last executing test programs: 5.563058933s ago: executing program 0 (id=1844): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r1 = memfd_create(&(0x7f0000000000)='@[\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000000980)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffe, r1, 0x0, 0x0, 0x8}, 0x0]) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffe1ffffffaaaaaaaaaa0008004c0000440000006460babb441c0e01ac14140000000000e000000200000000ac1414aa000000000d009078000000000000000037470000000900"/84], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 4.62314888s ago: executing program 0 (id=1873): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="5800000010001fff000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0918000000000000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000005"], 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000e40)=""/4096, 0x1000}) 4.561349736s ago: executing program 0 (id=1874): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000"], 0x10) (async) socket$inet(0x2, 0x2, 0x73) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80), 0x12) (async) r4 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 4.560626381s ago: executing program 0 (id=1876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001400)={0x0, 'veth0_vlan\x00', {0x83}, 0x202}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xe3}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}, @IPSET_ATTR_DATA={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8068}, 0x20040014) 4.29288513s ago: executing program 0 (id=1879): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="00000097c3199945e3eadae14708c82ec713c20000070002", 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x40402, &(0x7f0000000200)={[{@userxattr}, {@uuid_on}, {@xino_auto}, {@index_on}, {@uuid_off}, {@xino_off}, {@uuid_off}], [{@obj_role={'obj_role', 0x3d, 'hash\x00'}}, {@uid_gt={'uid>', 0xee00}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000d40), 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xff}}, './file1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4008010) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000dc0)=""/265, 0x109}, {&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f0000000380)=""/11}, {&(0x7f0000000500)=""/48}, {&(0x7f0000000540)=""/30}, {&(0x7f0000000600)=""/186}, {&(0x7f0000000700)=""/219}], 0x2}, 0x40001}], 0x40000d0, 0x20, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe80, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0x0, 0xffffffffffffffd9, 0xfffffffffffffd4e}, 0x28) read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x2, &(0x7f0000000280)={'trans=virtio,', {[{@dfltuid}]}}) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 1.961260453s ago: executing program 2 (id=1898): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0xdc1) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000003400), 0x101001, 0x0) write$cgroup_int(r2, &(0x7f0000003880)=0x100000000, 0x12) write$binfmt_aout(r1, 0x0, 0xffffffdb) fanotify_mark(r1, 0x4, 0x8, r1, &(0x7f0000000000)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) recvmsg$unix(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000000)=""/69, 0x45}], 0x1}, 0x40000020) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@local, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) 1.51153391s ago: executing program 3 (id=1909): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) accept(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000080)=0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x9, 0x2, 0x3, 0xf, 0x8, 0x9}, &(0x7f0000000100)=0x20) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) 1.510592037s ago: executing program 3 (id=1910): ptrace$getregset(0x4204, 0xffffffffffffffff, 0x2, &(0x7f0000000040)={&(0x7f0000000000)=""/17, 0x11}) (async) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/1, 0x1}], 0x2) (async) r1 = getpgrp(0x0) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=""/93, 0x5d}) (async, rerun: 64) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) (rerun: 64) ptrace$getregset(0x4204, r2, 0x6, &(0x7f0000000400)={&(0x7f0000000300)=""/194, 0xc2}) (async) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000540)={&(0x7f0000000440)=""/242, 0xf2}) ptrace$getregset(0x4204, r1, 0x4, &(0x7f0000000600)={&(0x7f0000000580)=""/128, 0x80}) (async) write$cgroup_pid(r0, &(0x7f0000000640)=r2, 0x12) fcntl$setownex(r0, 0xf, &(0x7f0000000680)={0x2, r2}) (async, rerun: 64) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x2221c0, 0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) connect$nfc_llcp(r3, &(0x7f0000000740)={0x27, r4, 0x1, 0x4, 0x9, 0x2b, "23588f4d86864aaa5d7a8ee1bb2cad5a1330bcec62c8012a595bf22a8fdd0a550b342acc24ceceb744120a059c9aced81703936ee77e4affe1077d53746fe5", 0x1f}, 0x60) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000007c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f0000000800)={0x48, 0xb, r3, 0x0, r5}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000008c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000900)={0x48, 0x5, r7}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000980)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000b00)={0x30, r8, 0x0, 0x0, 0x9, 0x0, 0x89, &(0x7f0000000a00)=""/243}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000b40)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r9) (async) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000b80)={'veth0_macvtap\x00', 0x1000}) (async) read$FUSE(r3, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregset(0x4204, r10, 0x2, &(0x7f0000002cc0)={&(0x7f0000002c00)=""/163, 0xa3}) (async, rerun: 64) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000002d00)=0x49) (async, rerun: 64) write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000002d40)={0x14}, 0x14) 1.42261213s ago: executing program 3 (id=1911): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3}, 0x40) r4 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_create(0xb, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) 1.31858818s ago: executing program 3 (id=1922): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x105c42, 0x5) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe133, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x1000200, 0x0, 0x2, 0xffff, 0xac, "4ae22a00000100000000000400", 0x0, 0x3}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xc7) 1.093921761s ago: executing program 2 (id=1914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x450, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x8000, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x7, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x3cf, 0x91, "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"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x450}}, 0x0) 1.093590113s ago: executing program 3 (id=1915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x1, 0x40000004}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c0) (async, rerun: 32) readv(r3, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/153, 0x99}], 0x1) (async, rerun: 32) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000, 0xf9}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x21, 0x0, r5, 0x0, 0x0, 0x0, 0x60, 0x1}) (async, rerun: 64) io_uring_enter(r6, 0x4913, 0x770e, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000004000001c0012000c00e5b3059aabf6ee0100626f6e6413a9da08a562a4382e79a5447978d848c1b31253e935bb5c0e9a19c39b309263950a006fb0757bca3652958bb7c0596229551277f9176557830f7e950726633cb5a8482435889b3a7fa0ff9c347cfae1e93400080fb624c1de2cb4c64f1e33bc586d81f4df4c128929309c48a52f279cb449ce1ccea4f981a4369b188cbc7daade2128302551d0c1f8f0830420dfa8a167fae94fa5726a6d3ae301a58ce2cccb00dbf4a5c217cdda3dcd7bdb3d9ba85d690721d43c5e63ecc8f3c9134c1bfcbdbd9fd988bd6d0c2d9996e593d67dc000f22c"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@getqdisc={0x30, 0x26, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xffe0, 0x9}, {0xf, 0xe}, {0xfff3, 0xffe0}}, [{0x4}, {0x4}, {0x5a}]}, 0x30}}, 0x8001) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000380)) (async, rerun: 32) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa9aaaaa86dd6092c01700442f00fe8000000000000000000000000000bb00000000000000b30e00ffff00000086dd080088be000000001000000001000449774a0000080022eb00000000200000000200000000000000000000000800655800"/122], 0x0) (rerun: 32) 1.092302402s ago: executing program 1 (id=1924): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0), 0xa0400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003fd000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800000a01"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="080027000000000008002600b40900000800a10079"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000012c0), 0xa0400, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) dup(r3) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003fd000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800000a01"]) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="080027000000000008002600b40900000800a10079"], 0x34}}, 0x0) (async) 1.048624277s ago: executing program 2 (id=1916): r0 = fsopen(&(0x7f0000000040)='gfs2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/50) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)={[{0x2b, 'net_prio'}, {0x2b, 'devices'}, {0x2b, 'rdma'}, {0x2b, 'hugetlb'}, {0x2d, 'devices'}, {0x2d, 'io'}, {0x2b, 'io'}, {0x2d, 'hugetlb'}]}, 0x3c) writev(r3, &(0x7f0000001480)=[{&(0x7f0000000100)="0c37f8246f3e4c0f268894edcd5b1a9964c8dae6b413288a16aa77bca416bb6c2ed80e4c948037035c05a3f6d188b7f720f619c3aed8885056565487fbfcf347f9759031056a5c6f6510bba78a970af194a3bfff9ee162bfd08f9d87b199bad71d4b704bbe05f9458f7edb6ea6df3da93d4439b26d0a2fd23b7969b4ccf926f6c02246b837960e2e6ffd0b", 0x8b}, {&(0x7f0000000440)='0', 0x1}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000b1400022cbd7073fddbdf25080003000200e9ff0800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000300)={0x51c, 0x7fff, 0x7ff, 0x8001}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6299b5, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x8, 0xff, r7}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x80000000, 0x1, 0x807c}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x16, &(0x7f0000001000)=ANY=[@ANYRES32=r4], &(0x7f00000003c0)='syzkaller\x00', 0x67d6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000040)="9b2d", 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl(r4, 0xfffffffd, &(0x7f0000001dc0)="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") 952.24902ms ago: executing program 3 (id=1917): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x7c, 0x40}, 0x2) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket(0x15, 0x4, 0x401) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x10, 0x700, 0x1000, 0x6, {{0x17, 0x4, 0x2, 0x4, 0x5c, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x1b, 0x1, [{0x1, 0x3, "cc"}, {0x6, 0x4, "3fd9"}, {0x6, 0x2}, {0x0, 0xc, "6a905406bb5929443deb"}]}, @cipso={0x86, 0xe, 0x0, [{0x7, 0x8, "a5a5652d91f5"}]}, @noop, @lsrr={0x83, 0x1b, 0x72, [@rand_addr=0x64010100, @loopback, @multicast2, @remote, @multicast2, @remote]}]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x689c35e907a941b8) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x7, 0x408200) ioctl$DRM_IOCTL_GEM_CLOSE(r7, 0x40086409, &(0x7f0000000380)) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r2) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r8, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x840) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000500), 0x4) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000540)=0xefe6, 0x4) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44040) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r10, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r11, 0x0, 0x8bae, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x23, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}}, 0x200040c0) sendmsg$inet(r1, &(0x7f0000000d40)={&(0x7f0000000880)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000b80)=[{&(0x7f00000008c0)="1bb7e921bf6346178cd3c90df58052d6b4fe5265b907d33cb8e807c9ea3d51a49fbf059b65f4a586c9714d00973a52ffa891788b3504617c5cfcb3c6c3904ec9adf355d97772ebbc27ae5731ffdb0bb0e5274da7fb85022325b3783db6d4070ae9c9f5861eeed556d9b6fb690a7ef1a173fe23b52d0ee1967428c491c511cc890e574cfd632cdc40eb45a0e4c124cef01cc7d7932e97b0ce8861eb3b55f53eb87a59db53f99bf918b0286b8586be063b4a81a9d0ef974f8adefb4b44ff8c51b6c9e7b507fd39958b6ebd6f7b6beb83db3a", 0xd1}, {&(0x7f00000009c0)="b5a5b238c248", 0x6}, {&(0x7f0000000a00)="53604ff1c050c9a0c34934afb6e6df6f51e1cc07f927be45e9bb0b43ebcf3245fe3970162f49", 0x26}, {&(0x7f0000000a40)="7300d1cec659641e7172e3935a74e487643760ef7cf1c1f037d4d73cc0e971e4b45ac1967f1ad92be51b9f283cc081eab7acb30545e1143724b86da874afe9cce777bdb1477ef22b2cb65ee4041821001021803adc0b81873ea15bf07215a273401fa83fd0a61f7549e9857163809c4fb18b4ab009f8d0f0b856b3539f8522d22808a49586274e98ed713986a315049a403a3c99fe37968cc24af27094a8382449752781cee991059f6a3691a34087a1e2b3bd09fe30e297627752dd31bf54816ba314041a3f8c0b7e5a485661b044e3cb175fef941bf0506c78d42f0d27c58f4e031210", 0xe4}, {&(0x7f0000000b40)="47b1f2ba51eed191fd8271421471a1aae4c6e7b77a09fa8a", 0x18}], 0x5, &(0x7f0000000c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7c8}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0xf, [{@loopback, 0x66}, {@private=0xa010101, 0x8}]}, @generic={0xa, 0x7, "65bb729669"}, @timestamp={0x44, 0x4, 0x48}, @noop, @timestamp={0x44, 0x18, 0x61, 0x0, 0x2, [0x8001, 0x7, 0x401, 0xd06, 0x0]}, @cipso={0x86, 0x32, 0x1, [{0x7, 0x3, "df"}, {0x6, 0xc, "5b4ab89d619a648e5f1b"}, {0x0, 0x8, "fd13a23da871"}, {0x6, 0x7, "289fbe85bd"}, {0x6, 0xe, "2e5cf7bc6ab87309afd338d6"}]}, @cipso={0x86, 0x2a, 0x2, [{0x7, 0x7, "58958db194"}, {0x6, 0xd, "00d45640be41893fabc23c"}, {0x2, 0x4, "f1b5"}, {0x7, 0x8, "6d8b153299ad"}, {0x0, 0x4, "b927"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x89}}], 0x108}, 0x24008000) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x4) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000ec0), r2) sendmsg$FOU_CMD_GET(r10, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x94, r12, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) read$qrtrtun(r0, &(0x7f0000001040)=""/104, 0x68) bind$inet6(r2, &(0x7f00000010c0)={0xa, 0x4e23, 0x3c, @remote, 0x401}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000001100)='veno\x00', 0x5) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000001140)=0x9) sendmsg$NL80211_CMD_START_NAN(r10, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, r11, 0x22, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x20040000) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000001280)={'macvlan1\x00'}) 952.01971ms ago: executing program 2 (id=1918): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x3081}, 0x20000846) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4041) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) 948.568047ms ago: executing program 1 (id=1919): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0), 