cc4b5514efcbfa44379a208008203a61756b91ccd49b33239470f87b7b21dd5cdd8f7720a749083c1b3f84d57bfbe88e5d3fe830b09ec4b2e256e99bbeadeebf8b4f6c93bab11b7764c9c30c9c9618456dc183ff4de487f9f725fde43ea6a0eeff503d7839ac220968830bc192255919db97f30e113780f718c893d86c45d05c274b878d8abff39195f901f3d29b4489ad63356545"}, {0x88, 0x88, 0x3, "e733fc04aa1d1483c18bc7bb95e7c1b5f2b810f053b92ab91f80c9cb90ba95d057d129050abf8b5fc6076cf5e0b7f5be629990c144b801378e5ec8154018f0389b3337dd374f2b3d01386fb6e096cc4db127d478210afcd25c89d78749de493bf6f32bcf6a2d0f890a98469600da03f2becec26839"}, {0x18, 0x10a, 0x7, '%='}, {0xf8, 0x10b, 0x7, "28e2e0c1968fa94fd8fb34671d1f3bb73a3349d8793abec7076cedcd701d290e7453bc60f8fc83166c1e6742ee9d8a74c192af3c4332c959fb0a6e76c66c703c4a5aab53066ea908da81032d0954e63d969b2b7c8f83d997efde0f348ef876257db83912c6f2787cbdcfd9cc37808b35acd47e9df00abc181cee31b13eec010da51fa9461315cd41fb0c35bd9b926e3f1bac0c63e80fdcaaab3d4c2ab4d739e7c250cd57bb3a6edd5741dfa1940e1de4598c8ac641ed51b502d847ac8806f38c1b798dd5596e3e478fbbf3de5c05040a3ac6497fe500e481fd6da9b56612eaec770b68c0"}, {0x98, 0x108, 0x8f56, "cfce05cbf9678acb4946581b4562dd98f94b4e4ca12e2c466e4fde11b001b840061001daf4a3b361146f00380535bdab32c49ec2e80009e8c6b9859a9ac1df1df87454c447d92b5bea61862537aaf4c9b2e99db99d5a26cfa5a19a5adc68b7c67b89afe3fd202882ca0c6a24936a121197130becc2c2c7a07cd4e7704e5fc03c6528d15242e40f78"}], 0x400}}, {{&(0x7f0000002300)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002380)="b9ab3512fef2e4c64a3413660bb935b858c703157901aed2667cc4a7cfb9bc75cd21cd9fcdbf2e959eb4e386f56ae101d3322a081fd72c28cf50ee50871b489a3c5bbe4dd6f534b002bc8d6b42f1add0769fe8cdc0a02287fe729e11d5d5b69763d5e6dbb57d31a1381833f5505ce955028ad92527622f7d8e309e5bbbab42cd81d4b7e45ba2f58932e781847e657b72ac51178166e14e0c53c229ae6dc5be5de7cc8a108d7f9bf56eba92edb76b37f750c41ee131c2ba21ea322387b012a3413aa01c11ca31f3ccd726f9fea849a85a205479", 0xd3}, {&(0x7f0000002480)="978712185933d51c5de9e82ba5dcce9d5cea114ec9b3ca2eb56dedf1107fc2b37d9c5e245569af0276ba6e92ce0f0ce1f185aec9acb7c74a85e099251b715d589e37ccb8dd1b418cbd63c2", 0x4b}, {&(0x7f0000002500)="ac152d2b62ea555b96aec8f103c597f21d85f8415c902c5f43c444ad3954be60b4f356c918da0d076d754cf9d9295cccf3f69e7bc31889ce664e276b6c090d28e8", 0x41}, {&(0x7f0000002580)="700e4f48bd1322e04c3a0fcd9d064a885d7286104c923b8ae911a8be7fb4edf6bf7b81545e93f2ef5588c843ffd430cae3a125c9133a585acfb15621bb2c2bcef253a7aaacda6e74c4f9b7778799e75c563a05e418810efbc90af5a059b9918826b52c8a117c5ce99a56e57eee632b3f1a24c8272befb7f83832047bf84551a889ec0dfce6", 0x85}, {&(0x7f0000002640)="e92031da9979d02089d436cabdb2f56ff2878cd25fe0abf1f1236c2e940aedd84194ca7804d694da23686706dd97f0277af301842923d427e7b0b6fe44c357c9cde6411753bead41364ead1723362a9cd97414f7b359eb2112aed3116fbb4539f1d49f0da2fd5eedad75a64d1ed74806a40e3b5bbed7bde8afd67f94879b077f326f1e87299740140235b51e027a88ef0219d9dc8dcc9ce93d40f97c7a2e940fbd1319c796abdcbd46adcc086fa62e2f4b14d69f3834853287700c68bac10acffab77f17c2ddb4294190657d7f", 0xcd}, {&(0x7f0000002740)="49abd56cf4b83b1f748a2f564001d61186a32f1d03883720b8c511e736544addbd513a4121e4ec5d269ca8468ca761634a4fb36b5d4652a56bb29b7ac2a595189a7431bf59356f3edb1bc2ee35f5aa46331068bd941901952415aa1d40374c27785ea594aaf8a36c011c670f5085f1107bf33206cfc1abe73f40e38c1aa2ac3ff472c30fb5afa8bf8f00027746d8a4188eeaf4d6aa31f6494668178214e676b4ccbfe4abef93820db6592d6e98a4b7e12bbf8098b35d0f8aa18df2c02144ffc92cdfb1cb9d57c2a2fe58904ccdca6b8cb4", 0xd1}, {&(0x7f0000002840)="62860df8796a9f3c41bedccd637b74cdbaec75f59753b53a7ebc9f0758a8e1c995d7af484a103e73b7e12c76d807df67856f63253790d92290a143be0c587872733f419892fb9a7be97c8cc0222e61afd2f07ef69b3a19707b29449f6686943a1551afd0ff4c65bc81e5013015a0716f98881545f8135d48553019591251ecb8584191c679e100da6f44f0745029b0c17726a1274b50a0bc999c21e67d5edd94f7d637be90ca4393fe087e2a437f6f2a4c216a34d44d3dcac34a709660264c5c8986d03193c6cac02a3c48969f1abc53b65522e76cb296ac8c01beb7489638e881846ea5761d600a0588cb32d52d43aabc8884f63a578b", 0xf7}], 0x7, &(0x7f00000029c0)=[{0x110, 0x118, 0x5, "f1ab6fb382f8664501c891c0514da720a74c7b0ef886f8cda2028916ca19d9226b3da0d311c7c244169403a0a053c05f1fc9a5c60fbf615ee6f78f09ffc583655aecafdb9c199046d8e534063f0f287ed88b7715aa7d8c49d43bf5f75bafaec4a468438916aa5890b43c25cd6f9a8436410bb4207d8bb5fbe794b8334c4db157d65e90ddabc7026204e7bee07194600550a83741dc455576178046b44aae465aec5d38d610e37adf38b89ffe78e4335d5a3911d03a5f6bc87af6eacc719fc6d5e770c7ff6f58630a0b92e5a692f8c5ab4d56b400b5d4827ba708d8506cb7eb46fd17cfd7e4d9283616ee2be3e024f070c2de2cb090f7994726"}], 0x110}}], 0x3, 0x4000) r13 = accept$unix(r9, 0x0, &(0x7f0000002bc0)) recvmsg$unix(r13, &(0x7f0000002ec0)={&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002c80)=""/151, 0x97}, {&(0x7f0000002d40)=""/191, 0xbf}], 0x2, &(0x7f0000002e40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x143) accept4(r9, &(0x7f0000002f00)=@ax25={{0x3, @null}, [@null, @null, @null, @rose, @default, @remote, @netrom, @bcast]}, &(0x7f0000002f80)=0x80, 0x800) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000003040)={0x0, 0x8000}, 0x8) 168.023279ms ago: executing program 0 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 139.748666ms ago: executing program 1 (id=414): r0 = userfaultfd(0x80001) mprotect(&(0x7f00001d5000/0x4000)=nil, 0x4000, 0x5) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x10c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00007ac000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0xb, 0x1], 0x80a0000, 0x50}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x899, &(0x7f00000005c0)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) getpeername(r6, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80) r7 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000200"/144]}, 0x108) io_uring_enter(r5, 0x2219, 0x34d3, 0x16, 0x0, 0x0) r8 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x90) file_setattr(r8, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x10, 0x7fff, 0x4, 0x2, 0x40}, 0x18, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 139.55313ms ago: executing program 0 (id=415): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x51, 0x12) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) landlock_restrict_self(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002a000701fcfffffffddbdf250201"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00') landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000040)=0x51, 0x12) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) landlock_restrict_self(r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002a000701fcfffffffddbdf250201"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prlimit64(0x0, 0x1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00') (async) 68.707784ms ago: executing program 1 (id=416): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcb) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r2}, &(0x7f0000000b00), &(0x7f0000000b40)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$can_bcm(r0, &(0x7f0000002300), 0x10) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="751eb50adb070000000000000000000a5f0000273c", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 0s ago: executing program 1 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x11, &(0x7f00000000c0)=ANY=[], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="03000000", @ANYRES16=r4, @ANYRESOCT, @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="201e00006900010028bd7000002500090002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040081}, 0x42) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000040)="91", 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, 0x0) syz_open_dev$audion(&(0x7f0000000100), 0x1, 0x40100) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r10, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x89d6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x5c}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000200)={0x1, 0x8, 0x0, 0x101, 0x17}) socket$netlink(0x10, 0x3, 0x12) r11 = syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x101000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x2, @none}, 0xe) ioctl$IOC_PR_PREEMPT_ABORT(r11, 0x401870cc, 0x0) kernel console output (not intermixed with test programs): [ 86.831737][ T848] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:62548' (ED25519) to the list of known hosts. [ 401.694150][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 401.694165][ T42] audit: type=1400 audit(1783293189.666:138): avc: denied { name_bind } for pid=5772 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 401.726592][ T42] audit: type=1400 audit(1783293189.696:139): avc: denied { execute } for pid=5773 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 401.734846][ T42] audit: type=1400 audit(1783293189.696:140): avc: denied { execute_no_trans } for pid=5773 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 404.958297][ T42] audit: type=1400 audit(1783293192.926:141): avc: denied { mounton } for pid=5773 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 404.967695][ T42] audit: type=1400 audit(1783293192.936:142): avc: denied { mount } for pid=5773 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 404.971584][ T5773] cgroup: Unknown subsys name 'net' [ 404.978919][ T42] audit: type=1400 audit(1783293192.946:143): avc: denied { unmount } for pid=5773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 405.125104][ T5773] cgroup: Unknown subsys name 'cpuset' [ 405.131424][ T5773] cgroup: Unknown subsys name 'rlimit' [ 405.317022][ T42] audit: type=1400 audit(1783293193.286:144): avc: denied { setattr } for pid=5773 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 405.326446][ T42] audit: type=1400 audit(1783293193.286:145): avc: denied { create } for pid=5773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.335147][ T42] audit: type=1400 audit(1783293193.286:146): avc: denied { write } for pid=5773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.343558][ T42] audit: type=1400 audit(1783293193.286:147): avc: denied { read } for pid=5773 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.396100][ T5776] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 406.525217][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 411.149344][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 411.149361][ T42] audit: type=1400 audit(1783293199.116:158): avc: denied { execmem } for pid=5781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 411.370904][ T42] audit: type=1400 audit(1783293199.346:159): avc: denied { create } for pid=5784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.378412][ T42] audit: type=1400 audit(1783293199.346:160): avc: