last executing test programs: 3.599904045s ago: executing program 3 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000140)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9348bd6411ebf485", 0xf2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x200, 0x0, 0x180, 0x3, 0x49b6, 0xf1, 0x400000100004, 0x7fffffffffffc, 0x10000, 0x0, 0xd, 0xfffffffffffffffd, 0x4, 0x0, 0x8], 0xfec02000, 0x8416}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@code={0xa, 0x56, {"48b8e00000000000b9000f23d00f21f835000000000f23f8f365c01f7a660f38807af60f060f00d0c48200f57694430f0726660faef3b801000000b9977802030f01c17300"}}], 0x56}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x8000000000000001, 0x6, 0x0, 0x4, 0x10003, 0x5, 0x400200cc4, 0x3, 0x7d, 0x0, 0x0, 0x101, 0x2, 0x1, 0xad1, 0x8d], 0x10000, 0x202cc0}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xa000, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0xc, 0x8, 0x8, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0x69}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd3, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0xa, 0x26}, {0xcf, 0x9, 0x8, '\x00', 0x6}, {0xf, 0x1, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x4, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) (async) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) (async) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.339833511s ago: executing program 3 (id=471): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x5, 0x0, 0x0, 0x8, [{0x0, 0x4}, {0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x2}, {0x140000}], 0x0, 0x0, 0x0, 0x1, 0x2}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_setup(0x53fb, &(0x7f00000000c0)={0x0, 0xdad1, 0x1000, 0xfffffffd, 0x15c}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x8, 0x80a0000, 0x0, r5, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000a63d00000000000000000f00000a34000000060a0b0400000000000000000200000008000a40000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x40002}, 0x10) madvise(&(0x7f0000237000/0x4000)=nil, 0x4000, 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f00005cd000/0x4000)=nil) 2.355869905s ago: executing program 3 (id=496): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000020000000000000f00000000000000f60000000000000000"], 0x50) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 2.353828364s ago: executing program 3 (id=497): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x22, 0x1, 0x2, "4f80ff259b1c2ce2d2226bfb771f00ff065e07079c5e6f426ebb117c0caba25f", 0x3436324d}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000500)={0x1, 0x4, 0x101, 0x80000}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x3d0, 0x1398, 0x1398, 0x3d0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x2b8, 0x2e0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x8, 0x7c7, 0x5d, 0x2, 0x4, 0x2, 0x99, 0x0, 0x80, 0x78}, {0x8000000000000001}}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0xff000000, 0xffff00], 0x0, 0x8, 0x89, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 2.300403921s ago: executing program 3 (id=500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) 2.234924552s ago: executing program 3 (id=502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) listen(0xffffffffffffffff, 0x3) r0 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x338, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @local, 0xc}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @loopback, 0xc2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe4ac}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x405f93f2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xda}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x21b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x39cd}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3abe135e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7e0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffff2f, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x24000}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$media(&(0x7f0000000100), 0x558, 0x101400) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000274c0340ab0560000611005688ede0ec4cdf8b000d00000904a80000f4075000bc5d6789d09de1ede766ad3d142c408ad5d0bdf3557af3cf9080e670c8a08bc91f62032911c62bb529957df9cb9186a1af0c9e3f907d1f0afc15031091be49760da7034ee22c6a3a33b895c640c96dff19d8398b02874e1788acfee704cde083a3f50c64bd606d51"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) socket$unix(0x1, 0x1, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x22004083}, 0x4040800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) 2.088736908s ago: executing program 2 (id=507): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xfffffce2}, 0x8050) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}, 0x9, 0x1, {}, 0x6}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) 1.96991058s ago: executing program 2 (id=509): preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/144, 0x90}, {&(0x7f0000000200)=""/90, 0x5a}, {&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000480)=""/105, 0x69}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x7, 0x0, 0xffff) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000006ac0)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r3, 0x28543634fae43ad, 0x70bd2b, 0x0, {0xd}}, 0x14}}, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000540)={0x3, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffe, 0x1, 0x7, 0x4000200}) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x40, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x4008000) 1.879657643s ago: executing program 1 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="58000000acdf10001fff00000000020000000000000015a1def4ea015a9580ad1e9b20fcc41bcaa607878f6fd2a7f5901eb973a47228a4758a6f01c31a64a4626b64960d4cf303d479d3c0f154a23dd4dd35a7c703801edf5c4813c179463e2fbd602fd98a2b7f7835fb608b31a240f219f85bd9fe5b079cd47fa1d39cd06f7f492575751b8bbac8c15d0b1a235cc87f3c2f187d6b57c7291847567fc0cb", @ANYRES32=0x0, @ANYBLOB="0918000000000000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000005"], 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x48041) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a0001002dbd700000000000022014000300fe070002000008000300", @ANYRES32=0x0, @ANYBLOB="0100000000120000"], 0x2c}}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000940)=0x6, 0x6}], 0x1, 0x0, 0x0, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x8814) accept4$inet6(r5, 0x0, &(0x7f0000000440), 0x800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="dbdf25040000009d277db52a4170ad917814e2469ede801c606094d9ebdcf2f8ebf75f043bc5480d3cb1b02d734d9521653b455f9dcdc3ece563d6d10474fb58a2e5fb6a7ae25628aac1162da40995886556d2c2ecbe244c8276996bc689ed1e13cd957d7c294fc059e655914c12768bdbbdab373ef8ee7e44b344d6f76410cd17fabc77d64e8dca8b783694af70b69a9b179df23c409e70752ad8335767721157009499c0eb0c0bd5e54b9c75f5ec18f166af97f2b4ef3b6e2f9839c7e1e7b9f101bea7bbd7eafd0b9ad17a87f38c2e6bc66a96e8218fe6aa23665a558170b5487c81dff3fbeaa47b41d3b63c99590c1dd56cbd6059bb218d8569a100"], 0x14}}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="030c000000000200000034000100000001006e657464657673696d0000000f1002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x8850}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x80) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x124, r11, 0x4, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) read$FUSE(0xffffffffffffffff, &(0x7f0000002600)={0x2020}, 0x2020) 1.769329447s ago: executing program 1 (id=513): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000200)={0x3, 0x0, [{0xa02, 0x0, 0x800}, {0xaf2, 0x0, 0x100000003}, {0xb76}]}) syz_emit_ethernet(0x138, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a40000009078000013123efa89eaad891c443df3a310ceb7813d000068c089edf513c945bfb413b1604dbfbd7758bf9cb7fcd186c406fe13e4fac7ce69e9a8545549dcbcd2f76da7a42689d29bdd74ae693919010762c615fc89e531de8d578cdee2b90bea7de8d5a6d563db3e1974e4582307ca50f6369807068f7d53f4b99f6dca461723543d91dd9b8771298b63155968ba4ac5d4f3288a01d935eb3fedf355c549ff3fa8ff32cb4a6338ec875fb3650238e4e8f4081df50ce4bdc7f6344e9ca419341ff77f4945ab1f23a29cacfd4bafcd9434984dce38cf1f5bcf9a68ae4262b6002ed2e1c048edca0c7484d770ba3f66bb312d"], 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x26081, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0x1, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0x1, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 1.609621504s ago: executing program 1 (id=517): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000480)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x2, 0x60000000, 0xc}, {@rand_addr=0x64010104, 0x4e26, 0x12002, 0x84000000, 0x5, 0x1}}, 0x44) mmap(&(0x7f0000635000/0x3000)=nil, 0x3000, 0x200000b, 0x40010, r0, 0x10000000) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x3c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x404c800}, 0xc0) 1.600437378s ago: executing program 1 (id=519): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610430000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00') syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0xf}, @rdmsr={0x66, 0x18, {0x909}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_load_code={0x12e, 0x56, {0x1, "650f01cb4c0fc7a82b40bc4564400f21800f01c3f40f20e035080000000f22e0480fc72db0b8ffff400fc7ba97200000c46255901ca53f0000003e260f09"}}, @nested_create_vm={0x12d, 0x18}, @wrmsr={0x65, 0x20, {0x87d, 0x5}}, @wr_drn={0x68, 0x20, {0x3, 0x1000}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control16=0x4, 0x5, 0xcfd2, 0x70c4}}, @wr_drn={0x68, 0x20, {0x4, 0x8}}, @wr_drn={0x68, 0x20, {0x3, 0x3}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18}, @wrmsr={0x65, 0x20, {0x36e, 0x1}}, @in_dx={0x69, 0x20, {0x641d, 0x6}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0xa3f, 0x200}}, @out_dx={0x6a, 0x28, {0xc012, 0x4, 0xffffffff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x51f, 0x3, 0x9, 0x6}}, @nested_vmresume={0x130, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @in_dx={0x69, 0x20, {0xcc96, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x0, 0x3}}, @nested_load_code={0x12e, 0x7e, {0x1, "b9800000c00f3235002000000f300f01d12e410f090f3548b8741d17c62d93396b0f23c80f21f835000010000f23f8c744240017000000c74424025197c647ff1c2466baf80cb8bc8b4882ef66bafc0cb04fee66ba430066b8001066ef480fc72bc461f1fb2e"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x5d1, 0xf, 0x2, 0x4}}, @nested_vmresume={0x130, 0x18, 0x1}, @uexit={0x0, 0x18}, @code={0xa, 0x52, {"b92c0200000f324f0fc759fff265f6a60600000066ba4000b00eee440fc73143a766b83f000f00d866b84a000f00d0660f38819397b70000c4a2e59c15bfa90000"}}, @wr_drn={0x68, 0x20, {0x1, 0x3}}], 0x48e}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') r4 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x600, 0xfffffffffffffe04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) io_uring_enter(r4, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = dup(r7) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000002000)=r8, 0x1) setns(r8, 0x10000000) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000001600)=r8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001540), 0x1, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000002040)) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa8aaaaaaaabb8100008088ca"], 0x0) 1.439884243s ago: executing program 1 (id=523): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mbind(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000040)=0x1ff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x0, 0x1000, 0x2000, &(0x7f0000007000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.100558316s ago: executing program 2 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0xc4cc, 0x10100, 0x4}, &(0x7f0000000480)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff2b, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000040}, 0x40001) io_uring_enter(r1, 0x5b43, 0x94d, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000340)={[{0xb5, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x3}, {0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x8, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00', 0x800}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 880.575451ms ago: executing program 2 (id=526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000"], 0xb8}}, 0x0) 879.834473ms ago: executing program 2 (id=527): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x430082, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x120c}, {r0, 