0xb315) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x12) ptrace(0x4208, r1) tkill(r1, 0x12) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200c40, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0x80000001}) 853.005053ms ago: executing program 1 (id=1920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="30ca5477855ace5156d6d4660372", 0xe}, {0x0}], 0x2) syz_emit_ethernet(0x9a, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb00642b00fc020000000000000000000000000000fe8000000000000000000000000000aa33000000006490783a000000000000000000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7ae9bb108402fa83b1d661c18462075368a1860929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665cc18492b"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r8) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r9, @ANYBLOB="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"], 0x44}}, 0x0) sendto$packet(r6, &(0x7f0000000180)='9', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x7, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = accept$ax25(r8, &(0x7f0000000240)={{0x3, @default}, [@bcast, @remote, @null, @default, @netrom, @remote, @netrom, @bcast]}, &(0x7f00000000c0)=0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)) 782.600081ms ago: executing program 2 (id=1923): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x0) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10) sendto$inet6(r5, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000040000701fc057c000008003680040002000c00018008000f8004009d80"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000140)='}\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x52, 0xa, 0x3, "3258c5c00e7f94ae1e008faa001b0000f4ff4000000000000000e91aba2800", 0x31424752}) setns(r8, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 781.701266ms ago: executing program 1 (id=1925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000e, 0x0, @void, @value}, 0x28) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x3000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x80, 0x100}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 683.168408ms ago: executing program 1 (id=1926): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7d5, 0x1525b39e}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4010, &(0x7f0000000140)={[{@none}, {@subsystem='cpuacct'}, {@noprefix}], [{@uid_eq={'uid', 0x3d, r0}}]}) 682.591655ms ago: executing program 2 (id=1927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000300)="f4c4e17d2f0f0ffe8ca1000000000f20d835200000000f22d80f23daf00fb13f0f30c744240007000000c744240202000000c7442406000000000f01142466ba4100ec6726f30f59db", 0x49}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x8000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 681.002619ms ago: executing program 1 (id=1934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"e2d524bc"}}}}}}}, 0x0) r1 = getpid() gettid() r2 = syz_pidfd_open(r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(0x0, 0x0, 0x280) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4801}, 0x20000810) ioctl$EXT4_IOC_MIGRATE(r2, 0xff07) 0s ago: executing program 0 (id=1879): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-ssse3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="00000097c3199945e3eadae14708c82ec713c20000070002", 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x40402, &(0x7f0000000200)={[{@userxattr}, {@uuid_on}, {@xino_auto}, {@index_on}, {@uuid_off}, {@xino_off}, {@uuid_off}], [{@obj_role={'obj_role', 0x3d, 'hash\x00'}}, {@uid_gt={'uid>', 0xee00}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000d40), 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xff}}, './file1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4008010) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000dc0)=""/265, 0x109}, {&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f0000000380)=""/11}, {&(0x7f0000000500)=""/48}, {&(0x7f0000000540)=""/30}, {&(0x7f0000000600)=""/186}, {&(0x7f0000000700)=""/219}], 0x2}, 0x40001}], 0x40000d0, 0x20, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe80, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0x0, 0xffffffffffffffd9, 0xfffffffffffffd4e}, 0x28) read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x2, &(0x7f0000000280)={'trans=virtio,', {[{@dfltuid}]}}) read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 105.616340][ T40] audit: type=1400 audit(1746462022.184:659): avc: denied { map } for pid=8968 comm="syz.3.844" path="/257/file0/pids.events" dev="9p" ino=35913963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.626433][ T40] audit: type=1400 audit(1746462022.184:660): avc: denied { execute } for pid=8968 comm="syz.3.844" path="/257/file0/pids.events" dev="9p" ino=35913963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.662765][ T836] usb 6-1: USB disconnect, device number 14 [ 105.748168][ T40] audit: type=1400 audit(1746462022.314:661): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.802432][ T8974] sctp: [Deprecated]: syz.0.847 (pid 8974) Use of int in maxseg socket option. [ 105.802432][ T8974] Use struct sctp_assoc_value instead [ 105.853049][ T40] audit: type=1400 audit(1746462022.414:662): avc: denied { write } for pid=8975 comm="syz.3.846" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 106.092401][ T8985] __nla_validate_parse: 4 callbacks suppressed [ 106.092413][ T8985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.851'. [ 106.192838][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 106.505337][ T835] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 106.641324][ T9016] netlink: 'syz.0.863': attribute type 25 has an invalid length. [ 106.658065][ T835] usb 6-1: Using ep0 maxpacket: 32 [ 106.661572][ T9015] delete_channel: no stack [ 106.662230][ T835] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 106.681549][ T835] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.689465][ T835] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.699597][ T835] usb 6-1: Product: syz [ 106.701408][ T835] usb 6-1: Manufacturer: syz [ 106.703363][ T835] usb 6-1: SerialNumber: syz [ 106.721979][ T835] usb 6-1: config 0 descriptor?? [ 106.725252][ T8997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.728665][ T835] hub 6-1:0.0: bad descriptor, ignoring hub [ 106.731311][ T835] hub 6-1:0.0: probe with driver hub failed with error -5 [ 106.759050][ T9018] netlink: 36 bytes leftover after parsing attributes in process `syz.0.864'. [ 106.763847][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 107.047766][ T835] usb 6-1: USB disconnect, device number 15 [ 107.301901][ T9048] netlink: 'syz.1.873': attribute type 8 has an invalid length. [ 107.304900][ T9048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.873'. [ 107.309541][ T9048] tmpfs: Unknown parameter 'I'w /h^ge' [ 109.044270][ T9082] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 109.082994][ T9087] tmpfs: Bad value for 'mpol' [ 109.130959][ T9097] netlink: 'syz.1.887': attribute type 27 has an invalid length. [ 109.132814][ T9098] lo: left promiscuous mode [ 109.156543][ T9098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.200972][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 109.200987][ T40] audit: type=1400 audit(1746462025.764:669): avc: denied { remount } for pid=9104 comm="syz.3.889" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.220971][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.350289][ T9097] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.353507][ T9097] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.357594][ T9097] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.360392][ T9097] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.365371][ T9097] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 109.463651][ T9114] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 109.828032][ T9128] kvm: MONITOR instruction emulated as NOP! [ 109.867569][ T9135] tls_set_device_offload: netdev not found [ 109.988747][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 110.016428][ T9137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.029666][ T9142] program syz.0.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.031821][ T9137] vlan2: entered allmulticast mode [ 110.035338][ T9137] bond3: entered allmulticast mode [ 110.127859][ T40] audit: type=1400 audit(1746462026.694:670): avc: denied { getopt } for pid=9145 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 110.248075][ T40] audit: type=1400 audit(1746462026.814:671): avc: denied { create } for pid=9150 comm="syz.3.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.269616][ T40] audit: type=1400 audit(1746462026.834:672): avc: denied { read write } for pid=5933 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.278441][ T40] audit: type=1400 audit(1746462026.834:673): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.283442][ T9154] netlink: set zone limit has 8 unknown bytes [ 110.287902][ T40] audit: type=1400 audit(1746462026.834:674): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.329319][ T9159] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 110.332071][ T9159] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.336893][ T9159] vhci_hcd vhci_hcd.0: Device attached [ 110.374823][ T40] audit: type=1400 audit(1746462026.934:675): avc: denied { shutdown } for pid=9165 comm="syz.2.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.526197][ T6244] vhci_hcd: vhci_device speed not set [ 110.584545][ T6244] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 111.162257][ T9160] vhci_hcd: connection reset by peer [ 111.164201][ T104] vhci_hcd: stop threads [ 111.166118][ T104] vhci_hcd: release socket [ 111.168216][ T104] vhci_hcd: disconnect device [ 111.316668][ T40] audit: type=1400 audit(1746462027.884:676): avc: denied { read } for pid=9180 comm="syz.2.911" path="socket:[26801]" dev="sockfs" ino=26801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.318820][ T9183] overlayfs: missing 'lowerdir' [ 111.342793][ T9181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.366008][ T40] audit: type=1400 audit(1746462027.934:677): avc: denied { name_connect } for pid=9180 comm="syz.2.911" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 111.368249][ T9181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.054543][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 112.194525][ T29] usb 6-1: device descriptor read/64, error -71 [ 112.249342][ T40] audit: type=1400 audit(1746462028.814:678): avc: denied { execute } for pid=9209 comm="syz.0.922" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.259083][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 112.294037][ T9214] tmpfs: Group quota inode hardlimit too large. [ 112.297542][ T9214] tmpfs: Bad value for 'nr_blocks' [ 112.416227][ T24] usb 8-1: config index 0 descriptor too short (expected 1028, got 146) [ 112.419367][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.423168][ T24] usb 8-1: config 0 has no interfaces? [ 112.426520][ T24] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 112.431471][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 112.435085][ T24] usb 8-1: SerialNumber: syz [ 112.440689][ T24] usb 8-1: config 0 descriptor?? [ 112.454915][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 112.594490][ T29] usb 6-1: device descriptor read/64, error -71 [ 112.715534][ T29] usb usb6-port1: attempt power cycle [ 112.872037][ T9245] sit0: entered promiscuous mode [ 112.886495][ T9245] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 112.889190][ T9245] netlink: 1 bytes leftover after parsing attributes in process `syz.2.931'. [ 112.935759][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 113.054541][ T29] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 113.071045][ T9250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.085497][ T29] usb 6-1: device descriptor read/8, error -71 [ 113.161392][ T9254] lo speed is unknown, defaulting to 1000 [ 113.279350][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 113.345823][ T29] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 113.380674][ T29] usb 6-1: device descriptor read/8, error -71 [ 113.402526][ T9259] hsr_slave_1 (unregistering): left promiscuous mode [ 113.421089][ T9262] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 113.424534][ T9262] netlink: 'syz.2.938': attribute type 2 has an invalid length. [ 113.484833][ T29] usb usb6-port1: unable to enumerate USB device [ 113.521989][ T9269] overlayfs: failed to resolve './file0': -2 [ 113.571504][ T9273] binder: 9272:9273 ioctl c0306201 2000000003c0 returned -14 [ 113.995444][ T1495] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 114.164483][ T1495] usb 7-1: Using ep0 maxpacket: 8 [ 114.167703][ T1495] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 114.170417][ T1495] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.173277][ T1495] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.176708][ T1495] usb 7-1: config 250 has no interface number 0 [ 114.178815][ T1495] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.182734][ T1495] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.186182][ T1495] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 114.189926][ T1495] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.193445][ T1495] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 114.197942][ T1495] usb 7-1: config 250 interface 228 has no altsetting 0 [ 114.201321][ T1495] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 114.204201][ T1495] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 114.207015][ T1495] usb 7-1: Product: syz [ 114.208453][ T1495] usb 7-1: SerialNumber: syz [ 114.215854][ T1495] hub 7-1:250.228: bad descriptor, ignoring hub [ 114.217929][ T1495] hub 7-1:250.228: probe with driver hub failed with error -5 [ 114.416991][ T1495] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 114.618380][ T9280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.622985][ T9280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.734721][ T1495] usb 7-1: USB disconnect, device number 11 [ 114.739867][ T1495] usblp0: removed [ 114.841519][ T9284] No control pipe specified [ 114.957699][ T5975] usb 8-1: USB disconnect, device number 10 [ 115.084494][ T24] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 115.246989][ T24] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 115.250480][ T24] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 115.254064][ T24] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 115.257336][ T24] usb 7-1: config 250 has no interface number 0 [ 115.259994][ T24] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 115.264355][ T24] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 14385, setting to 64 [ 115.268503][ T24] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 115.273715][ T24] usb 7-1: config 250 interface 228 has no altsetting 0 [ 115.277455][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 115.280707][ T24] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 115.284161][ T24] usb 7-1: Product: syz [ 115.285920][ T24] usb 7-1: SerialNumber: syz [ 115.294665][ T24] hub 7-1:250.228: bad descriptor, ignoring hub [ 115.297363][ T24] hub 7-1:250.228: probe with driver hub failed with error -5 [ 115.479688][ T9291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 115.483154][ T9291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 115.486679][ T9291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 115.490314][ T9291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 115.497584][ T24] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 115.524841][ T24] usb 7-1: USB disconnect, device number 12 [ 115.528140][ T24] usblp0: removed [ 115.734680][ T6244] vhci_hcd: vhci_device speed not set [ 115.800932][ T9295] bridge2: entered promiscuous mode [ 115.972460][ T9302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.953'. [ 115.972847][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 115.972861][ T40] audit: type=1400 audit(1746462032.534:681): avc: denied { write } for pid=9301 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.973013][ T9303] netlink: 68 bytes leftover after parsing attributes in process `syz.3.953'. [ 115.990507][ T40] audit: type=1400 audit(1746462032.534:682): avc: denied { nlmsg_write } for pid=9301 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.117072][ T40] audit: type=1400 audit(1746462032.684:683): avc: denied { read } for pid=9312 comm="syz.2.