denied { read write } for pid=5784 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 411.390994][ T42] audit: type=1400 audit(1783293199.346:161): avc: denied { open } for pid=5785 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 411.398693][ T42] audit: type=1400 audit(1783293199.356:162): avc: denied { ioctl } for pid=5785 comm="syz-executor" path="socket:[3027]" dev="sockfs" ino=3027 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.415263][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.420470][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.424621][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.430758][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.431138][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.434707][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.437607][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.441229][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.442522][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.442769][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.444372][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.444405][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.444915][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.444928][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.445229][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.448245][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.454156][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.455606][ T42] audit: type=1400 audit(1783293199.426:163): avc: denied { read } for pid=5790 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 411.458065][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.458553][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.459768][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.461034][ T42] audit: type=1400 audit(1783293199.426:164): avc: denied { open } for pid=5790 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 411.486107][ T42] audit: type=1400 audit(1783293199.426:165): avc: denied { mounton } for pid=5790 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 411.497422][ T42] audit: type=1400 audit(1783293199.426:166): avc: denied { module_request } for pid=5790 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 411.503784][ T42] audit: type=1400 audit(1783293199.446:167): avc: denied { sys_module } for pid=5790 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 412.072922][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.076127][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.079198][ T5790] bridge_slave_0: entered allmulticast mode [ 412.083518][ T5790] bridge_slave_0: entered promiscuous mode [ 412.089454][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.092534][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.095576][ T5790] bridge_slave_1: entered allmulticast mode [ 412.099457][ T5790] bridge_slave_1: entered promiscuous mode [ 412.142390][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.175173][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.251021][ T5790] team0: Port device team_slave_0 added [ 412.277876][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.280890][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.284188][ T5784] bridge_slave_0: entered allmulticast mode [ 412.287006][ T5784] bridge_slave_0: entered promiscuous mode [ 412.303762][ T5790] team0: Port device team_slave_1 added [ 412.328028][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.330782][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.334090][ T5784] bridge_slave_1: entered allmulticast mode [ 412.337569][ T5784] bridge_slave_1: entered promiscuous mode [ 412.380060][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.383282][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.386404][ T5796] bridge_slave_0: entered allmulticast mode [ 412.390797][ T5796] bridge_slave_0: entered promiscuous mode [ 412.396109][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.399449][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.409503][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.415233][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.418209][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.421387][ T5785] bridge_slave_0: entered allmulticast mode [ 412.425248][ T5785] bridge_slave_0: entered promiscuous mode [ 412.442493][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.446530][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.449158][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.451785][ T5796] bridge_slave_1: entered allmulticast mode [ 412.455665][ T5796] bridge_slave_1: entered promiscuous mode [ 412.469795][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.472749][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.482779][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.495449][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.498618][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.501190][ T5785] bridge_slave_1: entered allmulticast mode [ 412.504093][ T5785] bridge_slave_1: entered promiscuous mode [ 412.515458][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.531909][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.537879][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.559554][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.564496][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.604368][ T5784] team0: Port device team_slave_0 added [ 412.617510][ T5784] team0: Port device team_slave_1 added [ 412.634443][ T5796] team0: Port device team_slave_0 added [ 412.642324][ T5790] hsr_slave_0: entered promiscuous mode [ 412.644776][ T5790] hsr_slave_1: entered promiscuous mode [ 412.648108][ T5785] team0: Port device team_slave_0 added [ 412.659535][ T5785] team0: Port device team_slave_1 added [ 412.662927][ T5796] team0: Port device team_slave_1 added [ 412.665939][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.668190][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.676333][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.686987][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.689201][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.697042][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.751752][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.754624][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.765286][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.791046][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.794128][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.805686][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.811309][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.813878][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.823875][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.835973][ T5784] hsr_slave_0: entered promiscuous mode [ 412.838863][ T5784] hsr_slave_1: entered promiscuous mode [ 412.842578][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 412.845493][ T5784] Cannot create hsr debugfs directory [ 412.848355][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.851143][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.860546][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.974187][ T5785] hsr_slave_0: entered promiscuous mode [ 412.977272][ T5785] hsr_slave_1: entered promiscuous mode [ 412.980414][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 412.982842][ T5785] Cannot create hsr debugfs directory [ 413.010226][ T5796] hsr_slave_0: entered promiscuous mode [ 413.013386][ T5796] hsr_slave_1: entered promiscuous mode [ 413.016773][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 413.019170][ T5796] Cannot create hsr debugfs directory [ 413.243625][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 413.252375][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.270949][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 413.277998][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.312279][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 413.318266][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.339887][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 413.345595][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.383786][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.390343][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.393953][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.400554][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.407536][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.411792][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.414305][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.418515][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.471079][ T5792] Bluetooth: hci2: command tx timeout [ 413.471083][ T5090] Bluetooth: hci0: command tx timeout [ 413.471300][ T5797] Bluetooth: hci3: command tx timeout [ 413.474350][ T5795] Bluetooth: hci1: command tx timeout [ 413.505154][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.512792][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.516441][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.521462][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.526185][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.531580][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.534433][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.538557][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.611479][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 413.617599][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.621707][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 413.628600][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.632839][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 413.639092][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.656317][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 