0x8080}], 0x2, &(0x7f0000000100)={r1, r2+60000000}, &(0x7f0000000140)={[0x8]}, 0x8) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_pgetevents(0x0, 0x7e, 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f0000000240)={r3, r4+60000000}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x551b]}, 0x8}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000340)="79325a7f89821cb58af7b7431820c792", 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000000380)=0xfffffffa, 0x4) (async) timerfd_settime(r5, 0x2, &(0x7f00000003c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000400)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) close_range(r5, r0, 0x0) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000440)) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000004c0)={{0x3, @name="3c287cbd62830086cfd00421427d2124bb44d7046b93360de7280ddcbbaf51d0"}, "730ee617363dab09b3bce1223e6df21f1e49ff00d3f74bd3ace5812a4cec4034", 0x3}) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2, 0xc8}}}, 0x6) (async) recvmmsg$unix(r5, &(0x7f0000003c40)=[{{&(0x7f0000000600), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/74, 0x4a}, {&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f0000000800)=""/110, 0x6e}, {&(0x7f0000000880)=""/249, 0xf9}, {&(0x7f0000000980)=""/126, 0x7e}, {&(0x7f0000000a00)=""/41, 0x29}], 0x6, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/173, 0xad}, {&(0x7f0000000c40)=""/138, 0x8a}], 0x2}}, {{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000dc0)=""/11, 0xb}, {&(0x7f0000000e00)=""/21, 0x15}, {&(0x7f0000000e40)=""/83, 0x53}, {&(0x7f0000000ec0)=""/84, 0x54}, {&(0x7f0000000f40)=""/9, 0x9}, {&(0x7f0000000f80)=""/62, 0x3e}, {&(0x7f0000000fc0)=""/39, 0x27}, {&(0x7f0000001000)=""/132, 0x84}], 0x8, &(0x7f0000001140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000011c0)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/194, 0xc2}, {&(0x7f0000002340)=""/215, 0xd7}], 0x3}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/197, 0xc5}, {&(0x7f0000003580)=""/114, 0x72}, {&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/105, 0x69}, {&(0x7f00000036c0)=""/1, 0x1}, {&(0x7f0000003700)=""/200, 0xc8}, {&(0x7f0000003800)=""/127, 0x7f}], 0x8, &(0x7f0000003900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000003980), 0x6e, &(0x7f0000003c00)=[{&(0x7f0000003a00)=""/208, 0xd0}, {&(0x7f0000003b00)=""/202, 0xca}], 0x2}}], 0x6, 0x2, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r11, 0x4068aea3, &(0x7f0000003dc0)={0xc5, 0x0, r8}) (async) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e80), r12) sendmsg$NL80211_CMD_START_AP(r14, &(0x7f0000004000)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x104140}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0xe0, r16, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x58, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xbc}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xa}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xf}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xd}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "8c5be6899873771e"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "2b069a1a91dfdc08"}]}, @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac0a, 0xfac09, 0xfac10, 0xfac0c, 0xfac12, 0xfac07]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x1e, 0x115, "283f6a1b85f48e904ebb96d36258a1bc3e415e77d26577d1cf13"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac06}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x892f}, @NL80211_ATTR_WPA_VERSIONS={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}, @NL80211_ATTR_PBSS={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x20000800) connect$l2tp(r9, &(0x7f0000004040)={0x2, 0x0, @broadcast, 0x1}, 0x10) (async) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000004080)) syz_kvm_setup_cpu$x86(r15, r13, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000004140)=[@textreal={0x8, &(0x7f00000040c0)="0f01df0f06baf80c66b8de717d8b66efbafc0cb84ca1ef66b8e017a8f90f23d00f21f86635300000080f23f866b88000c0fe0f23c80f21f866350800f0000f23f8660fda9b0b002ef080b00000f364d9d0f2f02992666a0f06", 0x59}], 0x1, 0x64, &(0x7f0000004180), 0x0) (async) close_range(r0, r10, 0x2) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r18 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004240)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r17, &(0x7f0000004380)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004340)={&(0x7f00000042c0)={0x5c, r18, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r19}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}}, 0x40000) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000044c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048095) 790.358734ms ago: executing program 2 (id=528): syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b0001fffa10170904510302ffffff01090507100800060808070593ff9b"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000440)={0x1e, {{0xa, 0x4e23, 0x9, @mcast1, 0x6}}, {{0xa, 0x4e24, 0xb8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x9, @mcast1}}, {{0xa, 0x0, 0xffff5cae, @private0}}}, 0x108) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="cfbfa2ac", @ANYRES16=r1, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x4480) 289.767006ms ago: executing program 0 (id=538): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0xfffffffffffffffd, 0x0) (async) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d03, &(0x7f0000000080)) 210.34215ms ago: executing program 0 (id=539): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) (async) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r0, 0x100000000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) 195.848885ms ago: executing program 0 (id=540): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0xfffffffffffffee9) 140.340082ms ago: executing program 0 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r3, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 139.487125ms ago: executing program 0 (id=542): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x102840, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) close(r0) 368.764µs ago: executing program 0 (id=543): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701fefeffff00000000017c0000040042801400018006000600800a000008000200", @ANYRES32=0x0, @ANYBLOB="929fbfedae917b574a373b15ac2e2f557dd88b607c3123d414bec84bfe2d70b710f2f98afbe7d41a1030e6007bda9ed2b8ba6242b2a95d2441c271d71246e635a321bf39a096d34b2f74b6a333c4"], 0x30}}, 0x8010) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189c02) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_disconnect(r1) mmap$IORING_OFF_SQ_RING(&(0x7f000079e000/0x3000)=nil, 0x3000, 0x2000002, 0x11, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x82) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000228bd7000fcdbdf257f00006a000a00f500505050505050000014005500bf60befd7fdaa3708e861b64aa9ff2"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4048805) 0s ago: executing program 1 (id=544): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x9, 0x7fff0006}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000300)={r10, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r11}) r12 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000001, 0x13, r8, 0x82000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r13, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) kernel console output (not intermixed with test programs): [ 53.276958][ T40] audit: type=1400 audit(1765123486.555:60): avc: denied { rlimitinh } for pid=5906 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.283290][ T40] audit: type=1400 audit(1765123486.555:61): avc: denied { siginh } for pid=5906 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:50832' (ED25519) to the list of known hosts. [ 55.638087][ T40] audit: type=1400 audit(1765123488.935:62): avc: denied { name_bind } for pid=5914 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.674611][ T40] audit: type=1400 audit(1765123488.965:63): avc: denied { execute } for pid=5915 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.682041][ T40] audit: type=1400 audit(1765123488.975:64): avc: denied { execute_no_trans } for pid=5915 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.805117][ T40] audit: type=1400 audit(1765123491.095:65): avc: denied { mounton } for pid=5915 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.812962][ T40] audit: type=1400 audit(1765123491.105:66): avc: denied { mount } for pid=5915 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.814732][ T5915] cgroup: Unknown subsys name 'net' [ 58.009834][ T5915] cgroup: Unknown subsys name 'cpuset' [ 58.015907][ T5915] cgroup: Unknown subsys name 'rlimit' [ 58.258139][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 58.258149][ T40] audit: type=1400 audit(1765123491.555:75): avc: denied { read } for pid=5640 comm="dhcpcd" name="n102" dev="tmpfs" ino=1962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.268682][ T40] audit: type=1400 audit(1765123491.565:76): avc: denied { open } for pid=5640 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.277629][ T40] audit: type=1400 audit(1765123491.565:77): avc: denied { getattr } for pid=5640 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.289406][ T5920] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.293178][ T40] audit: type=1400 audit(1765123491.585:78): avc: denied { relabelto } for pid=5920 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.301976][ T40] audit: type=1400 audit(1765123491.585:79): avc: denied { write } for pid=5920 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.309908][ T40] audit: type=1400 audit(1765123491.595:80): avc: denied { read } for pid=5915 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.318202][ T40] audit: type=1400 audit(1765123491.595:81): avc: denied { open } for pid=5915 comm="syz-executor" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.025830][ T5915] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.566374][ T40] audit: type=1400 audit(1765123495.865:82): avc: denied { execmem } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.773886][ T40] audit: type=1400 audit(1765123496.065:83): avc: denied { create } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.780229][ T40] audit: type=1400 audit(1765123496.075:84): avc: denied { read write } for pid=5928 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.804116][ T5931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.820192][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.823488][ T5934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.833971][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.837909][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.841978][ T5940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.842823][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.843991][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.844151][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.845703][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.845723][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.846433][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.847455][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.851414][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.854209][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.856201][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.858251][ T5943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.858562][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.879886][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.883740][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.208630][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 63.222231][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 63.229890][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 63.307719][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 63.495364][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.499240][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.502489][ T5933] bridge_slave_0: entered allmulticast mode [ 63.506571][ T5933] bridge_slave_0: entered promiscuous mode [ 63.529638][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.532739][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.536046][ T5936] bridge_slave_0: entered allmulticast mode [ 63.539913][ T5936] bridge_slave_0: entered promiscuous mode [ 63.544682][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.548004][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.551240][ T5933] bridge_slave_1: entered allmulticast mode [ 63.555159][ T5933] bridge_slave_1: entered promiscuous mode [ 63.579318][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.582288][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.585571][ T5936] bridge_slave_1: entered allmulticast mode [ 63.588511][ T5936] bridge_slave_1: entered promiscuous mode [ 63.617178][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.620190][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.623102][ T5928] bridge_slave_0: entered allmulticast mode [ 63.627338][ T5928] bridge_slave_0: entered promiscuous mode [ 63.639648][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.642636][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.646121][ T5928] bridge_slave_1: entered allmulticast mode [ 63.649790][ T5928] bridge_slave_1: entered promiscuous mode [ 63.670273][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.673220][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.676077][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.679112][ T5939] bridge_slave_0: entered allmulticast mode [ 63.682643][ T5939] bridge_slave_0: entered promiscuous mode [ 63.693663][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.700608][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.706512][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.710344][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.712870][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.716124][ T5939] bridge_slave_1: entered allmulticast mode [ 63.719723][ T5939] bridge_slave_1: entered promiscuous mode [ 63.732294][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.736914][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.764215][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.793051][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.811048][ T5936] team0: Port device team_slave_0 added [ 63.814484][ T5928] team0: Port device team_slave_0 added [ 63.817734][ T5933] team0: Port device team_slave_0 added [ 63.828043][ T5936] team0: Port device team_slave_1 added [ 63.832189][ T5928] team0: Port device team_slave_1 added [ 63.836931][ T5933] team0: Port device team_slave_1 added [ 63.840244][ T5939] team0: Port device team_slave_0 added [ 63.873658][ T5939] team0: Port device team_slave_1 added [ 63.892276][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.895329][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.905838][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.916983][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.919872][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.930286][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.935320][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.937680][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.945842][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.950473][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.952913][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.960971][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.971649][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.974624][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.985378][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.998674][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.000736][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.011494][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.016402][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.019289][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.029740][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.040942][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.043783][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.054293][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.111022][ T5936] hsr_slave_0: entered promiscuous mode [ 64.113358][ T5936] hsr_slave_1: entered promiscuous mode [ 64.135155][ T5939] hsr_slave_0: entered promiscuous mode [ 64.137438][ T5939] hsr_slave_1: entered promiscuous mode [ 64.139497][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 64.141463][ T5939] Cannot create hsr debugfs directory [ 64.152349][ T5928] hsr_slave_0: entered promiscuous mode [ 64.154473][ T5928] hsr_slave_1: entered promiscuous mode [ 64.156844][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 64.158486][ T5928] Cannot create hsr debugfs directory [ 64.181694][ T5933] hsr_slave_0: entered promiscuous mode [ 64.183934][ T5933] hsr_slave_1: entered promiscuous mode [ 64.187371][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 64.189168][ T5933] Cannot create hsr debugfs directory [ 64.546706][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.555718][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.562243][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.577983][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.620928][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.632940][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.639862][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.653891][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.713695][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.721704][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.728480][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.737477][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.814788][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.821889][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.829837][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.837799][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.874833][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.916757][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.928689][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.936349][ T5938] Bluetooth: hci0: command tx timeout [ 64.938972][ T5931] Bluetooth: hci3: command tx timeout [ 64.945184][ T5938] Bluetooth: hci2: command tx timeout [ 64.947858][ T5931] Bluetooth: hci1: command tx timeout [ 64.951899][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.955136][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.971063][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.974175][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.987430][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.998541][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.000821][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.013422][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.015814][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.035613][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.042528][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.075559][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.080007][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.117829][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.120793][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.124520][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 65.124533][ T40] audit: type=1400 audit(1765123498.415:91): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.127967][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.139124][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.143883][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.146986][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.162646][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.165811][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.209834][ T5933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.214139][ T5933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.272543][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.359131][ T5939] veth0_vlan: entered promiscuous mode [ 65.373953][ T5939] veth1_vlan: entered promiscuous mode [ 65.392395][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.402161][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.418244][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.429719][ T5939] veth0_macvtap: entered promiscuous mode [ 65.440405][ T5939] veth1_macvtap: entered promiscuous mode [ 65.463565][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.482295][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.507649][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.511495][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.518291][ T5936] veth0_vlan: entered promiscuous mode [ 65.521258][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.524050][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.536578][ T5928] veth0_vlan: entered promiscuous mode [ 65.550882][ T5933] veth0_vlan: entered promiscuous mode [ 65.553571][ T5936] veth1_vlan: entered promiscuous mode [ 65.578326][ T5928] veth1_vlan: entered promiscuous mode [ 65.582092][ T5933] veth1_vlan: entered promiscuous mode [ 65.605318][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.608754][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.614114][ T5936] veth0_macvtap: entered promiscuous mode [ 65.642700][ T5936] veth1_macvtap: entered promiscuous mode [ 65.657985][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.662919][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.677732][ T40] audit: type=1400 audit(1765123498.975:92): avc: denied { mount } for pid=5939 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.678197][ T5928] veth0_macvtap: entered promiscuous mode [ 65.686241][ T40] audit: type=1400 audit(1765123498.975:93): avc: denied { mounton } for pid=5939 comm="syz-executor" path="/syzkaller.msfdkt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.704925][ T40] audit: type=1400 audit(1765123498.975:94): avc: denied { mount } for pid=5939 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.714513][ T40] audit: type=1400 audit(1765123498.975:95): avc: denied { mounton } for pid=5939 comm="syz-executor" path="/syzkaller.msfdkt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.721568][ T5933] veth0_macvtap: entered promiscuous mode [ 65.725765][ T40] audit: type=1400 audit(1765123498.985:96): avc: denied { mounton } for pid=5939 comm="syz-executor" path="/syzkaller.msfdkt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.729075][ T5928] veth1_macvtap: entered promiscuous mode [ 65.739109][ T40] audit: type=1400 audit(1765123498.985:97): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.743584][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.749053][ T40] audit: type=1400 audit(1765123498.995:98): avc: denied { mounton } for pid=5939 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.754454][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.760707][ T40] audit: type=1400 audit(1765123498.995:99): avc: denied { mount } for pid=5939 comm="syz-executor" name="/" dev="gadgetfs" ino=9610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.764696][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.769385][ T5933] veth1_macvtap: entered promiscuous mode [ 65.772917][ T40] audit: type=1400 audit(1765123498.995:100): avc: denied { mount } for pid=5939 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.782517][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.794543][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.801184][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.807746][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.814359][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.826166][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.839050][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.842239][ T6019] dlm: plock device version mismatch: kernel (1.2.0), user (180.0.5247331) [ 65.842797][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.857116][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.865356][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.869322][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.888959][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.908199][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'. [ 65.912393][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'. [ 