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.148532][ T9320] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 116.154351][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'. [ 116.497588][ T9338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.503693][ T9338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.964'. [ 116.511605][ T40] audit: type=1400 audit(1746462033.074:684): avc: denied { ioctl } for pid=9336 comm="syz.2.964" path="socket:[26121]" dev="sockfs" ino=26121 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 116.676538][ T9341] nbd: couldn't find device at index 956301312 [ 116.840893][ T9353] netlink: 'syz.0.969': attribute type 9 has an invalid length. [ 116.849184][ T9356] netlink: 'syz.0.969': attribute type 9 has an invalid length. [ 116.989555][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.024095][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.975'. [ 117.068343][ T9374] xt_NFQUEUE: number of total queues is 0 [ 117.114341][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 117.121096][ T9378] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 117.124332][ T9378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.177308][ T9381] mkiss: ax0: crc mode is auto. [ 117.218859][ T9386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.263415][ T9388] netlink: 172 bytes leftover after parsing attributes in process `syz.3.982'. [ 117.508670][ T9409] /dev/sr0: Can't open blockdev [ 117.722964][ T40] audit: type=1400 audit(1746462034.284:685): avc: denied { setattr } for pid=9420 comm="syz.1.993" name="RAW" dev="sockfs" ino=26212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.893063][ T9440] efs: device does not support 512 byte blocks [ 117.896047][ T9440] device does not support 512 byte blocks [ 117.896047][ T9440] [ 118.100601][ T9459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1002'. [ 118.491348][ T9473] team_slave_0: entered allmulticast mode [ 118.532441][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 118.537253][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 118.938041][ T9491] openvswitch: netlink: Actions may not be safe on all matching packets [ 119.066574][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'. [ 119.084694][ T29] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 119.138639][ T40] audit: type=1400 audit(1746462035.704:686): avc: denied { rename } for pid=9499 comm="syz.2.1017" name="#21" dev="tmpfs" ino=1573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.225344][ T29] usb 6-1: device descriptor read/64, error -71 [ 119.259528][ T40] audit: type=1400 audit(1746462035.824:687): avc: denied { lock } for pid=9509 comm="syz.3.1022" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.270163][ T9511] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 119.407327][ T40] audit: type=1400 audit(1746462035.974:688): avc: denied { append } for pid=9525 comm="syz.0.1027" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.494562][ T29] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 119.604842][ T5975] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 119.624556][ T29] usb 6-1: device descriptor read/64, error -71 [ 119.745236][ T29] usb usb6-port1: attempt power cycle [ 119.754857][ T5975] usb 8-1: Using ep0 maxpacket: 32 [ 119.759181][ T5975] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 119.770200][ T5975] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 119.774022][ T5975] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 119.777532][ T5975] usb 8-1: Product: syz [ 119.779455][ T5975] usb 8-1: Manufacturer: syz [ 119.781421][ T5975] usb 8-1: SerialNumber: syz [ 119.789740][ T5975] usb 8-1: config 0 descriptor?? [ 119.792772][ T9523] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 119.798442][ T5975] hub 8-1:0.0: bad descriptor, ignoring hub [ 119.800994][ T5975] hub 8-1:0.0: probe with driver hub failed with error -5 [ 119.909590][ T9539] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1032'. [ 119.913426][ T9539] ip6gretap0: entered promiscuous mode [ 119.915978][ T9539] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1032'. [ 119.921387][ T40] audit: type=1400 audit(1746462036.484:689): avc: denied { read } for pid=9538 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.974749][ T9540] input: syz0 as /devices/virtual/input/input14 [ 120.104947][ T836] usb 8-1: USB disconnect, device number 11 [ 120.107178][ T29] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 120.134946][ T29] usb 6-1: device descriptor read/8, error -71 [ 120.204384][ T9523] sp0: Synchronizing with TNC [ 120.211388][ T9523] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1026'. [ 120.219105][ T9523] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 120.222803][ T9523] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 120.235522][ T9522] [U] [ 120.374642][ T29] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 120.405055][ T29] usb 6-1: device descriptor read/8, error -71 [ 120.514841][ T29] usb usb6-port1: unable to enumerate USB device [ 120.919558][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 120.925402][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 120.975684][ T40] audit: type=1400 audit(1746462037.544:690): avc: denied { map } for pid=9588 comm="syz.3.1037" path="socket:[26511]" dev="sockfs" ino=26511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.988988][ T40] audit: type=1400 audit(1746462037.554:691): avc: denied { accept } for pid=9588 comm="syz.3.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 121.169058][ T9588] delete_channel: no stack [ 121.210785][ T9598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9598 comm=syz.3.1038 [ 121.271918][ T9600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9600 comm=syz.3.1039 [ 121.517640][ T9605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1041'. [ 121.718621][ T9627] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.723759][ T9627] x_tables: ip6_tables: TCPOPTSTRIP.0 target: invalid size 32 (kernel) != (user) 22 [ 121.869570][ T40] audit: type=1400 audit(1746462038.434:692): avc: denied { accept } for pid=9640 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.870003][ T9642] loop6: detected capacity change from 0 to 524287999 [ 121.882788][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.887000][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.890140][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.892637][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.896378][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.898851][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.901754][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.904358][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.907974][ T9642] ldm_validate_partition_table(): Disk read failed. [ 121.910837][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.914265][ T9642] Buffer I/O error on dev loop6, logical block 0, async page read [ 121.918172][ T9642] Dev loop6: unable to read RDB block 0 [ 121.920568][ T9642] loop6: unable to read partition table [ 121.922572][ T9642] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 121.966815][ T9648] lo speed is unknown, defaulting to 1000 [ 122.394193][ T9695] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 122.487788][ T40] audit: type=1400 audit(1746462039.054:693): avc: denied { connect } for pid=9706 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.505091][ T9709] sctp: [Deprecated]: syz.3.1069 (pid 9709) Use of int in max_burst socket option deprecated. [ 122.505091][ T9709] Use struct sctp_assoc_value instead [ 122.554060][ T9717] netlink: 'syz.3.1070': attribute type 4 has an invalid length. [ 122.611785][ T9721] overlayfs: missing 'lowerdir' [ 122.719514][ T9733] ip6tnl1: entered promiscuous mode [ 122.721081][ T9733] ip6tnl1: entered allmulticast mode [ 122.723151][ T9733] team0: Device ip6tnl1 is of different type [ 122.769542][ T9739] nbd: must specify an index to disconnect [ 122.782884][ T9738] tmpfs: Group quota inode hardlimit too large. [ 122.911497][ T40] audit: type=1400 audit(1746462039.464:694): avc: denied { create } for pid=9752 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 122.966598][ T9760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9760 comm=syz.2.1085 [ 122.971204][ T9760] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 122.999637][ T9767] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.001628][ T40] audit: type=1400 audit(1746462039.564:695): avc: denied { mounton } for pid=9761 comm="syz.3.1087" path="/333/file0" dev="9p" ino=35913858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.003370][ T9767] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.015813][ T9767] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.018734][ T9767] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 123.022708][ T9767] geneve3: entered promiscuous mode [ 123.027032][ T9767] geneve3: entered allmulticast mode [ 123.066877][ T9772] openvswitch: netlink: Duplicate key (type 0). [ 123.081509][ T40] audit: type=1400 audit(1746462039.644:696): avc: denied { relabelfrom } for pid=9771 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.089566][ T40] audit: type=1400 audit(1746462039.644:697): avc: denied { relabelto } for pid=9771 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.099283][ T40] audit: type=1400 audit(1746462039.664:698): avc: denied { read } for pid=9776 comm="syz.2.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.219438][ T9785] __nla_validate_parse: 6 callbacks suppressed [ 123.219449][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 123.241651][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 123.291155][ T40] audit: type=1400 audit(1746462039.854:699): avc: denied { name_bind } for pid=9799 comm="syz.0.1098" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.302833][ T9796] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1095'. [ 123.310355][ T9796] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 123.704558][ T29] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 123.864527][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 123.871795][ T29] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 123.874345][ T29] usb 7-1: config 0 has no interface number 0 [ 123.876763][ T29] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.880424][ T29] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 123.885354][ T29] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 123.888316][ T29] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 123.891042][ T29] usb 7-1: Product: syz [ 123.892496][ T29] usb 7-1: SerialNumber: syz [ 123.895594][ T29] usb 7-1: config 0 descriptor?? [ 123.900527][ T29] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 123.903584][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input15 [ 124.344811][ T9876] gfs2: Unknown parameter 'bargier' [ 124.548413][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 124.567381][ T9890] can0: slcan on ptm0. [ 124.635547][ T9890] can0 (unregistered): slcan off ptm0. [ 124.915173][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 125.086009][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.090273][ T24] usb 6-1: config 0 has no interfaces? [ 125.092524][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.095549][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.099213][ T24] usb 6-1: config 0 descriptor?? [ 125.316085][ T24] usb 6-1: USB disconnect, device number 24 [ 125.522290][ T9904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9904 comm=syz.3.1132 [ 125.659536][ T9908] loop6: detected capacity change from 0 to 524287999 [ 125.662378][ T9908] ldm_validate_partition_table(): Disk read failed. [ 125.664793][ T9908] Dev loop6: unable to read RDB block 0 [ 125.666865][ T9908] loop6: unable to read partition table [ 125.668747][ T9908] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 125.735882][ T9912] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 125.740823][ T9914] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 125.744377][ T9914] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 125.774123][ T9916] Unsupported ieee802154 address type: 0 [ 125.803917][ T9920] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 125.882323][ T9920] Process accounting resumed [ 125.943638][ T9935] random: crng reseeded on system resumption [ 125.981180][ T9938] vlan2: entered allmulticast mode [ 125.982927][ T9938] bridge0: entered allmulticast mode [ 126.145096][ T9817] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 126.149127][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 126.150694][ T64] usb 7-1: USB disconnect, device number 13 [ 126.152078][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 126.158242][ T64] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 126.181836][ T9950] sctp: [Deprecated]: syz.1.1149 (pid 9950) Use of int in max_burst socket option deprecated. [ 126.181836][ T9950] Use struct sctp_assoc_value instead [ 126.230286][ T9952] lo speed is unknown, defaulting to 1000 [ 126.281624][ T9959] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 126.318254][ T9963] overlay: Unknown parameter 'Zz-#F<]%gC [ 126.318254][ T9963] SȘȞZ6' [ 126.378791][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 126.381911][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 126.388509][ T9967] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.391473][ T9967] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.394357][ T9967] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.397542][ T9967] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.401529][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 126.404831][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 126.469844][ T9974] can0: slcan on ptm1. [ 126.483090][ T9971] xt_hashlimit: size too large, truncated to 1048576 [ 126.566492][ T9973] can0 (unregistered): slcan off ptm1. [ 126.571024][ T9971] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1158'. [ 126.631751][ T9994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1164'. [ 126.725707][T10011] binder: 10000:10011 ioctl d000941e 200000008340 returned -22 [ 126.726406][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 126.726415][ T40] audit: type=1400 audit(1746462043.294:702): avc: denied { lock } for pid=10009 comm="syz.0.1169" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.738767][T10011] binder: 10000:10011 ioctl c4089434 200000001b40 returned -22 [ 126.742990][ T40] audit: type=1400 audit(1746462043.304:703): avc: denied { transfer } for pid=10000 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 126.749735][ T40] audit: type=1400 audit(1746462043.314:704): avc: denied { read write } for pid=10004 comm="syz.2.1168" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 126.751586][T10005] < [ 126.759487][ T40] audit: type=1400 audit(1746462043.314:705): avc: denied { open } for pid=10004 comm="syz.2.1168" path="/305/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 126.829977][T10025] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 126.880757][ T40] audit: type=1400 audit(1746462043.444:706): avc: denied { bind } for pid=10033 comm="syz.2.