413.661067][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.684482][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.731550][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.742235][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.758437][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.761527][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.778540][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.781315][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.803156][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.816484][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.819627][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.822474][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.832214][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.835044][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.884618][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.889685][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.917196][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.919814][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.936860][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.951863][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.954976][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.962489][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.965558][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.980684][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.982991][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.218541][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.282970][ T5790] veth0_vlan: entered promiscuous mode [ 414.293781][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.305730][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.314017][ T5790] veth1_vlan: entered promiscuous mode [ 414.371326][ T5790] veth0_macvtap: entered promiscuous mode [ 414.381996][ T5790] veth1_macvtap: entered promiscuous mode [ 414.390505][ T5784] veth0_vlan: entered promiscuous mode [ 414.409412][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.416969][ T5784] veth1_vlan: entered promiscuous mode [ 414.426393][ T5796] veth0_vlan: entered promiscuous mode [ 414.432677][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.446673][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.466021][ T5866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.471540][ T5866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.478852][ T5796] veth1_vlan: entered promiscuous mode [ 414.484998][ T5866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.487865][ T5866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.523344][ T5784] veth0_macvtap: entered promiscuous mode [ 414.534982][ T5784] veth1_macvtap: entered promiscuous mode [ 414.555113][ T5785] veth0_vlan: entered promiscuous mode [ 414.569759][ T5796] veth0_macvtap: entered promiscuous mode [ 414.583317][ T5806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.587148][ T5806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.598204][ T5796] veth1_macvtap: entered promiscuous mode [ 414.614852][ T5785] veth1_vlan: entered promiscuous mode [ 414.619449][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.635949][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.642269][ T5806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.645467][ T5806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.653094][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.661869][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.665574][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.673650][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.676647][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.681059][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.691257][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.698917][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.702495][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.715889][ T5785] veth0_macvtap: entered promiscuous mode [ 414.716558][ T5790] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 414.721360][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.756511][ T5785] veth1_macvtap: entered promiscuous mode [ 414.792998][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.797118][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.804040][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.836613][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.839520][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.843634][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.877076][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.879824][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.880658][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.899629][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.904014][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.914301][ T5942] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5'. [ 414.914340][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.917344][ T5806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.917361][ T5806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.936912][ T5942] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 414.940495][ T5942] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 414.944705][ T5942] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 414.947733][ T5942] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 415.023890][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.029276][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.067050][ T5806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.074887][ T5806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.122559][ T5959] syzkaller0: entered promiscuous mode [ 415.124420][ T5959] syzkaller0: entered allmulticast mode [ 415.131050][ T5958] tipc: Started in network mode [ 415.133547][ T5958] tipc: Node identity 823975c0c6ad, cluster identity 4711 [ 415.136706][ T5958] tipc: Enabled bearer , priority 0 [ 415.145698][ T5951] tipc: Resetting bearer [ 415.161520][ T5951] tipc: Disabling bearer [ 415.186439][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7'. [ 415.205227][ T5966] evm: overlay not supported [ 415.383056][ T5980] netlink: 'syz.2.11': attribute type 18 has an invalid length. [ 415.386666][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 415.386974][ T5978] program syz.3.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.396783][ T5977] program syz.3.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.416157][ T5980] netlink: 'syz.2.11': attribute type 18 has an invalid length. [ 415.416967][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.418679][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 415.421971][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.429952][ T5980] Zero length message leads to an empty skb [ 415.430576][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.435291][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.447510][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 415.452133][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 415.507469][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14'. [ 415.550193][ T5795] Bluetooth: hci3: command tx timeout [ 415.550260][ T5797] Bluetooth: hci1: command tx timeout [ 415.550950][ T5792] Bluetooth: hci0: command tx timeout [ 415.550970][ T5792] Bluetooth: hci2: command tx timeout [ 415.615812][ T5996] fuse: Unknown parameter 'user_id78' [ 415.640395][ T5888] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 415.765862][ T6002] kvm: pic: non byte write [ 415.791205][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 415.796511][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.801991][ T5888] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 415.806172][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.815265][ T5888] usb 6-1: config 0 descriptor?? [ 415.826422][ T6007] dns_resolver: Unsupported content type (234) [ 415.833986][ T6007] netlink: 'syz.2.21': attribute type 2 has an invalid length. [ 415.983097][ T6018] 9p: Bad value for 'rfdno' [ 416.051443][ T5888] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 416.203871][ T42] kauditd_printk_skb: 102 callbacks suppressed [ 416.203889][ T42] audit: type=1400 audit(1783293204.166:270): avc: denied { create } for pid=6027 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 416.253431][ T9] usb 6-1: USB disconnect, device number 2 [ 416.271119][ T42] audit: type=1400 audit(1783293204.246:271): avc: denied { setopt } for pid=6027 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 416.303621][ T42] audit: type=1400 audit(1783293204.256:272): avc: denied { ioctl } for pid=6027 comm="syz.2.30" path="socket:[11665]" dev="sockfs" ino=11665 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 416.776942][ T42] audit: type=1400 audit(1783293204.746:273): avc: denied { watch } for pid=6034 comm="syz.0.31" path="/8" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 416.911289][ T6037] kvm: user requested TSC rate below hardware speed [ 416.980866][ T6038] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 417.630720][ T5090] Bluetooth: hci2: command tx timeout [ 417.630930][ T5795] Bluetooth: hci0: command tx timeout [ 417.632876][ T5797] Bluetooth: hci1: command tx timeout [ 417.641510][ T5795] Bluetooth: hci3: command tx timeout [ 417.678034][ T42] audit: type=1400 audit(1783293205.646:274): avc: denied { open } for pid=6049 comm="syz.2.36" path="/dev/ptyq8" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 417.712761][ T6053] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 417.717767][ T6053] netlink: 756 bytes leftover after parsing attributes in process `syz.0.37'. [ 417.723750][ T42] audit: type=1800 audit(1783293205.696:275): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.37" name="file0" dev="overlay" ino=94 res=0 errno=0 [ 417.769441][ T6055] xt_hashlimit: size too large, truncated to 1048576 [ 417.909324][ T42] audit: type=1400 audit(1783293205.876:276): avc: denied { name_bind } for pid=6058 comm="syz.2.39" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 417.970392][ T56] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 418.061096][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 418.076789][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 418.119774][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 418.125565][ T56] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.129533][ T56] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.133022][ T56] usb 5-1: config 0 interface 0 has no altsetting 0 [ 418.135156][ T56] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 418.138044][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.144208][ T56] usb 5-1: config 0 descriptor?? [ 418.329100][ T42] audit: type=1400 audit(1783293206.296:277): avc: denied { read } for pid=6065 comm="syz.2.41" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.336463][ T6066] syz.2.41: vmalloc error: size 3853062144, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 418.347908][ T42] audit: type=1400 audit(1783293206.296:278): avc: denied { open } for pid=6065 comm="syz.2.41" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.353585][ T6066] CPU: 3 UID: 0 PID: 6066 Comm: syz.2.41 Not tainted syzkaller #0 PREEMPT(full) [ 418.353610][ T6066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 418.353621][ T6066] Call Trace: [ 418.353663][ T6066] [ 418.353670][ T6066] dump_stack_lvl+0x100/0x190 [ 418.353703][ T6066] warn_alloc.cold+0x94/0xa8 [ 418.353723][ T6066] ? __pfx_warn_alloc+0x10/0x10 [ 418.353756][ T6066] ? kasan_save_stack+0x3f/0x50 [ 418.353776][ T6066] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 418.353803][ T6066] ? vb2_vmalloc_alloc+0xf9/0x410 [ 418.353827][ T6066] ? __vb2_queue_alloc+0x8d5/0x1160 [ 418.353849][ T6066] ? vb2_core_create_bufs+0x5fa/0xa30 [ 418.353871][ T6066] ? vb2_create_bufs+0x40c/0x830 [ 418.353889][ T6066] ? v4l_create_bufs+0x17d/0x270 [ 418.353915][ T6066] ? __video_do_ioctl+0xb2a/0xdf0 [ 418.353931][ T6066] ? video_usercopy+0x47a/0x1730 [ 418.353949][ T6066] ? __x64_sys_ioctl+0x18e/0x210 [ 418.353973][ T6066] ? do_syscall_64+0x115/0x870 [ 418.353999][ T6066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.354028][ T6066] ? vb2_vmalloc_alloc+0x135/0x410 [ 418.354055][ T6066] __vmalloc_node_range_noprof+0x136c/0x1630 [ 418.354091][ T6066] ? vb2_vmalloc_alloc+0x135/0x410 [ 418.354125][ T6066] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 418.354155][ T6066] ? kasan_save_track+0x14/0x30 [ 418.354174][ T6066] ? __kasan_kmalloc+0xaa/0xb0 [ 418.354194][ T6066] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 418.354223][ T6066] ? vb2_vmalloc_alloc+0x135/0x410 [ 418.354249][ T6066] vmalloc_user_noprof+0x9e/0xe0 [ 418.354273][ T6066] ? vb2_vmalloc_alloc+0x135/0x410 [ 418.354298][ T6066] vb2_vmalloc_alloc+0x135/0x410 [ 418.354321][ T6066] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 418.354365][ T6066] __vb2_queue_alloc+0x8d5/0x1160 [ 418.354400][ T6066] vb2_core_create_bufs+0x5fa/0xa30 [ 418.354427][ T6066] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 418.354458][ T6066] ? trace_contention_end+0x126/0x160 [ 418.354482][ T6066] ? __mutex_lock+0x26d/0x1bd0 [ 418.354511][ T6066] vb2_create_bufs+0x40c/0x830 [ 418.354537][ T6066] ? __pfx_vb2_create_bufs+0x10/0x10 [ 418.354559][ T6066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 418.354581][ T6066] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 418.354604][ T6066] v4l_create_bufs+0x17d/0x270 [ 418.354635][ T6066] __video_do_ioctl+0xb2a/0xdf0 [ 418.354657][ T6066] ? __might_fault+0xc5/0x140 [ 418.354684][ T6066] ? __pfx___video_do_ioctl+0x10/0x10 [ 418.354713][ T6066] video_usercopy+0x47a/0x1730 [ 418.354733][ T6066] ? __pfx___video_do_ioctl+0x10/0x10 [ 418.354752][ T6066] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 418.354782][ T6066] ? __pfx_video_usercopy+0x10/0x10 [ 418.354817][ T6066] v4l2_ioctl+0x1bd/0x250 [ 418.354837][ T6066] ? __pfx_v4l2_ioctl+0x10/0x10 [ 418.354858][ T6066] __x64_sys_ioctl+0x18e/0x210 [ 418.354883][ T6066] do_syscall_64+0x115/0x870 [ 418.354907][ T6066] ? clear_bhb_loop+0x40/0x90 [ 418.354931][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.354949][ T6066] RIP: 0033:0x7fc554f9de59 [ 418.354965][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.354982][ T6066] RSP: 002b:00007fc555e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.355002][ T6066] RAX: ffffffffffffffda RBX: 00007fc555225fa0 RCX: 00007fc554f9de59 [ 418.355021][ T6066] RDX: 0000200000002300 RSI: 00000000c100565c RDI: 0000000000000006 [ 418.355033][ T6066] RBP: 00007fc555033e6f R08: 0000000000000000 R09: 0000000000000000 [ 418.355044][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.355054][ T6066] R13: 00007fc555226038 R14: 00007fc555225fa0 R15: 00007fff56c34148 [ 418.355078][ T6066] [ 418.359138][ T6066] Mem-Info: [ 418.364094][ T42] audit: type=1400 audit(1783293206.296:279): avc: denied { ioctl } for pid=6065 comm="syz.2.41" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.370646][ T6066] active_anon:8674 inactive_anon:0 isolated_anon:0 [ 418.370646][ T6066] active_file:51 inactive_file:60952 isolated_file:0 [ 418.370646][ T6066] unevictable:1768 dirty:1863 writeback:0 [ 418.370646][ T6066] slab_reclaimable:11673 slab_unreclaimable:65991 [ 418.370646][ T6066] mapped:24559 shmem:2324 pagetables:1574 [ 418.370646][ T6066] sec_pagetables:296 bounce:0 [ 418.370646][ T6066] kernel_misc_reclaimable:0 [ 418.370646][ T6066] free:318525 free_pcp:16626 free_cma:0 [ 418.512311][ T6066] Node 0 active_anon:34580kB inactive_anon:0kB active_file:204kB inactive_file:243504kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98236kB dirty:7436kB writeback:0kB shmem:5748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12672kB pagetables:4592kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 418.523998][ T6066] Node 1 active_anon:5448kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5208kB dirty:16kB writeback:0kB shmem:8756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:192kB pagetables:9392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 418.535989][ T6066] Node 0 DMA free:5196kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:124kB free_cma:0kB [ 418.546798][ T6066] lowmem_reserve[]: 0 1226 1226 1226 1226 [ 418.548771][ T6066] Node 0 DMA32 free:33156kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34576kB inactive_anon:0kB active_file:204kB inactive_file:243504kB unevictable:3536kB writepending:7436kB zspages:0kB present:2080628kB managed:1255452kB mlocked:0kB bounce:0kB free_pcp:25696kB local_pcp:2560kB free_cma:0kB [ 418.560070][ T6066] lowmem_reserve[]: 0 0 0 0 0 [ 418.561557][ T6066] Node 1 Normal free:1223024kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8300kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:3536kB writepending:16kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:37212kB local_pcp:1720kB free_cma:0kB [ 418.571261][ T6066] lowmem_reserve[]: 0 0 0 0 0 [ 418.572743][ T6066] Node 0 DMA: 3*4kB (UM) 2*8kB (M) 3*16kB (UM) 2*32kB (M) 3*64kB (UM) 2*128kB (M) 2*256kB (M) 2*512kB (M) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 5196kB [ 418.577359][ T6066] Node 0 DMA32: 94*4kB (UM) 56*8kB (UME) 35*16kB (UME) 34*32kB (UME) 32*64kB (UME) 17*128kB (UME) 9*256kB (UM) 6*512kB (ME) 7*1024kB (UM) 3*2048kB (M) 2*4096kB (M) = 33576kB [ 418.583833][ T6066] Node 1 Normal: 2*4kB (UE) 2*8kB (UM) 2*16kB (ME) 1*32kB (M) 2*64kB (UE) 2*128kB (UM) 3*256kB (UME) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 295*4096kB (M) = 1213656kB [ 418.585493][ T56] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 418.589932][ T6066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.589950][ T6066] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.589965][ T6066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.589979][ T6066] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.589993][ T6066] 65710 total pagecache pages [ 418.590007][ T6066] 0 pages in swap cache [ 418.590012][ T6066] Free swap = 124996kB [ 418.590019][ T6066] Total swap = 124996kB [ 418.590026][ T6066] 1048443 pages RAM [ 418.590032][ T6066] 0 pages HighMem/MovableOnly [ 418.590039][ T6066] 285269 pages reserved [ 418.590045][ T6066] 0 pages cma reserved [ 418.624043][ T56] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 418.626339][ T56] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 418.629137][ T56] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 418.631605][ T56] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 418.634344][ T56] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 418.688040][ T6075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.702603][ T6075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.767986][ T56] usb 5-1: USB disconnect, device number 2 [ 418.888824][ T6087] netlink: 'syz.3.48': attribute type 1 has an invalid length. [ 418.904003][ T6089] syz.1.47 uses obsolete (PF_INET,SOCK_PACKET) [ 418.952435][ T6090] gretap1: entered promiscuous mode [ 419.264736][ T6112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6112 comm=syz.2.55 [ 419.274889][ T6112] syz_tun: entered allmulticast mode [ 419.569855][ T5945] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 419.570996][ T6124] unsupported nlmsg_type 40 [ 419.614420][ T6129] tmpfs: Cannot change global quota limit on remount [ 419.642911][ T6132] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 419.711359][ T5795] Bluetooth: hci3: command tx timeout [ 419.712726][ T5797] Bluetooth: hci0: command tx timeout [ 419.712801][ T5090] Bluetooth: hci1: command tx timeout [ 419.712830][ T5090] Bluetooth: hci2: command tx timeout [ 419.727576][ T6132] netlink: 'syz.3.62': attribute type 15 has an invalid length. [ 419.728706][ T6134] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 419.730405][ T5945] usb 7-1: Using ep0 maxpacket: 8 [ 419.730434][ T6132] netlink: 'syz.3.62': attribute type 18 has an invalid length. [ 419.735932][ T5945] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 419.741553][ T5945] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.746295][ T5945] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.751310][ T5945] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.755921][ T5945] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.761713][ T5945] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.765619][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.820674][ T6134] binder: 6133:6134 ioctl 8008662c 200000000080 returned -22 [ 419.964062][ T6146] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 419.967634][ T6146] block device autoloading is deprecated and will be removed. [ 419.978961][ T5945] usb 7-1: GET_CAPABILITIES returned 0 [ 419.982508][ T5945] usbtmc 7-1:16.0: can't read capabilities [ 420.091386][ T6152] __nla_validate_parse: 14 callbacks suppressed [ 420.091397][ T6152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.67'. [ 420.128660][ T6154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 420.180912][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.186839][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.255895][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.261515][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.421294][ T6168] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 420.421338][ T6169] netlink: 'syz.0.72': attribute type 10 has an invalid length. [ 420.433951][ T6168] team0 (unregistering): Port device team_slave_0 removed [ 420.441184][ T6168] team0 (unregistering): Port device team_slave_1 removed [ 420.683252][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 420.696190][ T5944] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.696322][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 420.701096][ T5944] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.707786][ T5944] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.713577][ T5944] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.769851][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 420.847739][ T6199] loop6: detected capacity change from 0 to 7 [ 420.858649][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.862643][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.868035][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.871963][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.876052][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.879499][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.882277][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.886123][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.890188][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.893975][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.897316][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.900836][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.905452][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.907964][ T6202] capability: warning: `syz.1.82' uses deprecated v2 capabilities in a way that may be insecure [ 420.909142][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.909794][ T50] usb 8-1: device descriptor read/64, error -71 [ 420.915026][ T6199] ldm_validate_partition_table(): Disk read failed. [ 420.929153][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.932528][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.935185][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.939033][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.943185][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.947122][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.950697][ T6199] Dev loop6: unable to read RDB block 0 [ 420.954551][ T6199] loop6: unable to read partition table [ 420.956447][ T6199] loop6: partition table beyond EOD, truncated [ 420.958741][ T6199] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 421.151148][ T50] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 421.294339][ T6214] netlink: 'syz.1.87': attribute type 20 has an invalid length. [ 421.297092][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 421.301026][ T50] usb 8-1: device descriptor read/64, error -71 [ 421.421399][ T50] usb usb8-port1: attempt power cycle [ 421.759808][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 421.780273][ T50] usb 8-1: device descriptor read/8, error -71 [ 421.790310][ T5797] Bluetooth: hci2: command tx timeout [ 421.821328][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 421.821339][ T42] audit: type=1400 audit(1783293209.796:338): avc: denied { create } for pid=6221 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 421.831194][ T42] audit: type=1400 audit(1783293209.796:339): avc: denied { write } for pid=6221 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 421.938622][ T42] audit: type=1400 audit(1783293209.906:340): avc: denied { create } for pid=6227 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 422.039923][ T50] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 422.060434][ T50] usb 8-1: device descriptor read/8, error -71 [ 422.125849][ T42] audit: type=1400 audit(1783293210.096:341): avc: denied { ioctl } for pid=6235 comm="syz.0.93" path="socket:[10029]" dev="sockfs" ino=10029 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 422.134506][ T42] audit: type=1400 audit(1783293210.096:342): avc: denied { ioctl } for pid=6235 comm="syz.0.93" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 422.145862][ T42] audit: type=1400 audit(1783293210.106:343): avc: denied { map } for pid=6235 comm="syz.0.93" path="pipe:[10030]" dev="pipefs" ino=10030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 422.154151][ T42] audit: type=1400 audit(1783293210.106:344): avc: denied { ioctl } for pid=6235 comm="syz.0.93" path="socket:[10031]" dev="sockfs" ino=10031 ioctlcmd=0x5322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 422.170452][ T50] usb usb8-port1: unable to enumerate USB device [ 422.177373][ T42] audit: type=1400 audit(1783293210.146:345): avc: denied { getopt } for pid=6237 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.185274][ T42] audit: type=1400 audit(1783293210.146:346): avc: denied { listen } for pid=6237 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.237742][ T42] audit: type=1400 audit(1783293210.206:347): avc: denied { create } for pid=6241 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.345842][ T50] usb 7-1: USB disconnect, device number 2 [ 422.475770][ T6268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.613870][ T6268] gfs2: error -5 reading superblock [ 423.053628][ T6291] openvswitch: netlink: Key type 168 is out of range max 32 [ 423.177248][ T6296] capability: warning: `syz.2.110' uses 32-bit capabilities (legacy support in use) [ 423.229764][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 423.394948][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 423.401675][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 423.405068][ T50] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 423.407588][ T50] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 423.410459][ T50] usb 5-1: config 14 has no interface number 0 [ 423.412857][ T50] usb 5-1: config 14 has no interface number 1 [ 423.414919][ T50] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 423.418886][ T50] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 423.422899][ T50] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 423.426537][ T50] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 423.434428][ T50] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 423.438339][ T50] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.443142][ T50] usb 5-1: config 14 interface 57 has no altsetting 0 [ 423.445675][ T50] usb 5-1: config 14 interface 228 has no altsetting 0 [ 423.450992][ T50] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 423.454053][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.456593][ T50] usb 5-1: Product: syz [ 423.457927][ T50] usb 5-1: Manufacturer: syz [ 423.459496][ T50] usb 5-1: SerialNumber: syz [ 423.536637][ T5913] Bluetooth: hci4: Frame reassembly failed (-84) [ 423.544177][ T6321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 423.548071][ T6321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 423.599400][ T6315] tipc: Started in network mode [ 423.603447][ T6315] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 423.605199][ T6324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.118'. [ 423.605814][ T6315] tipc: Enabled bearer , priority 0 [ 423.617287][ T6324] SELinux: Context system_u:object_r:semanage_trans_lock_t:s0 is not valid (left unmapped). [ 423.869869][ T5792] Bluetooth: hci2: command tx timeout [ 423.877879][ T50] legousbtower 5-1:14.57: interrupt endpoints not found [ 424.279876][ T50] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 193.139 build 21457 [ 424.284566][ T50] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 424.295573][ T6351] qnx4: no qnx4 filesystem (no root dir). [ 424.390840][ T6355] overlayfs: statfs failed on './file0' [ 424.576441][ T6359] input: syz0 as /devices/virtual/input/input6 [ 424.677969][ T6368] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 424.731400][ T5874] tipc: Node number set to 11578026 [ 424.751257][ T6375] tmpfs: Cannot disable swap on remount [ 425.191256][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.194991][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.549742][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 425.549775][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 425.826935][ T6396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6396 comm=syz.2.138 [ 425.830866][ T6396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6396 comm=syz.2.138 [ 425.962912][ T6400] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001 [ 425.967446][ T6400] x_tables: duplicate underflow at hook 2 [ 426.078174][ T6404] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 426.081553][ T6404] overlayfs: failed to set xattr on upper [ 426.083941][ T6404] overlayfs: ...falling back to redirect_dir=nofollow. [ 426.086988][ T6404] overlayfs: ...falling back to metacopy=off. [ 426.089504][ T6404] overlayfs: ...falling back to index=off. [ 426.092968][ T6404] overlayfs: ...falling back to uuid=null. [ 426.267639][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 426.419160][ T50] usb 5-1: USB disconnect, device number 3 [ 426.429961][ T50] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 426.492116][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.154'. [ 426.513569][ T6437] netlink: 64 bytes leftover after parsing attributes in process `syz.2.150'. [ 426.517885][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 426.530200][ T6430] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 426.789557][ T6457] trusted_key: syz.1.160 sent an empty control message without MSG_MORE. [ 426.856016][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 426.859332][ T6463] netlink: 'syz.1.164': attribute type 6 has an invalid length. [ 426.863535][ T6459] process 'syz.2.161' launched '/dev/fd/3' with NULL argv: empty string added [ 426.863584][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 426.874711][ T42] kauditd_printk_skb: 82 callbacks suppressed [ 426.874722][ T42] audit: type=1400 audit(1783293214.846:430): avc: denied { execute_no_trans } for pid=6458 comm="syz.2.161" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 426.892576][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 426.896578][ T6465] netlink: 'syz.3.163': attribute type 6 has an invalid length. [ 426.899761][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 426.912461][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 426.913701][ T5944] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.916168][ T6465] netlink: 'syz.3.163': attribute type 6 has an invalid length. [ 426.920072][ T5944] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.922332][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 426.927545][ T5944] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.932385][ T5944] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.944032][ T6463] netlink: 'syz.1.164': attribute type 6 has an invalid length. [ 426.992664][ T42] audit: type=1400 audit(1783293214.966:431): avc: denied { write } for pid=6468 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 427.067267][ T42] audit: type=1400 