65.934206][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.937067][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.939805][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.942547][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.959928][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.962982][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.999134][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.002521][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.012619][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.023869][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.031677][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.034688][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.064426][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.077101][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.099893][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.103288][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.169599][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.229088][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.235289][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 66.246773][ T6035] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.396014][ T6046] loop5: detected capacity change from 0 to 7 [ 66.400168][ T6046] Dev loop5: unable to read RDB block 7 [ 66.402145][ T6046] loop5: AHDI p1 p2 [ 66.403401][ T6046] loop5: partition table partially beyond EOD, truncated [ 66.407695][ T6046] loop5: p1 start 1702000233 is beyond EOD, truncated [ 66.419604][ T6046] ======================================================= [ 66.419604][ T6046] WARNING: The mand mount option has been deprecated and [ 66.419604][ T6046] and is ignored by this kernel. Remove the mand [ 66.419604][ T6046] option from the mount to silence this warning. [ 66.419604][ T6046] ======================================================= [ 66.432495][ T5996] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.481908][ T6050] Zero length message leads to an empty skb [ 66.587621][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 66.608995][ T5996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.613181][ T5996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.617184][ T5996] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.622505][ T5996] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.627058][ T5996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.633802][ T5996] usb 7-1: config 0 descriptor?? [ 66.765174][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 66.917939][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 66.921692][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 66.924561][ T9] usb 5-1: no configurations [ 66.926679][ T9] usb 5-1: can't read configurations, error -22 [ 67.015479][ T5940] Bluetooth: hci0: command tx timeout [ 67.017815][ T5931] Bluetooth: hci1: command tx timeout [ 67.019848][ T5938] Bluetooth: hci2: command tx timeout [ 67.055115][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 67.056031][ T5996] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 67.085138][ T53] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 67.207045][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.210761][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 67.213915][ T9] usb 5-1: no configurations [ 67.216084][ T9] usb 5-1: can't read configurations, error -22 [ 67.219534][ T9] usb usb5-port1: attempt power cycle [ 67.259439][ T53] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.263990][ T53] usb 8-1: config 0 has no interfaces? [ 67.268564][ T53] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 67.272145][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.275729][ T53] usb 8-1: Product: syz [ 67.277509][ T53] usb 8-1: Manufacturer: syz [ 67.279520][ T53] usb 8-1: SerialNumber: syz [ 67.283594][ T53] usb 8-1: config 0 descriptor?? [ 67.424603][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.432522][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.516404][ T6064] veth0_to_bridge: entered promiscuous mode [ 67.528502][ T6075] ip6erspan0: entered promiscuous mode [ 67.558368][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 67.589040][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.596482][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 67.599757][ T9] usb 5-1: no configurations [ 67.601679][ T9] usb 5-1: can't read configurations, error -22 [ 67.725159][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 67.752152][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.755591][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 67.758890][ T9] usb 5-1: no configurations [ 67.760764][ T9] usb 5-1: can't read configurations, error -22 [ 67.763937][ T9] usb usb5-port1: unable to enumerate USB device [ 67.791659][ T6083] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 67.796601][ T6083] Error validating options; rc = [-22] [ 67.975694][ T5938] Bluetooth: hci3: command tx timeout [ 68.814023][ T6101] openvswitch: netlink: Key type 31 is not supported [ 68.832401][ T6100] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 68.834751][ T6100] UDF-fs: Scanning with blocksize 2048 failed [ 68.839818][ T6100] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 68.842089][ T6100] UDF-fs: Scanning with blocksize 4096 failed [ 68.932418][ T6107] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 4, id = 0 [ 69.011802][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 69.014768][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 69.018193][ T6106] netlink: 'syz.2.26': attribute type 19 has an invalid length. [ 69.035941][ T53] usb 7-1: USB disconnect, device number 2 [ 69.105303][ T5938] Bluetooth: hci2: command tx timeout [ 69.107290][ T5938] Bluetooth: hci1: command tx timeout [ 69.108352][ T5931] Bluetooth: hci0: command tx timeout [ 69.146174][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 69.172665][ T6118] vlan2: entered promiscuous mode [ 69.174427][ T6118] vlan2: entered allmulticast mode [ 69.176388][ T6118] hsr_slave_1: entered allmulticast mode [ 69.762846][ T6144] geneve1: entered allmulticast mode [ 69.774899][ T6149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6149 comm=syz.2.39 [ 69.847491][ T6064] veth0_to_bridge: left promiscuous mode [ 69.857588][ T6024] usb 8-1: USB disconnect, device number 2 [ 69.998777][ T6168] capability: warning: `syz.2.46' uses deprecated v2 capabilities in a way that may be insecure [ 70.065663][ T5938] Bluetooth: hci3: command tx timeout [ 70.131035][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 70.131047][ T40] audit: type=1400 audit(1765123503.425:205): avc: denied { mount } for pid=6178 comm="syz.3.50" name="/" dev="ramfs" ino=11419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.141480][ T6179] fuse: Bad value for 'group_id' [ 70.143057][ T6179] fuse: Bad value for 'group_id' [ 70.150927][ T40] audit: type=1400 audit(1765123503.435:206): avc: denied { read write } for pid=6178 comm="syz.3.50" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 70.158877][ T40] audit: type=1400 audit(1765123503.435:207): avc: denied { open } for pid=6178 comm="syz.3.50" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 70.210587][ T40] audit: type=1400 audit(1765123503.505:208): avc: denied { setopt } for pid=6182 comm="syz.3.51" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.218158][ T40] audit: type=1400 audit(1765123503.505:209): avc: denied { read } for pid=6182 comm="syz.3.51" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.230489][ T40] audit: type=1400 audit(1765123503.525:210): avc: denied { node_bind } for pid=6182 comm="syz.3.51" src=52770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.253726][ T40] audit: type=1400 audit(1765123503.545:211): avc: denied { create } for pid=6184 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.262068][ T6185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.270976][ T6187] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 70.277052][ T40] audit: type=1400 audit(1765123503.575:212): avc: denied { create } for pid=6186 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 70.289685][ T40] audit: type=1400 audit(1765123503.575:213): avc: denied { write } for pid=6186 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 70.290815][ T6185] tmpfs: Cannot change global quota limit on remount [ 70.306613][ T40] audit: type=1400 audit(1765123503.605:214): avc: denied { setopt } for pid=6184 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.391634][ T6191] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 70.394170][ T6191] PKCS7: Only support pkcs7_signedData type [ 70.505392][ T6207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6207 comm=syz.3.59 [ 70.657298][ T6220] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 70.762508][ T6236] FAULT_INJECTION: forcing a failure. [ 70.762508][ T6236] name failslab, interval 1, probability 0, space 0, times 1 [ 70.767926][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.2.70 Not tainted syzkaller #0 PREEMPT(full) [ 70.767949][ T6236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.767959][ T6236] Call Trace: [ 70.767965][ T6236] [ 70.767972][ T6236] dump_stack_lvl+0x16c/0x1f0 [ 70.768021][ T6236] should_fail_ex+0x512/0x640 [ 70.768045][ T6236] ? fs_reclaim_acquire+0xae/0x150 [ 70.768071][ T6236] should_failslab+0xc2/0x120 [ 70.768093][ T6236] __kmalloc_noprof+0xeb/0x910 [ 70.768120][ T6236] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 70.768141][ T6236] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 70.768157][ T6236] tomoyo_realpath_from_path+0xc2/0x6e0 [ 70.768176][ T6236] ? tomoyo_profile+0x47/0x60 [ 70.768212][ T6236] tomoyo_path_number_perm+0x245/0x580 [ 70.768236][ T6236] ? tomoyo_path_number_perm+0x237/0x580 [ 70.768262][ T6236] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.768286][ T6236] ? find_held_lock+0x2b/0x80 [ 70.768333][ T6236] ? find_held_lock+0x2b/0x80 [ 70.768362][ T6236] ? hook_file_ioctl_common+0x144/0x410 [ 70.768386][ T6236] ? __fget_files+0x20e/0x3c0 [ 70.768413][ T6236] security_file_ioctl+0x9b/0x240 [ 70.768441][ T6236] __x64_sys_ioctl+0xb7/0x210 [ 70.768463][ T6236] do_syscall_64+0xcd/0xf80 [ 70.768489][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.768507][ T6236] RIP: 0033:0x7f347898f7c9 [ 70.768522][ T6236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.768538][ T6236] RSP: 002b:00007f3479777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.768556][ T6236] RAX: ffffffffffffffda RBX: 00007f3478be5fa0 RCX: 00007f347898f7c9 [ 70.768567][ T6236] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 70.768577][ T6236] RBP: 00007f3479777090 R08: 0000000000000000 R09: 0000000000000000 [ 70.768586][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.768596][ T6236] R13: 00007f3478be6038 R14: 00007f3478be5fa0 R15: 00007ffe4acb7978 [ 70.768616][ T6236] [ 70.768636][ T6236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.984511][ T6253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6253 comm=syz.1.75 [ 70.992683][ T6252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6252 comm=syz.1.75 [ 71.091409][ T6261] __nla_validate_parse: 2 callbacks suppressed [ 71.091423][ T6261] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.79'. [ 71.100237][ T6261] syz.2.79 uses obsolete (PF_INET,SOCK_PACKET) [ 71.104321][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 71.175761][ T5938] Bluetooth: hci1: command tx timeout [ 71.185179][ T5938] Bluetooth: hci0: command tx timeout [ 71.185233][ T5931] Bluetooth: hci2: command tx timeout [ 71.249637][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.253661][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.449121][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 71.458120][ T6299] netlink: 104 bytes leftover after parsing attributes in process `syz.0.89'. [ 71.539473][ T6314] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.546019][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 71.556442][ T6316] process 'syz.1.91' launched './file0' with NULL argv: empty string added [ 71.589432][ T6319] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 71.592237][ T6319] syz_tun: entered promiscuous mode [ 71.597207][ T6319] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 71.629622][ T6322] No buffer was provided with the request [ 71.629735][ T6314] raw_sendmsg: syz.2.93 forgot to set AF_INET. Fix it! [ 71.632042][ T6322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=6322 comm=syz.0.96 [ 71.639533][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96'. [ 71.644084][ T6322] No buffer was provided with the request [ 71.646513][ T6323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=6323 comm=syz.0.96 [ 71.671807][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 71.687555][ T6327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'. [ 71.749995][ T6337] macsec1: entered promiscuous