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.887795][ T40] audit: type=1400 audit(1746462043.444:707): avc: denied { execute_no_trans } for pid=10033 comm="syz.2.1175" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=30056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 126.932543][T10046] @: renamed from vlan0 [ 126.991635][T10059] nullb0: AHDI p1 [ 126.996721][ T40] audit: type=1400 audit(1746462043.564:708): avc: denied { read } for pid=10058 comm="syz.0.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.997045][T10059] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.361907][T10090] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 127.603211][ T40] audit: type=1400 audit(1746462044.164:709): avc: denied { write } for pid=10124 comm="syz.1.1200" name="net" dev="proc" ino=31026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 127.610084][ T40] audit: type=1400 audit(1746462044.164:710): avc: denied { add_name } for pid=10124 comm="syz.1.1200" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 127.617493][ T40] audit: type=1400 audit(1746462044.164:711): avc: denied { create } for pid=10124 comm="syz.1.1200" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 128.028926][T10153] overlayfs: overlapping lowerdir path [ 128.066966][T10157] macvlan2: entered promiscuous mode [ 128.069315][T10157] bridge0: entered promiscuous mode [ 128.104588][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 128.264491][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 128.268565][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 128.271905][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.276050][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.279828][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.283295][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.287826][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 128.290326][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.293810][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.297701][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.301298][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.305792][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 128.308227][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.311773][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.315705][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.319220][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.325445][ T24] usb 7-1: string descriptor 0 read error: -22 [ 128.327581][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 128.330446][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.349027][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 128.463992][T10179] __nla_validate_parse: 8 callbacks suppressed [ 128.464003][T10179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1219'. [ 128.550431][ T5975] usb 7-1: USB disconnect, device number 14 [ 128.582277][T10189] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 128.737111][T10208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1228'. [ 128.740191][T10208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1228'. [ 128.886684][T10217] IPVS: persistence engine module ip_vs_pe_" not found [ 128.941197][T10223] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1230'. [ 128.944172][T10222] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1230'. [ 129.117861][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'. [ 129.117903][T10233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'. [ 129.518996][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 129.536477][T10247] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 129.538211][T10249] Cannot find set identified by id 65535 to match [ 129.539007][T10247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1238'. [ 129.544385][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 129.551157][T10247] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 129.746370][T10260] SELinux: policydb version 0 does not match my version range 15-34 [ 129.746405][T10260] SELinux: failed to load policy [ 130.001521][T10271] bridge_slave_1 (unregistering): left allmulticast mode [ 130.003881][T10271] bridge_slave_1 (unregistering): left promiscuous mode [ 130.007129][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.012480][T10265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.056006][T10265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.150309][T10265] netlink: 'syz.2.1244': attribute type 2 has an invalid length. [ 130.451258][T10296] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 130.453843][T10296] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 130.457505][T10296] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 130.460034][T10296] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 130.844506][ T6244] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 130.974667][ T6244] usb 8-1: device descriptor read/64, error -71 [ 131.080226][T10301] loop2: detected capacity change from 0 to 7 [ 131.085069][ T5939] Dev loop2: unable to read RDB block 7 [ 131.087303][ T5939] loop2: unable to read partition table [ 131.089169][ T5939] loop2: partition table beyond EOD, truncated [ 131.093439][T10301] Dev loop2: unable to read RDB block 7 [ 131.096558][T10301] loop2: unable to read partition table [ 131.098545][T10301] loop2: partition table beyond EOD, truncated [ 131.100769][T10301] loop_reread_partitions: partition scan of loop2 (3 ) failed (rc=-5) [ 131.135160][ T5975] IPVS: starting estimator thread 0... [ 131.190684][T10309] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 131.199111][T10309] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 131.201325][T10309] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.203828][T10309] vhci_hcd vhci_hcd.0: Device attached [ 131.203971][T10313] xt_hashlimit: invalid interval [ 131.208037][T10310] vhci_hcd: unknown pdu 2 [ 131.214502][ T1255] vhci_hcd: stop threads [ 131.216073][ T1255] vhci_hcd: release socket [ 131.217523][ T1255] vhci_hcd: disconnect device [ 131.234925][T10304] IPVS: using max 44 ests per chain, 105600 per kthread [ 131.235453][ T6244] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 131.252962][T10315] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4076008399 (16304033596 ns) > initial count (3225157632 ns). Using initial count to start timer. [ 131.365213][ T6244] usb 8-1: device descriptor read/64, error -71 [ 131.419916][T10320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10320 comm=syz.2.1262 [ 131.474816][ T6244] usb usb8-port1: attempt power cycle [ 131.641792][T10333] netlink: 'syz.2.1266': attribute type 29 has an invalid length. [ 131.815559][T10352] netlink: 'syz.1.1270': attribute type 4 has an invalid length. [ 131.834509][ T6244] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 131.843058][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 131.843074][ T40] audit: type=1400 audit(1746462048.404:725): avc: denied { getopt } for pid=10353 comm="syz.0.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 131.855165][ T6244] usb 8-1: device descriptor read/8, error -71 [ 131.876568][T10354] lo speed is unknown, defaulting to 1000 [ 132.051876][T10361] tmpfs: Bad value for 'nr_inodes' [ 132.094758][ T6244] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 132.116333][ T6244] usb 8-1: device descriptor read/8, error -71 [ 132.146959][ T40] audit: type=1400 audit(1746462048.714:726): avc: denied { write } for pid=10364 comm="syz.0.1275" path="socket:[32064]" dev="sockfs" ino=32064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 132.235014][ T6244] usb usb8-port1: unable to enumerate USB device [ 132.274612][ T40] audit: type=1400 audit(1746462048.834:727): avc: denied { execute } for pid=10367 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 132.285027][ T40] audit: type=1400 audit(1746462048.834:728): avc: denied { execute_no_trans } for pid=10367 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 132.294181][ T1255] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.295228][ T40] audit: type=1400 audit(1746462048.854:729): avc: denied { setopt } for pid=10368 comm="syz.0.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.378184][ T1255] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.440100][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.451013][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.451755][ T1255] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.454802][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.461206][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.466535][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.476906][ T5289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.485146][ T5289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.489034][ T5289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.494136][ T5289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.499842][ T5289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.506225][ T40] audit: type=1400 audit(1746462049.074:730): avc: denied { mounton } for pid=10371 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 132.521666][ T1255] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.549069][T10371] lo speed is unknown, defaulting to 1000 [ 132.557425][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.559576][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.698417][ T1255] bridge_slave_1: left allmulticast mode [ 132.700341][ T1255] bridge_slave_1: left promiscuous mode [ 132.703172][ T1255] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.708592][ T1255] bridge_slave_0: left allmulticast mode [ 132.710489][ T1255] bridge_slave_0: left promiscuous mode [ 132.713010][ T1255] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.822014][T10383] netlink: zone id is out of range [ 133.176950][ T1255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.181552][ T1255] bond_slave_0: left promiscuous mode [ 133.186631][ T1255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.190830][ T1255] bond_slave_1: left promiscuous mode [ 133.194250][ T1255] bond0 (unregistering): Released all slaves [ 133.205785][ T1255] bond1 (unregistering): Released all slaves [ 133.216929][ T1255] bond2 (unregistering): Released all slaves [ 133.270802][T10371] chnl_net:caif_netlink_parms(): no params data found [ 133.389072][ T1255] tipc: Disabling bearer [ 133.396635][ T1255] tipc: Left network mode [ 133.419248][T10371] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.421634][T10371] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.424113][T10371] bridge_slave_0: entered allmulticast mode [ 133.428098][T10371] bridge_slave_0: entered promiscuous mode [ 133.443937][T10371] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.450072][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.453151][T10371] bridge_slave_1: entered allmulticast mode [ 133.458027][T10371] bridge_slave_1: entered promiscuous mode [ 133.543788][T10371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.556498][T10371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.638851][T10371] team0: Port device team_slave_0 added [ 133.666254][T10371] team0: Port device team_slave_1 added [ 133.731202][T10371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.733712][T10410] netlink: 'syz.1.1282': attribute type 11 has an invalid length. [ 133.734167][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.737688][T10410] __nla_validate_parse: 3 callbacks suppressed [ 133.737701][T10410] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1282'. [ 133.745895][T10371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.758479][T10371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.760947][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.770268][T10371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.789441][ T1255] hsr_slave_0: left promiscuous mode [ 133.795319][ T1255] hsr_slave_1: left promiscuous mode [ 133.798189][ T1255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.801348][ T1255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.837695][ T1255] veth1_macvtap: left promiscuous mode [ 133.840444][ T1255] veth1_vlan: left promiscuous mode [ 133.843964][ T1255] veth0_vlan: left promiscuous mode [ 134.124113][ T40] audit: type=1400 audit(1746462050.684:731): avc: denied { search } for pid=10426 comm="syz.3.1286" name="/" dev="configfs" ino=3091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.132085][ T40] audit: type=1400 audit(1746462050.694:732): avc: denied { read } for pid=10426 comm="syz.3.1286" name="/" dev="configfs" ino=3091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.139357][ T40] audit: type=1400 audit(1746462050.694:733): avc: denied { open } for pid=10426 comm="syz.3.1286" path="/" dev="configfs" ino=3091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.166339][T10427] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1286'. [ 134.356210][ T40] audit: type=1400 audit(1746462050.924:734): avc: denied { lock } for pid=10434 comm="syz.3.1288" path="/dev/vsock" dev="devtmpfs" ino=1332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.481674][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 134.551555][ T5937] Bluetooth: hci1: command tx timeout [ 135.118483][T10440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.130925][T10441] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.133922][T10441] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.139459][T10441] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 