audit(1783293215.036:432): avc: denied { mount } for pid=6474 comm="syz.0.169" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 427.069096][ T6476] usb usb8: usbfs: process 6476 (syz.1.170) did not claim interface 0 before use [ 427.082342][ T42] audit: type=1400 audit(1783293215.046:433): avc: denied { watch } for pid=6474 comm="syz.0.169" path="/44/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 427.088199][ T6476] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 427.162136][ T42] audit: type=1400 audit(1783293215.136:434): avc: denied { unmount } for pid=5790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 427.172950][ T42] audit: type=1400 audit(1783293215.136:435): avc: denied { create } for pid=6485 comm="syz.3.173" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 427.186550][ T42] audit: type=1400 audit(1783293215.136:436): avc: denied { link } for pid=6485 comm="syz.3.173" name="#d" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 427.193796][ T42] audit: type=1400 audit(1783293215.146:437): avc: denied { rename } for pid=6485 comm="syz.3.173" name="#e" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 427.237344][ T6493] netlink: 'syz.0.175': attribute type 6 has an invalid length. [ 427.263988][ T5944] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.264120][ T6493] netlink: 'syz.0.175': attribute type 6 has an invalid length. [ 427.271047][ T5944] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.277263][ T5944] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.281122][ T5944] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.367759][ T42] audit: type=1400 audit(1783293215.336:438): avc: denied { unmount } for pid=5784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 427.398843][ T6507] fuse: Bad value for 'rootmode' [ 427.430519][ T42] audit: type=1400 audit(1783293215.406:439): avc: denied { write } for pid=6510 comm="syz.1.183" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 427.685997][ T6533] xt_l2tp: missing protocol rule (udp|l2tpip) [ 427.878376][ T6544] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 427.898515][ T6544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.938723][ T6544] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 427.943147][ T6544] dummy0: entered promiscuous mode [ 428.182644][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x4 [ 428.209237][ T6567] nfs4: Unknown parameter '/bus' [ 428.213085][ T6560] ucma_write: process 116 (syz.1.198) changed security contexts after opening file descriptor, this is not allowed. [ 428.255403][ T6570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6570 comm=syz.1.202 [ 428.259244][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6571 comm=syz.1.202 [ 428.285985][ T6571] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 428.292497][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.297059][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.315389][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.318555][ T6571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.322853][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.325983][ T6571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.333915][ T6571] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 428.352240][ T6573] ip6gretap0: entered promiscuous mode [ 428.554131][ T6588] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 428.619414][ T6575] fuse: Unknown parameter 'fdR|' [ 428.714148][ T6601] Invalid argument reading file caps for ./file0 [ 428.765839][ T6604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6604 comm=syz.2.211 [ 428.773366][ T6603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6603 comm=syz.2.211 [ 428.795787][ T6613] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 429.005050][ T6632] fuse: Unknown parameter 'd' [ 429.007422][ T6632] fuse: Bad value for 'rootmode' qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 429.059144][ T6630] SELinux: failed to load policy [ 429.207455][ T6638] ======================================================= [ 429.207455][ T6638] WARNING: The mand mount option has been deprecated and [ 429.207455][ T6638] and is ignored by this kernel. Remove the mand [ 429.207455][ T6638] option from the mount to silence this warning. [ 429.207455][ T6638] ======================================================= [ 429.219522][ T6638] 9pnet_virtio: no channels available for device syz [ 429.301044][ T6643] Cannot find add_set index 0 as target [ 429.313052][ T6643] batman_adv: batadv0: Adding interface: dummy0 [ 429.315148][ T6643] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.323918][ T6643] batman_adv: batadv0: Interface activated: dummy0 [ 429.335592][ T6643] batadv0: mtu less than device minimum [ 429.337971][ T6643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.342339][ T6643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.345984][ T6643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.350342][ T6643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.354037][ T6643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.358426][ T6643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.362151][ T6643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.366491][ T6643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 429.402904][ T6643] xt_cluster: node mask cannot exceed total number of nodes [ 429.563699][ T6648] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 429.640819][ T6665] netlink: 'syz.2.222': attribute type 18 has an invalid length. [ 429.803859][ T6678] Invalid source name [ 429.805799][ T6678] UBIFS error (pid: 6678): cannot open "ubifs", error -22 [ 429.824138][ T6675] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 430.070174][ T848] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 430.229777][ T848] usb 5-1: Using ep0 maxpacket: 8 [ 430.234477][ T848] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.238664][ T848] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.242393][ T848] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.245636][ T848] usb 5-1: config 0 interface 0 has no altsetting 0 [ 430.247865][ T848] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 430.251582][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.266387][ T848] usb 5-1: config 0 descriptor?? [ 430.481442][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.492035][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.613175][ T6726] binder: 6723:6726 ioctl c0306201 2000000001c0 returned -22 [ 430.711595][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.714230][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.716645][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.719617][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.722807][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.725548][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.728193][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.730876][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.733552][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.735856][ T848] appleir 0003:05AC:8240.0003: unknown main item tag 0x0 [ 430.743724][ T848] input: HID 05ac:8240 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:05AC:8240.0003/input/input7 [ 430.861678][ T848] appleir 0003:05AC:8240.0003: input,hiddev0,hidraw1: USB HID v7f.fd Device [HID 05ac:8240] on usb-dummy_hcd.0-1/input0 [ 431.066717][ T1046] usb 5-1: USB disconnect, device number 4 [ 431.076261][ T6735] loop6: detected capacity change from 0 to 8 [ 431.130948][ T6735] loop6: detected capacity change from 8 to 7 [ 431.135967][ C3] blk_print_req_error: 10 callbacks suppressed [ 431.135977][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.140945][ C3] buffer_io_error: 10 callbacks suppressed [ 431.140954][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.164637][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.167589][ T6740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16400 sclass=netlink_xfrm_socket pid=6740 comm=syz.2.252 [ 431.167855][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.176778][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.180258][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.183359][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.186751][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.189465][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.192314][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.194888][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.198011][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.201055][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.204535][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.207313][ T6735] ldm_validate_partition_table(): Disk read failed. [ 431.209850][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.212687][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.215307][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.218600][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.222002][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.225368][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.228780][ T6735] Dev loop6: unable to read RDB block 0 [ 431.233440][ T6735] loop6: unable to read partition table [ 431.235936][ T6735] loop6: partition table beyond EOD, truncated [ 431.238500][ T6735] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 431.238500][ T6735] 咁, priority 0 [ 432.897764][ T6786] syzkaller0: entered promiscuous mode [ 432.899880][ T6786] syzkaller0: entered allmulticast mode [ 432.902670][ T6786] tipc: Resetting bearer [ 432.910484][ T42] audit: type=1400 audit(1783293220.876:487): avc: denied { relabelfrom } for pid=6785 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 432.911421][ T6786] tipc: Resetting bearer [ 432.918090][ T42] audit: type=1400 audit(1783293220.886:488): avc: denied { relabelto } for pid=6785 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 432.928559][ T6786] tipc: Resetting bearer [ 432.935197][ T6786] __nla_validate_parse: 18 callbacks suppressed [ 432.935207][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 432.940384][ T6786] tipc: Resetting bearer [ 433.205657][ T42] audit: type=1400 audit(1783293221.176:489): avc: denied { getopt } for pid=6791 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 433.214047][ T42] audit: type=1400 audit(1783293221.186:490): avc: denied { nlmsg_read } for pid=6791 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 433.222082][ T42] audit: type=1400 audit(1783293221.186:491): avc: denied { listen } for pid=6791 