mode [ 71.752020][ T6337] macsec1: entered allmulticast mode [ 71.785671][ T6340] netlink: 104 bytes leftover after parsing attributes in process `syz.0.101'. [ 71.795746][ T5931] Bluetooth: hci2: SCO packet for unknown connection handle 173 [ 72.447737][ T6355] FAULT_INJECTION: forcing a failure. [ 72.447737][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.454494][ T6355] CPU: 2 UID: 0 PID: 6355 Comm: syz.0.107 Not tainted syzkaller #0 PREEMPT(full) [ 72.454509][ T6355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.454516][ T6355] Call Trace: [ 72.454521][ T6355] [ 72.454525][ T6355] dump_stack_lvl+0x16c/0x1f0 [ 72.454547][ T6355] should_fail_ex+0x512/0x640 [ 72.454561][ T6355] _copy_from_user+0x2e/0xd0 [ 72.454577][ T6355] kstrtouint_from_user+0xd6/0x1d0 [ 72.454605][ T6355] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 72.454628][ T6355] ? __lock_acquire+0x436/0x2890 [ 72.454652][ T6355] ? lock_acquire+0x179/0x330 [ 72.454678][ T6355] proc_fail_nth_write+0x83/0x220 [ 72.454693][ T6355] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 72.454708][ T6355] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 72.454717][ T6355] vfs_write+0x2a0/0x11d0 [ 72.454732][ T6355] ? __pfx___mutex_lock+0x10/0x10 [ 72.454757][ T6355] ? __pfx_vfs_write+0x10/0x10 [ 72.454785][ T6355] ? __fget_files+0x20e/0x3c0 [ 72.454816][ T6355] ksys_write+0x12a/0x250 [ 72.454837][ T6355] ? __pfx_ksys_write+0x10/0x10 [ 72.454860][ T6355] ? fput+0x70/0xf0 [ 72.454885][ T6355] do_syscall_64+0xcd/0xf80 [ 72.454903][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.454915][ T6355] RIP: 0033:0x7fa11a78e27f [ 72.454924][ T6355] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 72.454935][ T6355] RSP: 002b:00007fa11b619030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 72.454946][ T6355] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa11a78e27f [ 72.454952][ T6355] RDX: 0000000000000001 RSI: 00007fa11b6190a0 RDI: 0000000000000004 [ 72.454958][ T6355] RBP: 00007fa11b619090 R08: 0000000000000000 R09: 0000000000000000 [ 72.454964][ T6355] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 72.454970][ T6355] R13: 00007fa11a9e6038 R14: 00007fa11a9e5fa0 R15: 00007ffea96d59a8 [ 72.454984][ T6355] [ 72.641427][ T6365] vivid-000: ================= START STATUS ================= [ 72.644253][ T6365] vivid-000: Test Pattern: 75% Colorbar [ 72.646998][ T6365] vivid-000: Fill Percentage of Frame: 100 [ 72.649312][ T6365] vivid-000: Horizontal Movement: No Movement [ 72.651470][ T6365] vivid-000: Vertical Movement: No Movement [ 72.653626][ T6365] vivid-000: OSD Text Mode: All [ 72.655682][ T6365] vivid-000: Show Border: false [ 72.657801][ T6365] vivid-000: Show Square: false [ 72.659886][ T6365] vivid-000: Sensor Flipped Horizontally: false [ 72.662532][ T6365] vivid-000: Sensor Flipped Vertically: false [ 72.666754][ T6365] vivid-000: Insert SAV Code in Image: false [ 72.668390][ T6367] xt_limit: Overflow, try lower: 271964/0 [ 72.669318][ T6365] vivid-000: Insert EAV Code in Image: false [ 72.673789][ T6365] vivid-000: Insert Video Guard Band: false [ 72.676315][ T6365] vivid-000: Reduced Framerate: false [ 72.678510][ T6365] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 72.681596][ T6365] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 72.684479][ T6365] vivid-000: Enable Capture Cropping: true [ 72.686819][ T6365] vivid-000: Enable Capture Composing: true [ 72.688904][ T6365] vivid-000: Enable Capture Scaler: true [ 72.690670][ T6365] vivid-000: Timestamp Source: End of Frame [ 72.692520][ T6365] vivid-000: Colorspace: sRGB [ 72.694061][ T6365] vivid-000: Transfer Function: Default [ 72.696381][ T6365] vivid-000: Y'CbCr Encoding: Default [ 72.698223][ T6365] vivid-000: HSV Encoding: Hue 0-179 [ 72.700197][ T6365] vivid-000: Quantization: Default [ 72.701843][ T6365] vivid-000: Apply Alpha To Red Only: false [ 72.703741][ T6365] vivid-000: Standard Aspect Ratio: 4x3 [ 72.706356][ T6365] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 72.708820][ T6365] vivid-000: DV Timings: 640x480p59 inactive [ 72.710736][ T6365] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 72.713031][ T6365] vivid-000: Maximum EDID Blocks: 2 [ 72.714705][ T6365] vivid-000: Limited RGB Range (16-235): false [ 72.716829][ T6365] vivid-000: Rx RGB Quantization Range: Automatic [ 72.718857][ T6365] vivid-000: Power Present: 0x00000001 [ 72.720547][ T6365] tpg source WxH: 320x240 (Y'CbCr) [ 72.722209][ T6365] tpg field: 1 [ 72.723295][ T6365] tpg crop: (0,0)/320x240 [ 72.724649][ T6365] tpg compose: (0,0)/320x240 [ 72.726200][ T6365] tpg colorspace: 8 [ 72.727395][ T6365] tpg transfer function: 0/0 [ 72.728824][ T6365] tpg Y'CbCr encoding: 0/0 [ 72.730215][ T6365] tpg quantization: 0/0 [ 72.731508][ T6365] tpg RGB range: 0/2 [ 72.732726][ T6365] vivid-000: ================== END STATUS ================== [ 72.863484][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'. [ 73.059182][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.062216][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.068595][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.071715][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.128399][ T6407] warning: `syz.3.123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.415411][ T6024] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 73.464722][ T6417] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20000 [ 73.530857][ T6430] sctp: [Deprecated]: syz.3.129 (pid 6430) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.530857][ T6430] Use struct sctp_sack_info instead [ 73.592103][ T6438] autofs4:pid:6438:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 73.597492][ T6438] autofs4:pid:6438:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 73.629948][ T5931] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 73.960508][ T6471] Bluetooth: MGMT ver 1.23 [ 73.974860][ T6474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26958 sclass=netlink_route_socket pid=6474 comm=syz.0.142 [ 74.289784][ T6510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.452553][ T6519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.611704][ T6532] veth5: entered promiscuous mode [ 74.716745][ T6545] rdma_op ffff888054c131f0 conn xmit_rdma 0000000000000000 [ 74.747863][ T6545] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 74.750154][ T6545] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 74.753836][ T6545] vhci_hcd vhci_hcd.0: Device attached [ 74.759414][ T6550] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 74.762778][ T6548] vhci_hcd: connection closed [ 74.763984][ T1232] vhci_hcd vhci_hcd.3: stop threads [ 74.768601][ T1232] vhci_hcd vhci_hcd.3: release socket [ 74.770379][ T1232] vhci_hcd vhci_hcd.3: disconnect device [ 75.039170][ T6560] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 75.240776][ T6568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=6568 comm=syz.1.173 [ 75.269000][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 75.269014][ T40] audit: type=1400 audit(1765123508.565:336): avc: denied { mount } for pid=6569 comm="syz.2.174" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 75.280413][ T40] audit: type=1400 audit(1765123508.565:337): avc: denied { remount } for pid=6569 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 75.366299][ T40] audit: type=1400 audit(1765123508.665:338): avc: denied { append } for pid=6573 comm="syz.3.175" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.366507][ T6574] program syz.3.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.375269][ T40] audit: type=1400 audit(1765123508.665:339): avc: denied { open } for pid=6573 comm="syz.3.175" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.417616][ T40] audit: type=1400 audit(1765123508.715:340): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 75.447035][ T40] audit: type=1400 audit(1765123508.745:341): avc: denied { ioctl } for pid=6575 comm="syz.3.176" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.456118][ T40] audit: type=1400 audit(1765123508.745:342): avc: denied { create } for pid=6575 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.462697][ T40] audit: type=1400 audit(1765123508.745:343): avc: denied { getopt } for pid=6575 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.473203][ T40] audit: type=1400 audit(1765123508.755:344): avc: denied { create } for pid=6577 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.481528][ T40] audit: type=1400 audit(1765123508.755:345): avc: denied { setopt } for pid=6577 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.555993][ T6589] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 75.714447][ T6599] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 75.920033][ T6607] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 75.922220][ T6607] syzkaller0: linktype set to 7 [ 76.192515][ T6622] EXT4-fs (nbd0): unable to read superblock [ 76.217763][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.220147][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.250791][ T6625] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 76.359745][ T6637] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 76.404963][ T6642] __nla_validate_parse: 7 callbacks suppressed [ 76.404981][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 76.422353][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'. [ 76.432281][ T6649] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.202'. [ 76.436265][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'. [ 76.477992][ T6653] loop5: detected capacity change from 0 to 7 [ 76.482058][ T6653] Dev loop5: unable to read RDB block 7 [ 76.483852][ T6653] loop5: AHDI p1 p2 [ 76.486005][ T6653] loop5: partition table partially beyond EOD, truncated [ 76.488703][ T6653] loop5: p1 start 1702000233 is beyond EOD, truncated [ 76.526224][ T6656] program syz.1.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.583630][ T6662] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 76.585891][ T6662] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.592104][ T6662] vhci_hcd vhci_hcd.0: Device attached [ 76.594978][ T6665] vhci_hcd: connection closed [ 76.598306][ T74] vhci_hcd vhci_hcd.1: stop threads [ 76.602670][ T74] vhci_hcd vhci_hcd.1: release socket [ 76.606726][ T74] vhci_hcd vhci_hcd.1: disconnect device [ 76.772921][ T6670] ./cgroup: Can't lookup blockdev [ 77.008809][ T6679] 9p: Unknown uid 00000000004294967295 [ 77.213060][ T6693] tmpfs: Unknown parameter '' [ 77.213177][ T6692] tmpfs: Unknown parameter '' [ 77.216539][ T6693] tmpfs: Bad value for 'huge' [ 77.222373][ T6692] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.216'. [ 77.301811][ T5338] Dev loop5: unable to read RDB block 7 [ 77.303725][ T5338] loop5: AHDI p1 p2 [ 77.305139][ T5338] loop5: partition table partially beyond EOD, truncated [ 77.305988][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 77.307501][ T5338] loop5: p1 start 1702000233 is beyond EOD, truncated [ 77.354504][ T6705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.653235][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 77.718593][ T5931] block nbd0: Receive control failed (result -1) [ 77.720883][ T6712] support for the xor transformation has been removed. [ 77.757011][ T6712] netlink: 256 bytes leftover after parsing attributes in process `syz.2.223'. [ 78.061075][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 78.065917][ T6751] comedi comedi3: comedi_test: 3879 microvolt, 2147483645 microsecond waveform attached [ 78.070088][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 78.323009][ T6775] capability: warning: `syz.3.242' uses 32-bit capabilities (legacy support in use) [ 78.329369][ T6775] xt_recent: Unsupported userspace flags (000000b2) [ 78.543056][ T6785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36464 sclass=netlink_route_socket pid=6785 comm=syz.3.246 [ 78.573919][ T6788] usb usb8: check_ctrlrecip: process 6788 (syz.0.247) requesting ep 01 but needs 81 [ 78.577338][ T6788] usb usb8: usbfs: process 6788 (syz.0.247) did not claim interface 0 before use [ 78.581392][ T5931] Bluetooth: hci0: Malformed HCI Event [ 78.641402][ T6799] Driver unsupported XDP return value 0 on prog (id 107) dev N/A, expect packet loss! [ 78.721778][ T6802] bond1: option downdelay: invalid value (18446744073709551615) [ 78.724215][ T6802] bond1: option downdelay: allowed values 0 - 2147483647 [ 78.731226][ T6802] bond1 (unregistering): Released all slaves [ 79.047863][ T6840] x_tables: duplicate underflow at hook 3 [ 