135.237324][T10371] hsr_slave_0: entered promiscuous mode [ 135.239515][T10371] hsr_slave_1: entered promiscuous mode [ 135.241841][T10371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.244260][T10371] Cannot create hsr debugfs directory [ 135.342255][T10448] tmpfs: Bad value for 'mpol' [ 135.348486][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 135.353290][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 135.482345][T10467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1297'. [ 135.573810][T10475] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 136.003598][T10371] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.025256][T10371] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.042503][T10371] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.048222][T10371] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.095431][T10371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.118734][T10371] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.125013][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.128081][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.153461][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.156686][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.276811][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 136.327842][T10371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.335696][T10548] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1314'. [ 136.339495][T10549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1315'. [ 136.339533][T10549] netlink: 'syz.3.1315': attribute type 6 has an invalid length. [ 136.339548][T10549] netlink: 'syz.3.1315': attribute type 5 has an invalid length. [ 136.339559][T10549] netlink: 'syz.3.1315': attribute type 4 has an invalid length. [ 136.355493][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 136.395802][T10371] veth0_vlan: entered promiscuous mode [ 136.401869][T10371] veth1_vlan: entered promiscuous mode [ 136.427242][T10371] veth0_macvtap: entered promiscuous mode [ 136.437984][T10371] veth1_macvtap: entered promiscuous mode [ 136.440367][T10557] openvswitch: netlink: Key type 30 is not supported [ 136.457316][T10371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.471537][T10371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.487884][T10371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.491567][T10371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.504738][T10371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.507576][T10371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.565447][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.568929][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.615170][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.618385][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.634671][ T5937] Bluetooth: hci1: command tx timeout [ 136.707730][T10575] batadv_slave_1: entered promiscuous mode [ 136.730044][T10574] batadv_slave_1: left promiscuous mode [ 136.840952][T10581] kvm: pic: non byte write [ 137.166215][T10624] netlink: 'syz.3.1324': attribute type 2 has an invalid length. [ 137.796357][T10680] syz.2.1332: attempt to access beyond end of device [ 137.796357][T10680] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 137.800680][T10680] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 137.960149][T10705] sd 0:0:0:0: PR command failed: 1026 [ 137.962585][T10705] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 137.965596][T10705] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 138.016155][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 138.016164][ T40] audit: type=1400 audit(1746462054.584:742): avc: denied { bind } for pid=10708 comm="syz.3.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 138.704662][ T5937] Bluetooth: hci1: command tx timeout [ 138.864948][T10719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2136 sclass=netlink_route_socket pid=10719 comm=syz.2.1346 [ 138.889923][T10721] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17 [ 138.897616][T10723] __nla_validate_parse: 2 callbacks suppressed [ 138.897629][T10723] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1348'. [ 138.910288][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 138.915673][T10725] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 138.917237][T10721] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.974924][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 139.010434][T10737] tc_dump_action: action bad kind [ 139.022948][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1353'. [ 139.047771][ T40] audit: type=1400 audit(1746462055.614:743): avc: denied { module_load } for pid=10739 comm="syz.3.1355" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 139.048935][T10740] kernel read not supported for file /policy (pid: 10740 comm: syz.3.1355) [ 139.050416][T10742] macsec0: entered promiscuous mode [ 139.050436][T10742] macsec0: entered allmulticast mode [ 139.051071][T10742] veth1_macvtap: entered allmulticast mode [ 139.051215][T10742] macsec0: left promiscuous mode [ 139.051341][T10742] macsec0: left allmulticast mode [ 139.051353][T10742] veth1_macvtap: left allmulticast mode [ 139.074086][T10744] "syz.2.1357" (10744) uses obsolete ecb(arc4) skcipher [ 139.080714][T10744] dns_resolver: Unsupported content type (234) [ 139.224204][T10761] netlink: 'syz.3.1363': attribute type 10 has an invalid length. [ 139.307070][T10771] gfs2: not a GFS2 filesystem [ 139.310111][ T40] audit: type=1400 audit(1746462055.874:744): avc: denied { relabelto } for pid=10768 comm="syz.3.1365" name="file0" dev="tmpfs" ino=2208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ssh_agent_exec_t:s0" [ 139.381648][T10784] Bluetooth: MGMT ver 1.23 [ 139.399223][ T40] audit: type=1400 audit(1746462055.964:745): avc: denied { attach_queue } for pid=10782 comm="syz.3.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 139.400950][T10787] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.416441][T10787] overlayfs: missing 'lowerdir' [ 139.423072][T10787] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 139.530876][ T40] audit: type=1326 audit(1746462056.094:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.3.1371" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1a498e969 code=0x0 [ 139.595928][ T40] audit: type=1400 audit(1746462056.164:747): avc: denied { getopt } for pid=10802 comm="syz.1.1374" lport=60758 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 139.736781][ T40] audit: type=1400 audit(1746462056.304:748): avc: denied { append } for pid=10806 comm="syz.2.1375" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 139.741133][T10809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.858411][T10816] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.946200][T10819] mkiss: ax0: crc mode is auto. [ 140.293092][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1379'. [ 140.397460][T10836] tipc: Enabling of bearer rejected, failed to enable media [ 140.400654][T10836] netlink: 'syz.0.1382': attribute type 10 has an invalid length. [ 140.430079][ T40] audit: type=1400 audit(1746462056.994:749): avc: denied { bind } for pid=10841 comm="syz.0.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 140.444618][ T40] audit: type=1400 audit(1746462056.994:750): avc: denied { create } for pid=10841 comm="syz.0.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.753655][T10870] dlm: no locking on control device [ 140.781368][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 140.784692][ T5937] Bluetooth: hci1: command tx timeout [ 140.786795][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 140.858140][T10880] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 140.859149][T10881] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1396'. [ 140.861864][T10880] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 141.119360][T10895] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 141.247055][T10910] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 141.250332][T10910] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 141.252932][T10910] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 141.255532][T10910] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 141.258151][T10910] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 141.260765][T10910] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 141.263244][T10910] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 141.744177][T10940] syzkaller1: entered promiscuous mode [ 141.746267][T10940] syzkaller1: entered allmulticast mode [ 141.764806][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 141.768474][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 141.980114][ T40] audit: type=1400 audit(1746462314.536:751): avc: denied { bind } for pid=10958 comm="syz.2.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.032198][T10961] lo speed is unknown, defaulting to 1000 [ 142.068894][T10961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=10961 comm=syz.1.1422 [ 142.142015][T10965] netlink: 'syz.1.1423': attribute type 2 has an invalid length. [ 142.157890][T10967] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 142.166330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.422220][T10981] program syz.1.1427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.576186][T10997] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 142.625694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 142.659889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.885332][ T64] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 143.014501][ T64] usb 6-1: device descriptor read/64, error -71 [ 143.024055][T11017] netlink: 'syz.2.1438': attribute type 11 has an invalid length. [ 143.028489][T11017] netlink: 'syz.2.1438': attribute type 11 has an invalid length. [ 143.264619][ T64] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 143.328223][T11043] netlink: 'syz.2.1443': attribute type 11 has an invalid length. [ 143.397288][ T64] usb 6-1: device descriptor read/64, error -71 [ 143.421132][T11043] bridge_slave_1 (unregistering): left allmulticast mode [ 143.423460][T11043] bridge_slave_1 (unregistering): left promiscuous mode [ 143.426079][T11043] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.508447][ T64] usb usb6-port1: attempt power cycle [ 143.586642][T11048] input: syz1 as /devices/virtual/input/input19 [ 143.738234][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 143.738250][ T40] audit: type=1400 audit(1746462316.296:754): avc: denied { write } for pid=11054 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.844653][ T64] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 143.865941][ T64] usb 6-1: device descriptor read/8, error -71 [ 143.942094][T11065] rdma_op ffff888050bb11f0 conn xmit_rdma 0000000000000000 [ 143.948568][T11065] __nla_validate_parse: 6 callbacks suppressed [ 143.948584][T11065] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1448'. [ 144.104590][ T64] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 144.127406][ T64] usb 6-1: device descriptor read/8, error -71 [ 144.234974][ T64] usb usb6-port1: unable to enumerate USB device [ 145.657040][T11084] netlink: 'syz.1.1454': attribute type 11 has an invalid length. [ 145.719546][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 145.972845][T11112] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1462'. [ 146.074575][ T64] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 146.197138][T11119] binder: 11118:11119 ioctl 4018620d 0 returned -22 [ 146.235993][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.240402][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.243835][ T64] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.248746][T11126] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 146.249547][ T64] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.251170][T11126] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1465'. [ 146.256976][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.260785][ T64] usb 6-1: config 0 descriptor?? [ 146.282507][T11128] netlink: 'syz.3.1466': attribute type 8 has an invalid length. [ 146.285919][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1466'. [ 146.875892][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 146.878868][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1459'. [ 146.885706][ T64] usbhid 6-1:0.0: can't add hid device: -71 [ 146.887710][ T64] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 146.892713][ T64] usb 6-1: USB disconnect, device number 29 [ 147.018603][T11141] netlink: 'syz.0.1467': attribute type 11 has an invalid length. [ 147.030898][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'. [ 147.123026][T11141] bridge_slave_1 (unregistering): left allmulticast mode [ 147.125876][T11141] bridge_slave_1 (unregistering): left promiscuous mode [ 147.128063][T11141] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.276707][T11159] netpci0: tun_chr_ioctl cmd 1074025672 [ 147.279373][T11159] netpci0: ignored: set checksum disabled [ 147.456093][ T40] audit: type=1400 audit(1746462320.016:755): avc: denied { create } for pid=11172 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 147.504290][T11171] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 147.571052][T11180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1483'. [ 147.626371][T11171] program syz.0.1478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.633338][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1485'. [ 147.699719][T11195] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 147.703488][T11195] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 147.745540][T11197] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 147.748811][T11198] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 147.851165][ T1255] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 148.113939][T11241] program syz.1.