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 433.228709][ T42] audit: type=1400 audit(1783293221.186:492): avc: denied { create } for pid=6791 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 433.265726][ T42] audit: type=1400 audit(1783293221.236:493): avc: denied { write } for pid=6791 comm="syz.2.269" path="socket:[15098]" dev="sockfs" ino=15098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 433.309119][ T42] audit: type=1400 audit(1783293221.276:494): avc: denied { accept } for pid=6791 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 434.006330][ T6786] tipc: Disabling bearer [ 434.015146][ T5888] tipc: Node number set to 3019262361 [ 434.104023][ T42] audit: type=1400 audit(1783293222.066:495): avc: denied { map } for pid=6802 comm="syz.0.272" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 434.392295][ T6826] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 434.413585][ T6826] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 434.423165][ T6826] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 434.432717][ T6826] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 434.443669][ T6826] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 434.454177][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'. [ 434.559168][ T6850] net_ratelimit: 11 callbacks suppressed [ 434.559191][ T6850] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 434.565537][ T6850] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 434.568538][ T6850] tipc: Enabled bearer , priority 10 [ 434.700051][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 434.703207][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 434.891200][ T6873] nfs: Unknown parameter 'fsc[>(_T>S`>+&]v(Ϟaj' [ 434.969832][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 434.972611][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 434.979858][ T5938] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 435.143748][ T5938] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.150147][ T5938] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 435.159759][ T5938] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.170441][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.181155][ T6864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 435.207856][ T5938] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.421862][ T6898] binder: 6896:6898 ioctl 8040450a 200000000000 returned -22 [ 435.425442][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 435.509786][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 435.512467][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 435.537879][ T6906] validate_nla: 2 callbacks suppressed [ 435.537896][ T6906] netlink: 'syz.0.305': attribute type 6 has an invalid length. [ 435.544398][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 435.599845][ T6910] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 435.611667][ T6910] bond1: option mode: invalid value (10) [ 435.614650][ T6910] bond1 (unregistering): Released all slaves [ 435.651233][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'. [ 435.701180][ T6910] netlink: 'syz.2.308': attribute type 10 has an invalid length. [ 435.704256][ T6910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.308'. [ 435.707091][ T6910] dummy0: entered promiscuous mode [ 435.735237][ T6917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6917 comm=syz.3.310 [ 435.746439][ T6926] netlink: 'syz.2.311': attribute type 2 has an invalid length. [ 435.746984][ T6928] netlink: 'syz.2.311': attribute type 2 has an invalid length. [ 435.765572][ T6912] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 435.774898][ T6912] bond2 (unregistering): Released all slaves [ 435.775779][ T6930] netlink: 48 bytes leftover after parsing attributes in process `syz.3.312'. [ 435.799090][ T6926] : entered promiscuous mode [ 435.933848][ T6947] netlink: 'syz.0.317': attribute type 6 has an invalid length. [ 435.939771][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 435.995404][ T6953] befs: (loop0): No write support. Marking filesystem read-only [ 436.056485][ T6957] overlayfs: missing 'workdir' [ 436.082891][ T6960] netlink: 'syz.3.324': attribute type 2 has an invalid length. [ 436.087557][ T6961] netlink: 'syz.3.324': attribute type 2 has an invalid length. [ 436.137173][ T6963] misc userio: The device must be registered before sending interrupts [ 436.171276][ T6973] netlink: 'syz.3.328': attribute type 6 has an invalid length. [ 436.173802][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 436.268232][ T6980] geneve1: entered allmulticast mode [ 436.349062][ T6983] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'. [ 436.357059][ T6983] netlink: 'syz.2.332': attribute type 10 has an invalid length. [ 436.364040][ T6983] dummy0: left promiscuous mode [ 436.384439][ T6983] team0: Port device dummy0 added [ 436.596032][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 436.599143][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 436.715551][ T7000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7000 comm=syz.2.336 [ 436.767203][ T7002] IPv6: sit1: Disabled Multicast RS [ 436.770129][ T7002] sit1: entered allmulticast mode [ 437.010897][ T7023] sctp: [Deprecated]: syz.3.342 (pid 7023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.010897][ T7023] Use struct sctp_sack_info instead [ 437.029887][ T9] IPVS: starting estimator thread 0... [ 437.116184][ T7031] overlayfs: failed to resolve './file0': -2 [ 437.119838][ T7024] IPVS: using max 43 ests per chain, 103200 per kthread [ 437.120765][ T7031] wg1: entered allmulticast mode [ 437.175343][ T7035] ip6t_srh: unknown srh invflags 4000 [ 437.264166][ T7037] nfs4: Unknown parameter '' [ 437.379049][ T7050] syz.3.351(7050): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 437.484519][ T7058] overlayfs: statfs failed on './file0' [ 437.618170][ T7080] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 437.733218][ T848] usb 6-1: USB disconnect, device number 4 [ 437.794764][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 437.794781][ T42] audit: type=1400 audit(1783293481.762:528): avc: denied { map } for pid=7086 comm="syz.1.361" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 437.809049][ T42] audit: type=1400 audit(1783293481.782:529): avc: denied { map } for pid=7086 comm="syz.1.361" path="socket:[17683]" dev="sockfs" ino=17683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 437.881171][ T5797] Bluetooth: hci2: command tx timeout [ 437.959987][ T7095] __nla_validate_parse: 10 callbacks suppressed [ 437.960006][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 437.968460][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 438.240199][ T5938] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 438.245310][ T42] audit: type=1400 audit(1783293482.212:530): avc: denied { write } for pid=7113 comm="syz.0.369" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 438.393525][ T7120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7120 comm=syz.0.371 [ 438.394497][ T5938] usb 7-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.400088][ T7120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7120 comm=syz.0.371 [ 438.402019][ T5938] usb 7-1: config 1 interface 0 has no altsetting 0 [ 438.411689][ T5938] usb 7-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.40 [ 438.414922][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.417941][ T5938] usb 7-1: Product: 〮⻫䇌鲤㗸앻쥐峐詜䇽圣䈬ꂏ夃Ϝ檸ђ䏍భ泂屺鰲튊甯殁ၝ꾋僞襀덴Йꣶ䕠兛喸琜ꋻ⡰鿚䋫஛喞ᭃퟦ㰛颓䜮ᷪ퉮ꐓ蝲鱻㜭ﶗ㝮㎥쭁ꌸ稘쮏粻彖ἢ鱯℁括䔒폁킂ꝟ幹ⓦ恫支滑泸࿆颙鏃䳲囀믷쐙헱䭢淲凁퀀⚓㤖鎖ꕖ붫Ṻ떔쪻䝑☢坌蔚腚營 [ 438.428706][ T5938] usb 7-1: Manufacturer: 뱉镧痚ෆ囌వℱ쿮탿걔肗햇⤷ᆀ㝱욦慅ဗ鷭ᾩᾉ▤務봮曠ᢖ䀟궥ႇ裲跔뿑쩌❮࿸屻ᶱ [ 438.440769][ T5938] usb 7-1: SerialNumber:   [ 438.456177][ T7122] ufs: You didn't specify the type of your ufs filesystem [ 438.456177][ T7122] [ 438.456177][ T7122] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 438.456177][ T7122] [ 438.456177][ T7122] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 438.541078][ T7122] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.641246][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 438.644070][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 438.858605][ T42] audit: type=1400 audit(1783293482.822:531): avc: denied { ioctl } for pid=7134 comm="syz.3.377" path="socket:[17827]" dev="sockfs" ino=17827 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 438.900862][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 438.901356][ T5938] usbhid 7-1:1.0: can't add hid device: -71 [ 438.909091][ T5938] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 438.917543][ T5938] usb 7-1: USB disconnect, device number 3 [ 439.096721][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 439.105484][ T7146] bond0: entered promiscuous mode [ 439.107232][ T7146] bond_slave_0: entered promiscuous mode [ 439.109395][ T7146] bond_slave_1: entered promiscuous mode [ 439.111866][ T7146] bridge0: entered promiscuous mode [ 439.119899][ T7146] gretap0: entered promiscuous mode [ 439.123255][ T7146] bond0: left promiscuous mode [ 439.125104][ T7146] bond_slave_0: left promiscuous mode [ 439.127169][ T7146] bond_slave_1: left promiscuous mode [ 439.129479][ T7146] bridge0: left promiscuous mode [ 439.134381][ T7146] gretap0: left promiscuous mode [ 439.181359][ T42] audit: type=1400 audit(1783293483.152:532): avc: denied { watch watch_reads } for pid=7150 comm="syz.3.382" path="/94" dev="tmpfs" ino=524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 439.257782][ T7153] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 439.380031][ T7167] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 439.381287][ T7166] tmpfs: Unknown parameter 'mpo[' [ 439.390689][ T7166] sit2: entered allmulticast mode [ 439.424147][ T7169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'. [ 439.439708][ T7169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'. [ 439.461109][ T42] audit: type=1326 audit(1783293483.432:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.0.390" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ff7b9de59 code=0x0 [ 439.515935][ T7177] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.597552][ T42] audit: type=1400 audit(1783293483.562:534): avc: denied { ioctl } for pid=7180 comm="syz.1.393" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 439.707881][ T7188] input: syz0 as /devices/virtual/input/input8 [ 439.720154][ C0] net_ratelimit: 6 callbacks suppressed [ 439.720171][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 439.725103][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 439.738889][ T7191] netlink: 48 bytes leftover after