79.146881][ T6851] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 79.170885][ T6851] bond1 (unregistering): Released all slaves [ 79.383351][ T6865] erspan1: entered promiscuous mode [ 79.674371][ T6899] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 79.777649][ T6906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.033770][ T6854] Bluetooth: hci2: Opcode 0x080f failed: -4 [ 80.036308][ T6928] veth2: entered promiscuous mode [ 80.039194][ T6928] veth2: entered allmulticast mode [ 80.487058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.607542][ T40] kauditd_printk_skb: 105 callbacks suppressed [ 80.607558][ T40] audit: type=1400 audit(1765123513.909:451): avc: denied { mount } for pid=7026 comm="syz.1.294" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.620420][ T40] audit: type=1400 audit(1765123513.909:452): avc: denied { search } for pid=7026 comm="syz.1.294" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.627250][ T40] audit: type=1400 audit(1765123513.909:453): avc: denied { search } for pid=7026 comm="syz.1.294" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.633893][ T40] audit: type=1400 audit(1765123513.909:454): avc: denied { read open } for pid=7026 comm="syz.1.294" path="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.640640][ T40] audit: type=1400 audit(1765123513.909:455): avc: denied { search } for pid=7026 comm="syz.1.294" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.647807][ T40] audit: type=1400 audit(1765123513.919:456): avc: denied { search } for pid=7026 comm="syz.1.294" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.655119][ T40] audit: type=1400 audit(1765123513.919:457): avc: denied { search } for pid=7026 comm="syz.1.294" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.706066][ T7036] bond0: entered promiscuous mode [ 80.707806][ T7036] bond_slave_0: entered promiscuous mode [ 80.710110][ T7036] bond_slave_1: entered promiscuous mode [ 80.713218][ T7036] batadv0: entered promiscuous mode [ 80.716708][ T7036] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 80.720148][ T7036] bond0: left promiscuous mode [ 80.721961][ T7036] bond_slave_0: left promiscuous mode [ 80.723765][ T7036] bond_slave_1: left promiscuous mode [ 80.726606][ T7036] batadv0: left promiscuous mode [ 80.757673][ T7032] /dev/sr0: Can't open blockdev [ 80.843374][ T7047] mmap: syz.3.301 (7047): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 80.845660][ T7045] ptrace attach of "/syz-executor exec"[5933] was attempted by ""[7045] [ 80.901372][ T40] audit: type=1400 audit(1765123514.199:458): avc: denied { read } for pid=7051 comm="syz.2.304" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.908473][ T40] audit: type=1400 audit(1765123514.199:459): avc: denied { open } for pid=7051 comm="syz.2.304" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.959776][ T7064] trusted_key: encrypted_key: key trusted:syz not found [ 81.011864][ T7070] openvswitch: netlink: Missing key (keys=40, expected=100) [ 81.016326][ T7067] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 81.055390][ T7072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.146580][ T40] audit: type=1400 audit(1765123514.449:460): avc: denied { read } for pid=7082 comm="syz.2.315" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 81.231002][ T7080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2832 sclass=netlink_route_socket pid=7080 comm=syz.1.313 [ 81.255580][ T5931] Bluetooth: hci2: command 0x080f tx timeout [ 81.682209][ T7112] __nla_validate_parse: 4 callbacks suppressed [ 81.682225][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 81.682254][ T7112] openvswitch: netlink: Flow actions attr not present in new flow. [ 81.719211][ T5338] pmem0: [POWERTEC] [ 81.825861][ T7122] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 81.906056][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'. [ 82.015730][ T6066] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 82.148666][ T7152] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 82.175823][ T6066] usb 6-1: Using ep0 maxpacket: 16 [ 82.183186][ T6066] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 82.189905][ T6066] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 82.198856][ T6066] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 82.202168][ T6066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.205369][ T6066] usb 6-1: Product: syz [ 82.207068][ T6066] usb 6-1: Manufacturer: syz [ 82.208844][ T6066] usb 6-1: SerialNumber: syz [ 82.223431][ T6066] usb 6-1: config 0 descriptor?? [ 82.227475][ T6066] hub 6-1:0.0: bad descriptor, ignoring hub [ 82.230019][ T6066] hub 6-1:0.0: probe with driver hub failed with error -5 [ 82.236194][ T6066] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 82.272168][ T7173] mmap: syz.2.340 (7173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.359869][ T7179] xt_TCPMSS: Only works on TCP SYN packets [ 82.408686][ T7184] vim2m vim2m.0: vidioc_s_fmt queue busy [ 82.518666][ T54] usb 6-1: USB disconnect, device number 2 [ 83.656043][ T5931] Bluetooth: hci1: command tx timeout [ 86.458678][ T849] cfg80211: failed to load regulatory.db [ 97.605323][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 97.605334][ T40] audit: type=1400 audit(1765123530.899:476): avc: denied { ioctl } for pid=7196 comm="syz.0.344" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 97.615724][ T40] audit: type=1400 audit(1765123530.909:477): avc: denied { write } for pid=7198 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.628951][ T5338] pmem0: [POWERTEC] [ 97.630447][ T7203] syz_tun: entered allmulticast mode [ 97.638524][ T7202] syz_tun: left allmulticast mode [ 97.658918][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.662942][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.667106][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.670606][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.673835][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.860609][ T7207] 9pnet_fd: p9_fd_create_tcp (7207): problem binding to privport [ 97.899536][ T7204] chnl_net:caif_netlink_parms(): no params data found [ 98.007040][ T40] audit: type=1400 audit(1765123531.299:478): avc: denied { accept } for pid=7225 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.022995][ T7226] ipvlan2: entered allmulticast mode [ 98.024783][ T7226] team0: entered allmulticast mode [ 98.027146][ T7226] team_slave_0: entered allmulticast mode [ 98.029205][ T7226] team_slave_1: entered allmulticast mode [ 98.042605][ T7226] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 98.063389][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.065799][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.068156][ T7204] bridge_slave_0: entered allmulticast mode [ 98.070843][ T7204] bridge_slave_0: entered promiscuous mode [ 98.074490][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.076728][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.078891][ T7204] bridge_slave_1: entered allmulticast mode [ 98.081433][ T7204] bridge_slave_1: entered promiscuous mode [ 98.103423][ T7204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.107981][ T7204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.123053][ T7204] team0: Port device team_slave_0 added [ 98.126121][ T7204] team0: Port device team_slave_1 added [ 98.139270][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.141463][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.149896][ T7204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.154816][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.156802][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.163828][ T7204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.186009][ T40] audit: type=1400 audit(1765123531.479:479): avc: denied { write } for pid=7227 comm="syz.2.350" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 98.198971][ T7204] hsr_slave_0: entered promiscuous mode [ 98.201319][ T7204] hsr_slave_1: entered promiscuous mode [ 98.203439][ T7204] debugfs: 'hsr0' already exists in 'hsr' [ 98.205343][ T7204] Cannot create hsr debugfs directory [ 98.273975][ T7204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.340602][ T7204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.418995][ T7204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.500699][ T7204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.764728][ T7204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.787096][ T7204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.814257][ T7204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.844011][ T7204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.893542][ T40] audit: type=1400 audit(1765123532.189:480): avc: denied { mount } for pid=7237 comm="syz.0.354" name="/" dev="hugetlbfs" ino=17326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 99.133037][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.141143][ T7204] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.150714][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.153822][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.163494][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.166378][ T7164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.190853][ T40] audit: type=1400 audit(1765123532.489:481): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 99.221121][ T40] audit: type=1400 audit(1765123532.519:482): avc: denied { write } for pid=7250 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.234483][ T40] audit: type=1400 audit(1765123532.529:483): avc: denied { setopt } for pid=7250 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.255651][ T7199] Set syz1 is full, maxelem 65536 reached [ 99.346736][ T7204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.378351][ T7204] veth0_vlan: entered promiscuous mode [ 99.385763][ T7204] veth1_vlan: entered promiscuous mode [ 99.404590][ T7204] veth0_macvtap: entered promiscuous mode [ 99.409843][ T7204] veth1_macvtap: entered promiscuous mode [ 99.418882][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.426068][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.432204][ T7164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.436200][ T7164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.439760][ T7164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.442511][ T7164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.479678][ T7164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.482147][ T7164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.494141][ T7164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.496046][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803d011800: rx timeout, send abort [ 99.496802][ T7164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.505190][ T2295] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 99.506869][ T40] audit: type=1400 audit(1765123532.809:484): avc: denied { read } for pid=5320 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 99.514763][ T40] audit: type=1400 audit(1765123532.809:485): avc: denied { search } for pid=5320 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.525463][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.668824][ T2295] usb 5-1: config 0 has no interfaces? [ 99.671178][ T2295] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.675221][ T2295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.681830][ T2295] usb 5-1: config 0 descriptor?? [ 99.685204][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 99.689440][ T54] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.693148][ T54] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.697111][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.701687][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.705672][ T54] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.708665][ T54] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.713737][ T54] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.718262][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.729114][ T54] usb 6-1: config 0 descriptor?? [ 99.735167][ T5938] Bluetooth: hci3: command tx timeout [ 99.945717][ T54] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 99.994417][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803d011c00: rx timeout, send abort [ 100.000037][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803d011800: abort rx timeout. Force session deactivation [ 100.237509][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88803d011c00: connection