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.148698][T11246] xt_hashlimit: size too large, truncated to 1048576 [ 148.347864][T11264] overlayfs: missing 'lowerdir' [ 148.603285][T11299] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 148.614968][T11299] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 148.703622][T11310] qnx6: unable to set blocksize [ 148.724348][T11312] qnx6: unable to set blocksize [ 149.045545][T11328] __nla_validate_parse: 5 callbacks suppressed [ 149.045556][T11328] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1525'. [ 149.050770][T11328] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 149.053171][T11328] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1525'. [ 149.068123][T11329] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 149.071422][T11329] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1525'. [ 149.174672][T11336] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 149.305370][T11338] MINIX-fs: blocksize too small for device [ 149.671356][T11355] usb usb8: usbfs: process 11355 (syz.1.1533) did not claim interface 0 before use [ 149.723462][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 149.726491][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 149.914573][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.036840][T11375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41124 sclass=netlink_route_socket pid=11375 comm=syz.2.1539 [ 150.066074][T11380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1540'. [ 150.077170][T11385] autofs4:pid:11385:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294934528.1), cmd(0xc0189374) [ 150.083026][T11385] autofs4:pid:11385:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 150.344492][T11405] kvm: vcpu 0: requested 288 ns lapic timer period limited to 200000 ns [ 150.347920][T11405] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (200000 ns). Using initial count to start timer. [ 150.515802][T11409] efs: device does not support 512 byte blocks [ 150.518217][T11409] device does not support 512 byte blocks [ 150.518217][T11409] [ 150.529937][T11410] efs: device does not support 512 byte blocks [ 150.531990][T11410] device does not support 512 byte blocks [ 150.531990][T11410] [ 150.552210][T11413] SELinux: ebitmap start bit (4278190912) is beyond the end of the bitmap (1472) [ 150.558841][T11413] SELinux: failed to load policy [ 150.610708][T11420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.615617][T11420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.621054][T11422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.623995][T11422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.631998][T11422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.644849][T11422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.647283][T11415] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.882026][T11461] net_ratelimit: 58 callbacks suppressed [ 150.882038][T11461] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 150.892095][T11461] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 150.894203][T11461] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 150.898788][T11461] vhci_hcd vhci_hcd.0: Device attached [ 150.901496][T11463] vhci_hcd: cannot find the pending unlink 4 [ 150.903480][T11463] vhci_hcd: connection closed [ 150.903591][ T1149] vhci_hcd: stop threads [ 150.908875][ T1149] vhci_hcd: release socket [ 150.910847][ T1149] vhci_hcd: disconnect device [ 151.439820][T11474] tmpfs: Bad value for 'mpol' [ 151.474604][T11476] netlink: 'syz.3.1565': attribute type 8 has an invalid length. [ 151.477170][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 151.535449][ T40] audit: type=1400 audit(1746462324.086:756): avc: denied { compute_member } for pid=11482 comm="syz.1.1568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 151.700515][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 151.737468][T11509] netlink: 'syz.3.1575': attribute type 13 has an invalid length. [ 151.759140][T11509] gretap0: refused to change device tx_queue_len [ 151.761211][T11509] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 151.767714][ T1495] lo speed is unknown, defaulting to 1000 [ 151.769625][ T1495] syz0: Port: 1 Link DOWN [ 151.796956][T11513] kAFS: No cell specified [ 151.828089][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 151.833782][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'. [ 151.838624][T11525] netlink: 'syz.0.1580': attribute type 2 has an invalid length. [ 151.879526][T11530] tmpfs: Invalid uid '0x00000000ffffffff' [ 152.003921][T11534] qrtr: Invalid version 0 [ 152.352882][T11564] tmpfs: User quota block hardlimit too large. [ 152.859840][ T40] audit: type=1400 audit(1746462325.416:757): avc: denied { append } for pid=11589 comm="syz.1.1601" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 152.870367][ T40] audit: type=1400 audit(1746462325.416:758): avc: denied { watch_reads } for pid=11589 comm="syz.1.1601" path="pipe:[40028]" dev="pipefs" ino=40028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 152.989515][T11600] overlayfs: failed to resolve './file1': -2 [ 153.152083][ T40] audit: type=1326 audit(1746462325.706:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.1.1611" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5ae18e969 code=0x0 [ 153.362972][ T40] audit: type=1400 audit(1746462325.916:760): avc: denied { setopt } for pid=11648 comm="syz.2.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.470754][T11653] Cannot find del_set index 4 as target [ 153.553734][ T40] audit: type=1400 audit(1746462326.106:761): avc: denied { accept } for pid=11657 comm="syz.2.1618" path="/79/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 153.570705][T11659] XFS (nullb0): Invalid superblock magic number [ 154.063782][T11668] __nla_validate_parse: 6 callbacks suppressed [ 154.063798][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1620'. [ 154.096337][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 154.166103][T11672] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 154.172553][T11672] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.273200][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 154.525541][ T40] audit: type=1400 audit(1746462327.086:762): avc: denied { create } for pid=11700 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 154.529403][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1632'. [ 154.562064][ T40] audit: type=1400 audit(1746462327.116:763): avc: denied { write } for pid=11702 comm="syz.1.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 154.564710][T11703] Invalid logical block size (-1) [ 154.628475][T11709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11709 comm=syz.1.1634 [ 154.634224][T11706] netlink: 'syz.3.1631': attribute type 10 has an invalid length. [ 154.701409][ T40] audit: type=1400 audit(1746462327.256:764): avc: denied { listen } for pid=11711 comm="syz.1.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.725173][ T40] audit: type=1400 audit(1746462327.286:765): avc: denied { accept } for pid=11711 comm="syz.1.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.828557][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1636'. [ 154.832329][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 154.981883][T11725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1641'. [ 155.031340][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 155.154805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 155.354329][T11750] netlink: 'syz.2.1650': attribute type 10 has an invalid length. [ 155.360560][T11750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.377006][T11750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.381907][T11750] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 155.834657][ T1495] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 155.891483][T11776] netlink: 'syz.1.1658': attribute type 13 has an invalid length. [ 155.894863][T11776] netlink: 'syz.1.1658': attribute type 27 has an invalid length. [ 155.898976][T11776] gretap0: refused to change device tx_queue_len [ 155.901789][T11776] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 155.915904][T11776] bridge3: entered promiscuous mode [ 155.994560][ T1495] usb 7-1: Using ep0 maxpacket: 8 [ 155.998381][ T1495] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 156.001856][ T1495] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 156.005806][ T1495] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 156.009612][ T1495] usb 7-1: config 250 has no interface number 0 [ 156.012215][ T1495] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 156.017590][ T1495] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 156.022083][ T1495] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 256 [ 156.026847][ T1495] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 156.032512][ T1495] usb 7-1: config 250 interface 228 has no altsetting 0 [ 156.037556][ T1495] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 156.041488][ T1495] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 156.045531][ T1495] usb 7-1: Product: syz [ 156.047328][ T1495] usb 7-1: SerialNumber: syz [ 156.054547][ T1495] hub 7-1:250.228: bad descriptor, ignoring hub [ 156.057645][ T1495] hub 7-1:250.228: probe with driver hub failed with error -5 [ 156.257044][ T1495] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 156.564776][ T1495] usb 7-1: USB disconnect, device number 15 [ 156.570898][ T1495] usblp0: removed [ 156.659330][T11791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11791 comm=syz.3.1664 [ 156.670676][T11791] syz_tun: entered promiscuous mode [ 156.675961][T11791] syz_tun: left promiscuous mode [ 156.923778][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 156.923790][ T40] audit: type=1400 audit(1746462329.476:769): avc: denied { mount } for pid=11798 comm="syz.1.1667" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 156.981157][T11807] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 157.106104][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 157.112098][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 157.156695][T11825] Invalid logical block size (65533) [ 157.162784][ T40] audit: type=1400 audit(1746462329.716:770): avc: denied { map } for pid=11824 comm="syz.2.1675" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.176011][ T40] audit: type=1400 audit(1746462329.716:771): avc: denied { execute } for pid=11824 comm="syz.2.1675" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.420828][T11845] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 157.423265][T11845] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.427479][T11845] vhci_hcd vhci_hcd.0: Device attached [ 157.519422][T11849] fuse: Unknown parameter '' [ 157.607953][T11859] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 157.611322][T11856] vti0: entered promiscuous mode [ 157.612207][T11859] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.654218][ T40] audit: type=1326 audit(1746462330.206:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.3.1686" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1a498e969 code=0x0 [ 157.679309][ T1343] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 157.716397][T11864] netlink: 'syz.2.1687': attribute type 3 has an invalid length. [ 157.719381][T11864] netlink: 'syz.2.1687': attribute type 1 has an invalid length. [ 157.724297][ T40] audit: type=1400 audit(1746462330.276:773): avc: denied { audit_read } for pid=11863 comm="syz.2.1687" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.759420][ T40] audit: type=1400 audit(1746462330.316:774): avc: denied { ioctl } for pid=11861 comm="syz.3.1686" path="socket:[41569]" dev="sockfs" ino=41569 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.561643][ T1495] hid-generic 0362:07FF:7FFFFFFF.0003: item fetching failed at offset 0/2 [ 158.566825][ T1495] hid-generic 0362:07FF:7FFFFFFF.0003: probe with driver hid-generic failed with error -22 [ 158.571206][T11884] usb usb8: usbfs: process 11884 (syz.1.1692) did not claim interface 0 before use [ 158.700526][T11902] netlink: 'syz.3.1697': attribute type 12 has an invalid length. [ 158.707653][T11903] block device autoloading is deprecated and will be removed. [ 158.712414][ T40] audit: type=1400 audit(1746462331.266:775): avc: denied { write } for pid=11889 comm="syz.1.1695" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 158.720676][ T40] audit: type=1400 audit(1746462331.266:776): avc: denied { setattr } for pid=11889 comm="syz.1.1695" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 158.751212][T11907] binder: 11905:11907 ioctl c0306201 200000000100 returned -22 [ 158.757803][T11907] netlink: 'syz.2.1699': attribute type 11 has an invalid length. [ 158.872482][ T40] audit: type=1400 audit(1746462331.426:777): avc: denied { ioctl } for pid=11916 comm="syz.3.1703" path="socket:[42191]" dev="sockfs" ino=42191 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.048801][T11929] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 159.085296][ T6244] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 159.244476][ T6244] usb 7-1: Using ep0 maxpacket: 8 [ 159.248453][ T6244] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 159.251631][ T6244] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.255587][ T6244] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.259269][ T6244] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.262957][ T6244] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.267949][ T6244] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.271288][ T6244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.480267][ T6244] usb 7-1: usb_control_msg returned -32 [ 159.482391][ T6244] usbtmc 7-1:16.0: can't read capabilities [ 159.769705][T11952] "syz.1.1713" (11952) uses obsolete ecb(arc4) skcipher [ 159.775765][T11952] __nla_validate_parse: 7 callbacks suppressed [ 159.775779][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 159.813159][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 160.083801][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1720'. [ 160.111343][ T40] audit: type=1400 audit(1746462332.666:778): avc: denied { create } for pid=11972 comm="syz.3.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 160.168947][T11982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1724'. [ 160.225734][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 160.365898][T12002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=12002 comm=syz.1.1728 [ 160.410577][T11846] vhci_hcd: connection reset by peer [ 160.413063][ T1255] vhci_hcd: stop threads [ 160.414555][ T1255] vhci_hcd: release socket [ 160.417474][ T1255] vhci_hcd: disconnect device [ 160.439119][T12006] pim6reg1: entered promiscuous mode [ 160.441199][T12006] pim6reg1: entered allmulticast mode [ 160.442043][T12011] program syz.0.1730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.618595][T12020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1733'. [ 160.945671][T12035] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 160.948630][T12035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.953189][T12035] vhci_hcd vhci_hcd.0: Device attached [ 161.080283][T12039] netlink: 'syz.3.1739': attribute type 9 has an invalid length. [ 161.083203][T12039] netlink: 'syz.3.1739': attribute type 7 has an invalid length. [ 161.086273][T12039] netlink: 'syz.3.1739': attribute type 8 has an invalid length. [ 161.125103][T12041] netlink: 'syz.3.1740': attribute type 12 has an invalid length. [ 161.128084][T12041] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1740'. [ 161.164046][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 161.168080][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1740'. [ 161.204506][ T836] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 161.204978][ T5975] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 161.356210][ T836] usb 6-1: config index 0 descriptor too short (expected 8192, got 18) [ 161.359676][ T836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.363893][ T836] usb 6-1: config 0 has no interfaces? [ 161.366598][ T836] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 161.370935][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.376293][ T836] usb 6-1: config 0 descriptor?? [ 161.582713][T12036] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 161.596152][ T104] vhci_hcd: stop threads [ 161.597797][ T104] vhci_hcd: release socket [ 161.599882][ T104] vhci_hcd: disconnect device [ 161.843549][ T1495] usb 7-1: USB disconnect, device number 16 [ 161.874003][T12058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1745'. [ 161.967471][T12062] xt_hashlimit: size too large, truncated to 1048576 [ 161.998822][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 161.998832][ T40] audit: type=1400 audit(1746462334.556:784): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46534 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 162.011860][ T40] audit: type=1400 audit(1746462334.556:785): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=46534 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 162.129443][T12070] /dev/sg0: Can't lookup blockdev [ 162.168513][ T836] usb 6-1: string descriptor 0 read error: -71 [ 162.174907][ T836] usb 6-1: USB disconnect, device number 30 [ 162.224506][ T40] audit: type=1400 audit(1746462334.776:786): avc: denied { remount } for pid=12077 comm="syz.2.1753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 162.224573][T12078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12078 comm=syz.2.1753 [ 162.429790][ T40] audit: type=1400 audit(1746462334.986:787): avc: denied { listen } for pid=12094 comm="syz.0.