parsing attributes in process `syz.2.396'. [ 439.769748][ T42] audit: type=1400 audit(1783293483.732:535): avc: denied { write } for pid=7190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.840656][ T42] audit: type=1400 audit(1783293483.802:536): avc: denied { write } for pid=7196 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.907270][ T42] audit: type=1400 audit(1783293483.872:537): avc: denied { write } for pid=7202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.936457][ T7208] netlink: 36 bytes leftover after parsing attributes in process `syz.1.399'. [ 440.269789][ T5797] Bluetooth: hci2: command tx timeout [ 440.272270][ T149] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 440.425972][ T149] usb 6-1: unable to get BOS descriptor or descriptor too short [ 440.431128][ T149] usb 6-1: config 8 has an invalid interface number: 198 but max is 0 [ 440.434885][ T149] usb 6-1: config 8 has no interface number 0 [ 440.443326][ T149] usb 6-1: string descriptor 0 read error: -22 [ 440.446341][ T149] usb 6-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 440.450408][ T149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.616633][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.663715][ T7211] Bluetooth: MGMT ver 1.23 [ 440.736093][ T29] usb 6-1: USB disconnect, device number 5 [ 440.750240][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 440.752206][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 441.242961][ T7263] validate_nla: 4 callbacks suppressed [ 441.242973][ T7263] netlink: 'syz.2.409': attribute type 18 has an invalid length. [ 441.247566][ T7263] netlink: 'syz.2.409': attribute type 18 has an invalid length. [ 441.305748][ T7270] binder: Bad value for 'stats' [ 441.789848][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 441.792437][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 441.872487][ T5896] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 441.875108][ T5896] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 441.879908][ C0] ------------[ cut here ]------------ [ 441.882021][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 441.884311][ C0] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#0: swapper/0/0 [ 441.887670][ C0] Modules linked in: [ 441.889073][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.892270][ C0] Tainted: [L]=SOFTLOCKUP [ 441.893579][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.896745][ C0] RIP: 0010:__queue_work+0xd31/0x12b0 [ 441.898480][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 33 2b 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 441.904316][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00010046 [ 441.906204][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005dc514e [ 441.908801][ C0] RDX: ffff888022dad170 RSI: ffffffff8aac21f0 RDI: ffffffff91256240 [ 441.911421][ C0] RBP: ffff88802ee28a58 R08: 0000000000000005 R09: 0000000000000000 [ 441.914208][ C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888022dad000 [ 441.917567][ C0] R13: 0000000000000000 R14: ffffffff81cf3ca0 R15: 0000000000000001 [ 441.920811][ C0] FS: 0000000000000000(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 441.924748][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.927537][ C0] CR2: 00007ff50405bf88 CR3: 000000003dcd2000 CR4: 0000000000352ef0 [ 441.930931][ C0] Call Trace: [ 441.932331][ C0] [ 441.933592][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 441.936022][ C0] call_timer_fn+0x19a/0x610 [ 441.938011][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 441.940169][ C0] ? __run_timers+0x560/0xb00 [ 441.942200][ C0] ? __run_timers+0x560/0xb00 [ 441.944462][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 441.946922][ C0] __run_timers+0x570/0xb00 [ 441.948663][ C0] ? __pfx___run_timers+0x10/0x10 [ 441.950255][ C0] ? trace_csd_function_exit+0x73/0x1f0 [ 441.952181][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 441.954430][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 441.956384][ C0] run_timer_base+0x114/0x190 [ 441.958110][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 441.959830][ C0] run_timer_softirq+0x1a/0x50 [ 441.961313][ C0] handle_softirqs+0x1ea/0x9b0 [ 441.962867][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 441.964964][ C0] ? _raw_spin_unlock+0x28/0x50 [ 441.966839][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 441.968755][ C0] __irq_exit_rcu+0x162/0x210 [ 441.970315][ C0] irq_exit_rcu+0x9/0x30 [ 441.971711][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 441.973530][ C0] [ 441.974491][ C0] [ 441.975531][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.977668][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 441.979425][ C0] Code: 06 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 d9 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 441.985371][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202 [ 441.987405][ C0] RAX: 00000000000fd631 RBX: ffffffff8e891480 RCX: ffffffff8bb8c2d5 [ 441.989881][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a29fc RDI: ffffffff8c400c80 [ 441.992327][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100d48678d [ 441.994772][ C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000 [ 441.997351][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 441.999793][ C0] ? ct_kernel_exit+0x125/0x180 [ 442.001370][ C0] default_idle+0x9/0x10 [ 442.002709][ C0] default_idle_call+0x6c/0xb0 [ 442.004218][ C0] do_idle+0x3a7/0x5b0 [ 442.005629][ C0] ? __pfx_do_idle+0x10/0x10 [ 442.007092][ C0] cpu_startup_entry+0x4f/0x60 [ 442.008649][ C0] rest_init+0x251/0x260 [ 442.010391][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 442.012210][ C0] start_kernel+0x48e/0x490 [ 442.013673][ C0] x86_64_start_reservations+0x24/0x30 [ 442.015457][ C0] x86_64_start_kernel+0x12b/0x130 [ 442.017170][ C0] common_startup_64+0x13e/0x158 [ 442.018833][ C0] [ 442.019903][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 442.022290][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.025574][ C0] Tainted: [L]=SOFTLOCKUP [ 442.026957][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 442.030319][ C0] Call Trace: [ 442.031424][ C0] [ 442.032375][ C0] dump_stack_lvl+0x100/0x190 [ 442.034254][ C0] vpanic+0x552/0x970 [ 442.035561][ C0] ? __pfx_vpanic+0x10/0x10 [ 442.037057][ C0] panic+0xd1/0xe0 [ 442.038348][ C0] ? __pfx_panic+0x10/0x10 [ 442.039887][ C0] ? check_panic_on_warn+0x1f/0x90 [ 442.041542][ C0] check_panic_on_warn.cold+0x19/0x34 [ 442.043277][ C0] ? __queue_work+0xd2d/0x12b0 [ 442.044826][ C0] __warn.cold+0x191/0x318 [ 442.046337][ C0] __report_bug+0x30f/0x440 [ 442.047814][ C0] ? __queue_work+0xd2d/0x12b0 [ 442.049326][ C0] ? __pfx___report_bug+0x10/0x10 [ 442.051002][ C0] ? cpu_startup_entry+0x4f/0x60 [ 442.052560][ C0] ? rest_init+0x251/0x260 [ 442.053961][ C0] ? start_kernel+0x48e/0x490 [ 442.055507][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 442.057243][ C0] ? look_up_lock_class+0x55/0x120 [ 442.059102][ C0] report_bug_entry+0xe1/0x290 [ 442.060729][ C0] ? __queue_work+0xd31/0x12b0 [ 442.062280][ C0] handle_bug+0x1cd/0x2a0 [ 442.063675][ C0] exc_invalid_op+0x17/0x50 [ 442.065154][ C0] asm_exc_invalid_op+0x1a/0x20 [ 442.066759][ C0] RIP: 0010:__queue_work+0xd31/0x12b0 [ 442.068577][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 33 2b 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 442.074749][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00010046 [ 442.076738][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005dc514e [ 442.079235][ C0] RDX: ffff888022dad170 RSI: ffffffff8aac21f0 RDI: ffffffff91256240 [ 442.081791][ C0] RBP: ffff88802ee28a58 R08: 0000000000000005 R09: 0000000000000000 [ 442.084755][ C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888022dad000 [ 442.087233][ C0] R13: 0000000000000000 R14: ffffffff81cf3ca0 R15: 0000000000000001 [ 442.089742][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 442.091574][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 442.093432][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 442.095328][ C0] call_timer_fn+0x19a/0x610 [ 442.096898][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 442.098621][ C0] ? __run_timers+0x560/0xb00 [ 442.100423][ C0] ? __run_timers+0x560/0xb00 [ 442.102146][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 442.104175][ C0] __run_timers+0x570/0xb00 [ 442.105929][ C0] ? __pfx___run_timers+0x10/0x10 [ 442.107893][ C0] ? trace_csd_function_exit+0x73/0x1f0 [ 442.110070][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 442.112655][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 442.114615][ C0] run_timer_base+0x114/0x190 [ 442.116460][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 442.118495][ C0] run_timer_softirq+0x1a/0x50 [ 442.120375][ C0] handle_softirqs+0x1ea/0x9b0 [ 442.122254][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 442.124305][ C0] ? _raw_spin_unlock+0x28/0x50 [ 442.126225][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 442.128429][ C0] __irq_exit_rcu+0x162/0x210 [ 442.130271][ C0] irq_exit_rcu+0x9/0x30 [ 442.131934][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 442.134127][ C0] [ 442.135294][ C0] [ 442.136453][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 442.138839][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 442.141321][ C0] Code: 06 8e 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 d9 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 442.148395][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000202 [ 442.150757][ C0] RAX: 00000000000fd631 RBX: ffffffff8e891480 RCX: ffffffff8bb8c2d5 [ 442.153860][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a29fc RDI: ffffffff8c400c80 [ 442.156326][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed100d48678d [ 442.159190][ C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000 [ 442.161832][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 442.164337][ C0] ? ct_kernel_exit+0x125/0x180 [ 442.165917][ C0] default_idle+0x9/0x10 [ 442.167318][ C0] default_idle_call+0x6c/0xb0 [ 442.169205][ C0] do_idle+0x3a7/0x5b0 [ 442.170601][ C0] ? __pfx_do_idle+0x10/0x10 [ 442.172090][ C0] cpu_startup_entry+0x4f/0x60 [ 442.173633][ C0] rest_init+0x251/0x260 [ 442.175014][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 442.176778][ C0] start_kernel+0x48e/0x490 [ 442.178265][ C0] x86_64_start_reservations+0x24/0x30 [ 442.180047][ C0] x86_64_start_kernel+0x12b/0x130 [ 442.181714][ C0] common_startup_64+0x13e/0x158 [ 442.183313][ C0] [ 442.185181][ C0] Kernel Offset: disabled [ 442.186547][ C0] Rebooting in 86400 seconds..