exists (fe ff). last cmd: 20 [ 100.242829][ T7287] openvswitch: netlink: IP tunnel dst address not specified [ 100.306194][ T7295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7295 comm=syz.3.367 [ 100.365362][ T141] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 100.487497][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d99fc00: rx timeout, send abort [ 100.493485][ T7300] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 100.496502][ T7300] netlink: 'syz.3.369': attribute type 4 has an invalid length. [ 100.499679][ T7300] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.369'. [ 100.515167][ T141] usb 7-1: Using ep0 maxpacket: 32 [ 100.523089][ T141] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 100.530275][ T141] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.534553][ T141] usb 7-1: config 0 descriptor?? [ 100.739549][ T141] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 100.748838][ T141] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.756603][ T141] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 100.759814][ T141] usb 7-1: media controller created [ 100.772128][ T141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.990218][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d99fc00: abort rx timeout. Force session deactivation [ 101.775176][ T141] stb0899_attach: Driver disabled by Kconfig [ 101.777726][ T141] az6027: no front-end attached [ 101.777726][ T141] [ 101.781125][ T141] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 101.785829][ T141] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input8 [ 101.793113][ T141] dvb-usb: schedule remote query interval to 400 msecs. [ 101.796514][ T141] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 101.815175][ T5938] Bluetooth: hci3: command tx timeout [ 102.234655][ T29] usb 5-1: USB disconnect, device number 6 [ 102.322538][ T7311] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 102.322538][ T7311] program syz.0.373 not setting count and/or reply_len properly [ 102.340354][ T7312] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.417811][ T2295] usb 6-1: USB disconnect, device number 3 [ 102.437578][ T2295] usblp0: removed [ 102.445528][ T7314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7314 comm=syz.1.374 [ 102.530599][ T7319] ip6erspan0: entered promiscuous mode [ 102.632106][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 102.632122][ T40] audit: type=1400 audit(1765123535.929:500): avc: denied { shutdown } for pid=7320 comm="syz.0.377" lport=33965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.096035][ T40] audit: type=1400 audit(1765123536.389:501): avc: denied { add_name } for pid=7341 comm="syz.1.383" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.096337][ T7342] (syz.1.383,7342,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 103.115103][ T40] audit: type=1400 audit(1765123536.399:502): avc: denied { create } for pid=7341 comm="syz.1.383" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.128470][ T7342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.383'. [ 103.134666][ T40] audit: type=1400 audit(1765123536.399:503): avc: denied { associate } for pid=7341 comm="syz.1.383" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.165585][ T40] audit: type=1400 audit(1765123536.469:504): avc: denied { read } for pid=7341 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.178575][ T7342] vlan2: entered allmulticast mode [ 103.180718][ T7342] bond0: entered allmulticast mode [ 103.182506][ T7342] bond_slave_0: entered allmulticast mode [ 103.184338][ T7342] bond_slave_1: entered allmulticast mode [ 103.226895][ T40] audit: type=1400 audit(1765123536.529:505): avc: denied { bind } for pid=7348 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.235073][ T40] audit: type=1400 audit(1765123536.529:506): avc: denied { getopt } for pid=7348 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.298660][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 103.361363][ T849] usb 7-1: USB disconnect, device number 3 [ 103.392961][ T7360] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 103.428646][ T849] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 103.480542][ T7369] netlink: 75 bytes leftover after parsing attributes in process `syz.1.392'. [ 103.489666][ T7360] bond1: entered promiscuous mode [ 103.492247][ T7360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.514732][ T7372] dvmrp6: entered allmulticast mode [ 103.562505][ T40] audit: type=1400 audit(1765123536.859:507): avc: denied { ioctl } for pid=7376 comm="syz.2.395" path="socket:[18202]" dev="sockfs" ino=18202 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.606582][ T40] audit: type=1400 audit(1765123536.909:508): avc: denied { bind } for pid=7376 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.812679][ T40] audit: type=1400 audit(1765123537.109:509): avc: denied { name_bind } for pid=7396 comm="syz.2.401" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 103.886930][ T7404] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 103.889387][ T7404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.889565][ T7404] vhci_hcd vhci_hcd.0: Device attached [ 103.905163][ T5938] Bluetooth: hci3: command tx timeout [ 103.906020][ T7405] vhci_hcd: connection closed [ 103.907171][ T1223] vhci_hcd vhci_hcd.3: stop threads [ 103.911143][ T1223] vhci_hcd vhci_hcd.3: release socket [ 103.913263][ T1223] vhci_hcd vhci_hcd.3: disconnect device [ 103.935115][ T2295] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 103.994534][ T7415] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.013460][ T7417] binder: BINDER_SET_CONTEXT_MGR already set [ 104.016965][ T7417] binder: 7414:7417 ioctl 4018620d 2000000000c0 returned -16 [ 104.080422][ T7422] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 104.085253][ T2295] usb 6-1: Using ep0 maxpacket: 8 [ 104.088125][ T2295] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.090948][ T2295] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.093716][ T2295] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 104.097251][ T2295] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 104.100026][ T2295] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.103924][ T2295] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.106769][ T2295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.252043][ T7435] binder: 7434:7435 ioctl 400454da 2000000000c0 returned -22 [ 104.315994][ T2295] usb 6-1: GET_CAPABILITIES returned 0 [ 104.317604][ T2295] usbtmc 6-1:16.0: can't read capabilities [ 104.425133][ T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 104.478824][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 104.575138][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 104.615591][ T849] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 104.705182][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 104.765182][ T849] usb 7-1: Using ep0 maxpacket: 32 [ 104.769679][ T849] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 104.774129][ T849] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 104.779405][ T849] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.783924][ T849] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 104.790693][ T849] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 104.794462][ T849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.798128][ T849] usb 7-1: Product: syz [ 104.799985][ T849] usb 7-1: Manufacturer: syz [ 104.801705][ T849] usb 7-1: SerialNumber: syz [ 104.821792][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 104.827470][ T849] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input9 [ 104.855315][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 104.858912][ T9] usb usb5-port1: attempt power cycle [ 104.930023][ T7451] netlink: 'syz.3.418': attribute type 21 has an invalid length. [ 104.932806][ T7451] netlink: 128 bytes leftover after parsing attributes in process `syz.3.418'. [ 104.937580][ T7451] netlink: 'syz.3.418': attribute type 4 has an invalid length. [ 104.940404][ T7451] netlink: 'syz.3.418': attribute type 5 has an invalid length. [ 104.943530][ T7451] netlink: 3 bytes leftover after parsing attributes in process `syz.3.418'. [ 105.025310][ T849] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 105.030630][ T849] (id 0x00) [ 105.085109][ T849] rc_core: IR keymap rc-imon-pad not found [ 105.087120][ T849] Registered IR keymap rc-empty [ 105.088811][ T849] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 105.092080][ T849] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 105.195100][ T9] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 105.225873][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 105.229464][ T849] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 105.234754][ T849] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input10 [ 105.241076][ T849] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:4> initialized [ 105.282268][ T7464] NILFS (nullb0): couldn't find nilfs on the device [ 105.365215][ T9] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 105.385776][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 105.388382][ T9] usb usb5-port1: unable to enumerate USB device [ 105.415762][ T849] usb 7-1: USB disconnect, device number 4 [ 105.578809][ T7471] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.583102][ T7471] block device autoloading is deprecated and will be removed. [ 105.985213][ T5938] Bluetooth: hci3: command tx timeout [ 106.702740][ T141] usb 6-1: USB disconnect, device number 4 [ 106.761882][ T7490] netlink: 'syz.1.429': attribute type 4 has an invalid length. [ 106.767246][ T7490] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 107.034825][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 107.038698][ T141] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 107.123914][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 107.129419][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 107.205120][ T141] usb 7-1: Using ep0 maxpacket: 16 [ 107.213122][ T141] usb 7-1: unable to get BOS descriptor or descriptor too short [ 107.216727][ T141] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.219950][ T141] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.224226][ T141] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.227686][ T141] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.230231][ T141] usb 7-1: Product: syz [ 107.231581][ T141] usb 7-1: Manufacturer: syz [ 107.233120][ T141] usb 7-1: SerialNumber: syz [ 107.286497][ T7528] xt_cgroup: path and classid specified [ 107.310436][ T7532] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 107.373366][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 107.442157][ T7494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.447059][ T7494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.451962][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 107.584211][ T7167] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.637422][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'. [ 107.640520][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'. [ 107.805985][ T141] usb 7-1: 0:2 : does not exist [ 107.806189][ T7564] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 107.811657][ T7564] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 107.829540][ T141] usb 7-1: USB disconnect, device number 5 [ 107.850666][ T7212] udevd[7212]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.862343][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 107.862359][ T40] audit: type=1400 audit(1765123541.159:525): avc: denied { create } for pid=7568 comm="syz.1.454" name="cpuset.memory_pressure_enabled" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.874028][ T40] audit: type=1400 audit(1765123541.169:526): avc: denied { read append open } for pid=7568 comm="syz.1.454" path="/109/file0/cpuset.memory_pressure_enabled" dev="9p" ino=76808397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.972041][ T40] audit: type=1400 audit(1765123541.269:527): avc: denied { mounton } for pid=7568 comm="syz.1.454" path="/109/file0/file0" dev="9p" ino=76808293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.000852][ T40] audit: type=1400 audit(1765123541.299:528): avc: denied { write } for pid=7568 comm="syz.1.454" name="cpuset.memory_pressure_enabled" dev="9p" ino=76808397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.183392][ T5338] pmem0: [POWERTEC] [ 108.283274][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 108.369055][ T7601] tmpfs: Bad value for 'mpol' [ 108.400815][ T40] audit: type=1400 audit(1765123541.699:529): avc: denied { write } for pid=7605 comm="syz.0.466" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.410140][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 108.417664][ T40] audit: type=1400 audit(1765123541.719:530): avc: denied { ioctl } for pid=7597 comm="syz.1.460" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.494116][ T7614] cgroup: none used incorrectly [ 108.507718][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 108.598533][ T40] audit: type=1400 audit(1765123541.899:531): avc: denied { ioctl } for pid=7628 comm="syz.1.472" path="socket:[20696]" dev="sockfs" ino=20696 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.610385][ T40] audit: type=1400 audit(1765123541.909:532): avc: denied { create } for pid=7628 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 108.624482][ T40] audit: type=1400 audit(1765123541.919:533): avc: denied { sys_admin } for pid=7628 comm="syz.1.472" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 108.655597][ T7629] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 108.665766][ T40] audit: type=1804 audit(1765123541.959:534): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.474" name="/newroot/150/bus/file0" dev="overlay" ino=820 res=1 errno=0 [ 108.749195][ T7644] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 108.995311][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 109.023025][ T7667] netlink: 'syz.1.486': attribute type 5 has an invalid length. [ 109.036183][ T7668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16402 sclass=netlink_route_socket pid=7668 comm=syz.2.487 [ 109.058638][ T7668] openvswitch: netlink: Flow key attr not present in new flow. [ 109.150749][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 109.155728][ T24] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.161279][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 109.171820][ T24] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 109.175955][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.179395][ T24] usb 5-1: Product: 蹟 [ 109.181125][ T24] usb 5-1: Manufacturer: 疎䀋쮨ᣨࢽ魹䙎䖖楳ᬧ昄⮧諿牕敫옦ᙥ㽯딀᳉䕙뚧肠⇽ҧ谩繎㍦쌜鐗嵴偾躓됝叉Ꞟ㒷ሆ烆郹쥁㈀太쥌ᯊ募䕄噢揞蒚迅镌崠틇싯魃揆쉗簬툲Ⱂ䋜겡टਡ畲ⷽ뺔ⵚ衹瞉這䇶㄄ှ骺᳀栆媈䴸뮔ꅙ眜萶嵊וּ閄㚆슚釣멏 [ 109.193135][ T24] usb 5-1: SerialNumber: ᔻ陃᥺拞⽕娵ꐄ猘䖒躱퐞⒪䜷꒴ꑟ␌끌멉즔捆⶝絝⊋嬛䊷䷀晁੻襖︫輝릻廊栾鍉윬ຳⳬ뜊經눢裆䦞댃嘃黩ຏ븰簔窞騯鍸눽㓁솦㩆㶞푇썅䭥卺괶苬샻㔮盻開茖굯캩椾≜㐼蘟墋㩁镋缼砠蜪棩軥茢䞊괪⑾㍬。济륽戔᭲항齾닋ꔽᆲ⹒Éौ嶅볊磄 [ 109.539854][ T7708] xt_hashlimit: invalid interval [ 109.844692][ T7738] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 109.853105][ T7740] loop2: detected capacity change from 0 to 7 [ 109.856194][ T7738] qnx6: wrong signature (magic) in superblock #1. [ 109.858914][ T7738] qnx6: unable to read the first superblock [ 109.862903][ T7206] loop2: [POWERTEC] p1 p2 [ 109.864518][ T7206] loop2: p1 start 1110023002 is beyond EOD, truncated [ 109.867554][ T7206] loop2: p2 start 1815049829 is beyond EOD, truncated [ 109.871927][ T7740] loop2: [POWERTEC] p1 p2 [ 109.874004][ T7740] loop2: p1 start 1110023002 is beyond EOD, truncated [ 109.877122][ T7740] loop2: p2 start 1815049829 is beyond EOD, truncated [ 109.957338][ T7746] input: syz0 as /devices/virtual/input/input11 [ 109.999263][ T7752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57260 sclass=netlink_route_socket pid=7752 comm=syz.1.512 [ 110.140304][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 110.142792][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 110.148384][ T24] usb 5-1: USB disconnect, device number 11 [ 110.555481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.686499][ T5996] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 110.786668][ T5338] pmem0: [POWERTEC] [ 110.835227][ T5996] usb 6-1: Using ep0 maxpacket: 8 [ 110.842349][ T5996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.848261][ T5996] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.851891][ T5996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.858825][ T5996] usb 6-1: config 0 descriptor?? [ 111.081442][ T5996] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 111.193261][ T7819] bond0: (slave syz_tun): Releasing backup interface [ 111.202150][ T7819] bridge_slave_0: left allmulticast mode [ 111.203977][ T7819] bridge_slave_0: left promiscuous mode [ 111.207398][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.211578][ T7819] bridge_slave_1: left allmulticast mode [ 111.213445][ T7819] bridge_slave_1: left promiscuous mode [ 111.215942][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.220379][ T7819] bond0: (slave bond_slave_0): Releasing backup interface [ 111.224729][ T7819] bond0: (slave bond_slave_1): Releasing backup interface [ 111.236874][ T7819] team0: Port device team_slave_0 removed [ 111.244408][ T7819] team0: Port device team_slave_1 removed [ 111.249231][ T7819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.251994][ T7819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.256417][ T7819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.259665][ T7819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.264580][ T7819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.274589][ T141] usb 6-1: USB disconnect, device number 5 [ 111.327613][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 111.485171][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 111.488705][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 111.491858][ T9] usb 7-1: config 255 has an invalid interface number: 81 but max is 0 [ 111.494414][ T9] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 111.498573][ T9] usb 7-1: config 255 has no interface number 0 [ 111.501206][ T9] usb 7-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 111.505965][ T9] usb 7-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.509340][ T9] usb 7-1: config 255 interface 81 has no altsetting 0 [ 111.513646][ T9] usb 7-1: string descriptor 0 read error: -22 [ 111.516206][ T9] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 111.518987][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.526978][ T9] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:255.81/input/input12 [ 111.547695][ C1] usbtouchscreen 7-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 111.789710][ T9] usb 7-1: USB disconnect, device number 6 [ 111.863939][ T7849] openvswitch: netlink: Flow actions attr not present in new flow. [ 111.918426][ T7851] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 111.930330][ T7851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.934826][ T7851] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 111.942262][ T7851] ------------[ cut here ]------------ [ 111.944411][ T7851] WARNING: fs/exec.c:118 at path_noexec+0x1ca/0x230, CPU#0: syz.1.544/7851 [ 111.947259][ T7851] Modules linked in: [ 111.948648][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.1.544 Not tainted syzkaller #0 PREEMPT(full) [ 111.951538][ T7851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.954861][ T7851] RIP: 0010:path_noexec+0x1ca/0x230 [ 111.956658][ T7851] Code: ff 83 e3 02 48 89 de e8 b4 22 81 ff 48 85 db 41 0f 95 c4 e8 d8 27 81 ff 44 89 e0 5b 5d 41 5c e9 fc 66 3c 09 e8 c7 27 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 e9 f4 ea ff e9 a8 fe ff ff e8 df f4 ea [ 111.962576][ T7851] RSP: 0018:ffffc9000403fc60 EFLAGS: 00010283 [ 111.964504][ T7851] RAX: 00000000000000c2 RBX: ffff888100ea08e0 RCX: ffffc9000c582000 [ 111.967106][ T7851] RDX: 0000000000080000 RSI: ffffffff823dbca9 RDI: 0000000000000007 [ 111.969591][ T7851] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 111.972079][ T7851] R10: 0000000000000000 R11: ffff8880577154b0 R12: 0000200000ffd000 [ 111.974570][ T7851] R13: 0000000000000001 R14: 0000000000000000 R15: 00000000000000d1 [ 111.977214][ T7851] FS: 00007f17cd9ee6c0(0000) GS:ffff8880d6909000(0000) knlGS:0000000000000000 [ 111.980008][ T7851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.982077][ T7851] CR2: 0000000000000000 CR3: 0000000024dff000 CR4: 0000000000352ef0 [ 111.984515][ T7851] Call Trace: [ 111.985684][ T7851] [ 111.986618][ T7851] do_mmap+0xd23/0x1210 [ 111.988038][ T7851] ? __pfx_do_mmap+0x10/0x10 [ 111.989515][ T7851] ? __pfx_down_write_killable+0x10/0x10 [ 111.991538][ T7851] vm_mmap_pgoff+0x29e/0x470 [ 111.993045][ T7851] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 111.994675][ T7851] ? __fget_files+0x20e/0x3c0 [ 111.996343][ T7851] ksys_mmap_pgoff+0x32c/0x5c0 [ 111.997879][ T7851] __x64_sys_mmap+0x125/0x190 [ 111.999383][ T7851] do_syscall_64+0xcd/0xf80 [ 112.000846][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.002713][ T7851] RIP: 0033:0x7f17cf78f7c9 [ 112.004133][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.010191][ T7851] RSP: 002b:00007f17cd9ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 112.012784][ T7851] RAX: ffffffffffffffda RBX: 00007f17cf9e5fa0 RCX: 00007f17cf78f7c9 [ 112.015382][ T7851] RDX: 0000000004000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 112.017868][ T7851] RBP: 00007f17cf813f91 R08: 000000000000000a R09: 0000000082000000 [ 112.020343][ T7851] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 112.022752][ T7851] R13: 00007f17cf9e6038 R14: 00007f17cf9e5fa0 R15: 00007ffe785a8a08 [ 112.025307][ T7851] [ 112.026327][ T7851] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.028605][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.1.544 Not tainted syzkaller #0 PREEMPT(full) [ 112.031458][ T7851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.034825][ T7851] Call Trace: [ 112.035939][ T7851] [ 112.036890][ T7851] dump_stack_lvl+0x3d/0x1f0 [ 112.038379][ T7851] vpanic+0x640/0x6f0 [ 112.039655][ T7851] ? path_noexec+0x1ca/0x230 [ 112.041106][ T7851] panic+0xca/0xd0 [ 112.042306][ T7851] ? __pfx_panic+0x10/0x10 [ 112.043703][ T7851] check_panic_on_warn+0xab/0xb0 [ 112.045148][ T7851] __warn+0x108/0x3c0 [ 112.046287][ T7851] __report_bug+0x2a0/0x520 [ 112.047558][ T7851] ? path_noexec+0x1ca/0x230 [ 112.048987][ T7851] ? __pfx___report_bug+0x10/0x10 [ 112.050588][ T7851] ? find_held_lock+0x2b/0x80 [ 112.052111][ T7851] ? futex_unqueue+0x133/0x2c0 [ 112.053671][ T7851] ? arch_get_unmapped_area_topdown+0x60b/0xa00 [ 112.055639][ T7851] ? path_noexec+0x1ca/0x230 [ 112.057157][ T7851] report_bug+0xb2/0x220 [ 112.058521][ T7851] ? path_noexec+0x1ca/0x230 [ 112.059993][ T7851] handle_bug+0x127/0x260 [ 112.061372][ T7851] exc_invalid_op+0x17/0x50 [ 112.062959][ T7851] asm_exc_invalid_op+0x1a/0x20 [ 112.064506][ T7851] RIP: 0010:path_noexec+0x1ca/0x230 [ 112.066184][ T7851] Code: ff 83 e3 02 48 89 de e8 b4 22 81 ff 48 85 db 41 0f 95 c4 e8 d8 27 81 ff 44 89 e0 5b 5d 41 5c e9 fc 66 3c 09 e8 c7 27 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 e9 f4 ea ff e9 a8 fe ff ff e8 df f4 ea [ 112.072148][ T7851] RSP: 0018:ffffc9000403fc60 EFLAGS: 00010283 [ 112.074070][ T7851] RAX: 00000000000000c2 RBX: ffff888100ea08e0 RCX: ffffc9000c582000 [ 112.076549][ T7851] RDX: 0000000000080000 RSI: ffffffff823dbca9 RDI: 0000000000000007 [ 112.079005][ T7851] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 112.081480][ T7851] R10: 0000000000000000 R11: ffff8880577154b0 R12: 0000200000ffd000 [ 112.083951][ T7851] R13: 0000000000000001 R14: 0000000000000000 R15: 00000000000000d1 [ 112.086471][ T7851] ? path_noexec+0x1c9/0x230 [ 112.087947][ T7851] do_mmap+0xd23/0x1210 [ 112.089246][ T7851] ? __pfx_do_mmap+0x10/0x10 [ 112.090720][ T7851] ? __pfx_down_write_killable+0x10/0x10 [ 112.092489][ T7851] vm_mmap_pgoff+0x29e/0x470 [ 112.093927][ T7851] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 112.095546][ T7851] ? __fget_files+0x20e/0x3c0 [ 112.097069][ T7851] ksys_mmap_pgoff+0x32c/0x5c0 [ 112.098584][ T7851] __x64_sys_mmap+0x125/0x190 [ 112.100072][ T7851] do_syscall_64+0xcd/0xf80 [ 112.101523][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.103384][ T7851] RIP: 0033:0x7f17cf78f7c9 [ 112.104828][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.110806][ T7851] RSP: 002b:00007f17cd9ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 112.113429][ T7851] RAX: ffffffffffffffda RBX: 00007f17cf9e5fa0 RCX: 00007f17cf78f7c9 [ 112.115912][ T7851] RDX: 0000000004000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 112.118379][ T7851] RBP: 00007f17cf813f91 R08: 000000000000000a R09: 0000000082000000 [ 112.120844][ T7851] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000 [ 112.123308][ T7851] R13: 00007f17cf9e6038 R14: 00007f17cf9e5fa0 R15: 00007ffe785a8a08 [ 112.125857][ T7851] [ 112.127561][ T7851] Kernel Offset: disabled [ 112.128936][ T7851] Rebooting in 86400 seconds..