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 162.774657][ T1343] vhci_hcd: vhci_device speed not set [ 163.230644][ T40] audit: type=1400 audit(1746462335.786:788): avc: denied { read } for pid=12110 comm="syz.2.1760" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.234510][T12112] input: syz0 as /devices/virtual/input/input21 [ 163.239152][ T40] audit: type=1400 audit(1746462335.796:789): avc: denied { open } for pid=12110 comm="syz.2.1760" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.249206][ T40] audit: type=1400 audit(1746462335.806:790): avc: denied { ioctl } for pid=12109 comm="syz.0.1768" path="socket:[42536]" dev="sockfs" ino=42536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 163.263666][T12113] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 163.265979][T12113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.270459][T12113] vhci_hcd vhci_hcd.0: Device attached [ 163.331584][T12125] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 163.396999][ T40] audit: type=1400 audit(1746462335.956:791): avc: denied { read } for pid=12120 comm="syz.0.1763" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 163.404830][ T40] audit: type=1400 audit(1746462335.956:792): avc: denied { open } for pid=12120 comm="syz.0.1763" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 163.456845][T12140] random: crng reseeded on system resumption [ 163.524827][ T5928] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 163.530376][ T835] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 163.589572][T12140] Restarting kernel threads ... done. [ 163.630631][T12149] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 163.686373][ T5928] usb 7-1: config index 0 descriptor too short (expected 8192, got 18) [ 163.694649][ T5928] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.697833][ T5928] usb 7-1: config 0 has no interfaces? [ 163.699790][ T5928] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 163.703561][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.709752][ T5928] usb 7-1: config 0 descriptor?? [ 163.918832][T12116] usb 41-1: recv xbuf, 0 [ 163.922683][ T1142] vhci_hcd: stop threads [ 163.924069][ T1142] vhci_hcd: release socket [ 163.925754][ T1142] vhci_hcd: disconnect device [ 163.985569][ T835] vhci_hcd: vhci_device speed not set [ 164.006278][T10373] udevd[10373]: setting mode of /dev/vcs3 to 020660 failed: Read-only file system [ 164.009721][T10373] udevd[10373]: setting owner of /dev/vcs3 to uid=0, gid=5 failed: Read-only file system [ 164.019066][T12144] udevd[12144]: setting mode of /dev/vcsa3 to 020660 failed: Read-only file system [ 164.023143][T12144] udevd[12144]: setting owner of /dev/vcsa3 to uid=0, gid=5 failed: Read-only file system [ 164.028048][T11704] udevd[11704]: setting mode of /dev/vcsu3 to 020660 failed: Read-only file system [ 164.032009][T11704] udevd[11704]: setting owner of /dev/vcsu3 to uid=0, gid=5 failed: Read-only file system [ 164.139460][T12175] binder: 12166:12175 ioctl c0306201 200000001a80 returned -11 [ 164.444177][ T5928] usb 7-1: string descriptor 0 read error: -71 [ 164.447865][ T5928] usb 7-1: USB disconnect, device number 17 [ 164.506568][T12191] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 164.509415][T12191] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 164.512707][T12191] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 164.515783][T12191] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 164.520311][T12191] openvswitch: netlink: Message has 4745 unknown bytes. [ 164.629023][T12193] syzkaller1: entered promiscuous mode [ 164.631280][T12193] syzkaller1: entered allmulticast mode [ 164.634088][T12193] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 164.753399][T12201] afs: Unknown parameter 'dynaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 164.753856][T12201] afs: Unknown parameter 'dynaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaafs' [ 164.783206][ C3] vkms_vblank_simulate: vblank timer overrun [ 164.796992][ T40] audit: type=1400 audit(1746462337.356:793): avc: denied { write } for pid=12202 comm="syz.1.1790" path="/476/file0/bus" dev="9p" ino=35913966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.849696][T12205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12205 comm=syz.2.1791 [ 164.905778][T12207] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 164.908557][T12207] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.911830][T12207] vhci_hcd vhci_hcd.0: Device attached [ 165.028584][T12219] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 165.032854][T12219] ip6gretap1: entered allmulticast mode [ 165.120685][T12227] Cannot find del_set index 128 as target [ 165.144626][ T1343] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 165.154741][ T836] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 165.162976][T12229] sit0: entered promiscuous mode [ 165.165523][T12229] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 165.168867][T12229] __nla_validate_parse: 11 callbacks suppressed [ 165.168879][T12229] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1800'. [ 165.228937][T12235] xt_hashlimit: size too large, truncated to 1048576 [ 165.233476][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'. [ 165.306256][ T836] usb 7-1: config index 0 descriptor too short (expected 8192, got 18) [ 165.308859][ T836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.312063][ T836] usb 7-1: config 0 has no interfaces? [ 165.313988][ T836] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 165.317227][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.321471][ T836] usb 7-1: config 0 descriptor?? [ 165.344520][ T1455] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 165.344576][ T5289] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.347463][ T1455] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 165.353309][T12242] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1803'. [ 165.358907][T12241] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1803'. [ 165.410452][T12244] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 165.526089][T12208] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 165.557784][ T104] vhci_hcd: stop threads [ 165.559750][ T104] vhci_hcd: release socket [ 165.561746][ T104] vhci_hcd: disconnect device [ 165.686977][ T6244] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 165.856994][ T6244] usb 6-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 165.861438][ T6244] usb 6-1: config 1 interface 0 has no altsetting 0 [ 165.865816][ T6244] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 165.869077][ T6244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.871598][ T6244] usb 6-1: Product: syz [ 165.872937][ T6244] usb 6-1: Manufacturer: syz [ 165.884814][ T6244] usb 6-1: SerialNumber: syz [ 165.888141][T12247] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 166.011260][ T836] usb 7-1: string descriptor 0 read error: -71 [ 166.014634][ T836] usb 7-1: USB disconnect, device number 18 [ 166.095698][ T6244] usb 6-1: USB disconnect, device number 31 [ 166.294531][ T5975] vhci_hcd: vhci_device speed not set [ 166.657116][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 166.659950][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 166.679600][T12301] 9pnet: p9_errstr2errno: server reported unknown error @ [ 166.687900][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1820'. [ 166.828878][T12315] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1822'. [ 166.888737][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1822'. [ 166.923498][T12326] ip6t_rpfilter: unknown options [ 167.123750][T12346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12346 comm=syz.0.1833 [ 167.129563][T12346] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1833'. [ 167.155397][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 167.155411][ T40] audit: type=1400 audit(1746462339.716:797): avc: denied { ioctl } for pid=12349 comm="syz.2.1835" path="socket:[45304]" dev="sockfs" ino=45304 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.175349][T12346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12346 comm=syz.0.1833 [ 167.175409][ T40] audit: type=1400 audit(1746462339.736:798): avc: denied { listen } for pid=12349 comm="syz.2.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.221543][ T40] audit: type=1400 audit(1746462339.776:799): avc: denied { getopt } for pid=12351 comm="syz.2.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 167.257306][ T40] audit: type=1400 audit(1746462339.816:800): avc: denied { bind } for pid=12351 comm="syz.2.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 167.265843][ T40] audit: type=1400 audit(1746462339.816:801): avc: denied { connect } for pid=12351 comm="syz.2.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 167.349174][T12360] overlayfs: conflicting lowerdir path [ 167.483818][T12373] binder: 12372:12373 ioctl c0306201 200000000100 returned -22 [ 167.669510][ T40] audit: type=1400 audit(1746462340.226:802): avc: denied { watch watch_reads } for pid=12384 comm="syz.3.1847" path="/sys/kernel/debug/binder/transaction_log" dev="debugfs" ino=3236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 168.106442][T12442] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 168.142790][ T40] audit: type=1400 audit(1746462340.696:803): avc: denied { audit_write } for pid=12445 comm="syz.1.1864" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 168.175545][T12446] lo speed is unknown, defaulting to 1000 [ 168.214598][ T5975] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 168.365273][ T5975] usb 7-1: not running at top speed; connect to a high speed hub [ 168.369013][ T5975] usb 7-1: config 43 has an invalid interface number: 93 but max is 2 [ 168.371990][ T5975] usb 7-1: config 43 has an invalid interface number: 127 but max is 2 [ 168.375105][ T5975] usb 7-1: config 43 has an invalid interface number: 83 but max is 2 [ 168.377651][ T5975] usb 7-1: config 43 has an invalid interface number: 114 but max is 2 [ 168.380497][ T5975] usb 7-1: config 43 has 5 interfaces, different from the descriptor's value: 3 [ 168.383376][ T5975] usb 7-1: config 43 has no interface number 0 [ 168.387336][ T5975] usb 7-1: config 43 has no interface number 2 [ 168.389920][ T5975] usb 7-1: config 43 has no interface number 3 [ 168.392001][ T5975] usb 7-1: config 43 has no interface number 4 [ 168.394046][ T5975] usb 7-1: config 43 interface 93 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 168.397654][ T5975] usb 7-1: config 43 interface 93 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 168.401029][ T5975] usb 7-1: config 43 interface 93 altsetting 47 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 168.404601][ T5975] usb 7-1: config 43 interface 93 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 168.407961][ T5975] usb 7-1: config 43 interface 93 altsetting 47 has a duplicate endpoint with address 0xD, skipping [ 168.411444][ T5975] usb 7-1: config 43 interface 93 altsetting 47 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 168.415767][ T5975] usb 7-1: config 43 interface 93 altsetting 47 has 7 endpoint descriptors, different from the interface descriptor's value: 16 [ 168.420493][ T5975] usb 7-1: config 43 interface 127 altsetting 181 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 168.423891][ T5975] usb 7-1: config 43 interface 127 altsetting 181 has a duplicate endpoint with address 0x6, skipping [ 168.427449][ T5975] usb 7-1: config 43 interface 127 altsetting 181 has a duplicate endpoint with address 0x9, skipping [ 168.430868][ T5975] usb 7-1: config 43 interface 127 altsetting 181 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 168.434267][ T5975] usb 7-1: config 43 interface 127 altsetting 181 has 8 endpoint descriptors, different from the interface descriptor's value: 20 [ 168.438955][ T5975] usb 7-1: too many endpoints for config 43 interface 83 altsetting 90: 46, using maximum allowed: 30 [ 168.443362][ T5975] usb 7-1: config 43 interface 83 altsetting 90 has a duplicate endpoint with address 0x9, skipping [ 168.447038][ T5975] usb 7-1: config 43 interface 83 altsetting 90 has 1 endpoint descriptor, different from the interface descriptor's value: 46 [ 168.451347][ T5975] usb 7-1: config 43 interface 114 altsetting 50 has an invalid descriptor for endpoint zero, skipping [ 168.455360][ T5975] usb 7-1: config 43 interface 114 altsetting 50 has an invalid descriptor for endpoint zero, skipping [ 168.459410][ T5975] usb 7-1: config 43 interface 1 has no altsetting 0 [ 168.461631][ T5975] usb 7-1: config 43 interface 93 has no altsetting 0 [ 168.463763][ T5975] usb 7-1: config 43 interface 127 has no altsetting 0 [ 168.466630][ T5975] usb 7-1: config 43 interface 83 has no altsetting 0 [ 168.467648][T12467] netlink: 'syz.3.1872': attribute type 11 has an invalid length. [ 168.468972][ T5975] usb 7-1: config 43 interface 114 has no altsetting 0 [ 168.475383][ T5975] usb 7-1: New USB device found, idVendor=04e8, idProduct=5136, bcdDevice=4e.7e [ 168.478544][ T5975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.481257][ T5975] usb 7-1: Product: syz [ 168.482544][ T5975] usb 7-1: Manufacturer: syz [ 168.484041][ T5975] usb 7-1: SerialNumber: syz [ 168.556755][ T40] audit: type=1400 audit(1746462341.116:804): avc: denied { connect } for pid=12471 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.580440][ T836] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 168.728610][ T836] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 168.735078][ T836] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.740114][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.743999][ T836] usb 6-1: SerialNumber: syz [ 168.763783][T12492] veth0_to_bond: entered promiscuous mode [ 169.060214][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.065562][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.069204][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.076066][ T5937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.079568][ T5937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.086925][ T5289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.089492][ T5289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.092204][ T5289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.097893][ T5289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.100821][ T5289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.116951][T12496] lo speed is unknown, defaulting to 1000 [ 169.207805][T12496] chnl_net:caif_netlink_parms(): no params data found [ 169.300522][T12496] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.303511][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.306945][T12496] bridge_slave_0: entered allmulticast mode [ 169.310768][T12496] bridge_slave_0: entered promiscuous mode [ 169.317593][T12496] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.320632][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.323667][T12496] bridge_slave_1: entered allmulticast mode [ 169.327512][T12496] bridge_slave_1: entered promiscuous mode [ 169.385809][T12496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.392155][T12496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.447946][T12496] team0: Port device team_slave_0 added [ 169.454610][T12496] team0: Port device team_slave_1 added [ 169.505293][T12496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.509118][T12496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.519663][T12496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.525600][T12496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.528495][T12496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.539854][T12496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.558080][ T836] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 169.563976][ T836] usb 6-1: USB disconnect, device number 32 [ 169.623799][T12496] hsr_slave_0: entered promiscuous mode [ 169.626695][T12496] hsr_slave_1: entered promiscuous mode [ 169.629405][T12496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.632322][T12496] Cannot create hsr debugfs directory [ 169.830089][T12496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.984137][T12496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.072292][T12496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.290306][T12496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.294607][ T1343] vhci_hcd: vhci_device speed not set [ 170.299914][T12496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.306557][T12496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.312538][T12496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.347914][T12517] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 170.347934][T12518] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 170.373834][T12496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.384210][T12496] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.387695][ T40] audit: type=1400 audit(1746462342.946:805): avc: denied { write } for pid=12519 comm="syz.3.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 170.396752][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.398972][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.404785][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.407027][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.429611][ T40] audit: type=1400 audit(1746462342.986:806): avc: denied { egress } for pid=5928 comm="kworker/0:3" daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 170.532141][T12496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.556332][T12496] veth0_vlan: entered promiscuous mode [ 170.562146][T12496] veth1_vlan: entered promiscuous mode [ 170.581897][T12496] veth0_macvtap: entered promiscuous mode [ 170.591419][T12496] veth1_macvtap: entered promiscuous mode [ 170.601441][T12496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.607899][T12496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.611196][T12496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.615651][T12496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.627294][T12496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.630893][T12496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.636654][T12496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.640419][T12496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.645902][T12545] __nla_validate_parse: 139 callbacks suppressed [ 170.645912][T12545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1890'. [ 170.652380][T12545] netem: unknown loss type 13 [ 170.654726][T12545] netem: change failed [ 170.715885][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.719021][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.741896][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.744568][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.999662][ T5975] usb-storage 7-1:43.1: USB Mass Storage device detected [ 171.010597][ T5975] usb-storage 7-1:43.1: Quirks match for vid 04e8 pid 5136: 400 [ 171.062023][ T5975] usb-storage 7-1:43.93: USB Mass Storage device detected [ 171.082545][ T5975] usb-storage 7-1:43.93: Quirks match for vid 04e8 pid 5136: 400 [ 171.166531][ T5975] usb-storage 7-1:43.127: USB Mass Storage device detected [ 171.172125][ T5975] usb-storage 7-1:43.127: Quirks match for vid 04e8 pid 5136: 400 [ 171.267555][ T5975] usb-storage 7-1:43.83: USB Mass Storage device detected [ 171.272017][ T5975] usb-storage 7-1:43.83: Quirks match for vid 04e8 pid 5136: 400 [ 171.279838][ T6244] IPVS: starting estimator thread 0... [ 171.364537][ T5975] usb-storage 7-1:43.114: USB Mass Storage device detected [ 171.367820][T12585] IPVS: using max 43 ests per chain, 103200 per kthread [ 171.377097][ T5975] usb-storage 7-1:43.114: Quirks match for vid 04e8 pid 5136: 400 [ 171.381198][T12597] netlink: 'syz.1.1902': attribute type 1 has an invalid length. [ 171.402709][T12597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.445682][T12604] nbd: couldn't find device at index 956301312 [ 171.448742][T12597] bond4: (slave veth5): Enslaving as an active interface with a down link [ 171.495743][ T5975] usb 7-1: USB disconnect, device number 19 [ 171.518778][T12611] virtio-fs: tag not found [ 171.526147][T12611] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1905'. [ 171.602099][T12621] netlink: 'syz.3.1909': attribute type 4 has an invalid length. [ 171.609960][T12621] netlink: 'syz.3.1909': attribute type 4 has an invalid length. [ 171.614509][ T64] lo speed is unknown, defaulting to 1000 [ 171.616428][ T64] syz0: Port: 1 Link ACTIVE [ 171.731752][T12634] input: syz0 as /devices/virtual/input/input23 [ 172.165556][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 172.165568][ T40] audit: type=1400 audit(1746462344.716:822): avc: denied { read } for pid=12658 comm="syz.3.1917" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.175222][ T40] audit: type=1400 audit(1746462344.716:823): avc: denied { open } for pid=12658 comm="syz.3.1917" path="net:[4026532952]" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.182658][ T40] audit: type=1400 audit(1746462344.716:824): avc: denied { create } for pid=12658 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.189304][ T40] audit: type=1400 audit(1746462344.726:825): avc: denied { setopt } for pid=12658 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.196224][ T40] audit: type=1400 audit(1746462344.726:826): avc: denied { create } for pid=12658 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 172.202664][ T40] audit: type=1400 audit(1746462344.726:827): avc: denied { create } for pid=12658 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.209842][ T40] audit: type=1400 audit(1746462344.726:828): avc: denied { write } for pid=12658 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 172.216843][ T40] audit: type=1400 audit(1746462344.726:829): avc: denied { ioctl } for pid=12658 comm="syz.3.1917" path="socket:[43474]" dev="sockfs" ino=43474 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 172.222354][T12661] can0: slcan on ptm1. [ 172.227508][ T40] audit: type=1400 audit(1746462344.726:830): avc: denied { create } for pid=12658 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.235682][ T40] audit: type=1400 audit(1746462344.726:831): avc: denied { write } for pid=12658 comm="syz.3.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.249406][T12665] fuse: Bad value for 'fd' [ 172.251290][T12665] fuse: Bad value for 'fd' [ 172.301766][T12660] can0 (unregistered): slcan off ptm1. [ 172.362467][T12674] lo speed is unknown, defaulting to 1000 [ 172.410605][T12677] SELinux: failed to load policy [ 172.449958][T12683] cgroup: Unknown subsys name 'uid' [ 172.538287][T12688] kvm: emulating exchange as write [ 173.192314][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.436365][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.439851][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.442638][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.447754][ T5937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.450437][ T5937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.470384][T12694] lo speed is unknown, defaulting to 1000 [ 173.571793][T12694] chnl_net:caif_netlink_parms(): no params data found [ 173.636645][T12694] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.638859][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.641109][T12694] bridge_slave_0: entered allmulticast mode [ 173.644221][T12694] bridge_slave_0: entered promiscuous mode [ 173.647555][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.649854][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.652267][T12694] bridge_slave_1: entered allmulticast mode [ 173.654936][T12694] bridge_slave_1: entered promiscuous mode [ 173.684205][T12694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.690515][T12694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.726959][T12694] team0: Port device team_slave_0 added [ 173.732107][T12694] team0: Port device team_slave_1 added [ 173.789138][T12694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.791409][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.799458][T12694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.805807][T12694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.807985][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.816629][T12694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.851473][T12694] hsr_slave_0: entered promiscuous mode [ 173.853780][T12694] hsr_slave_1: entered promiscuous mode [ 173.856035][T12694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.858389][T12694] Cannot create hsr debugfs directory [ 174.678883][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.809413][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.930640][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.045101][ T1141] bridge_slave_1: left allmulticast mode [ 175.046889][ T1141] bridge_slave_1: left promiscuous mode [ 175.048711][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.057186][ T1141] bridge_slave_0: left allmulticast mode [ 175.059497][ T1141] bridge_slave_0: left promiscuous mode [ 175.061892][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.378241][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.384252][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.389636][ T1141] bond0 (unregistering): Released all slaves [ 175.504636][ T5289] Bluetooth: hci2: command tx timeout [ 175.788608][ T1141] hsr_slave_0: left promiscuous mode [ 175.791144][ T1141] hsr_slave_1: left promiscuous mode [ 175.793737][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.797388][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.800151][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.802603][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.832257][ T1141] veth1_macvtap: left promiscuous mode [ 175.834119][ T1141] veth0_macvtap: left promiscuous mode [ 175.838094][ T1141] veth1_vlan: left promiscuous mode [ 175.839775][ T1141] veth0_vlan: left promiscuous mode [ 176.458216][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 176.525909][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 177.099881][T12694] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.106473][T12694] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.115035][T12694] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.120389][T12694] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.170552][T12694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.181508][T12694] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.194378][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.197347][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.205522][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.207524][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.306781][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 177.306791][ T40] audit: type=1400 audit(1746462349.866:891): avc: denied { sys_module } for pid=12694 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 177.373854][T12694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.422553][T12694] veth0_vlan: entered promiscuous mode [ 177.431974][T12694] veth1_vlan: entered promiscuous mode [ 177.449045][T12694] veth0_macvtap: entered promiscuous mode [ 177.452916][T12694] veth1_macvtap: entered promiscuous mode [ 177.461793][T12694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.467248][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.470645][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.474643][T12694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.479580][T12694] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.482576][T12694] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.486359][T12694] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.489071][T12694] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.525393][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.528961][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.544232][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.546768][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.552248][ T40] audit: type=1400 audit(1746462350.106:892): avc: denied { mounton } for pid=12694 comm="syz-executor" path="/syzkaller.S3a7Xx/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 177.560023][ T40] audit: type=1400 audit(1746462350.106:893): avc: denied { mount } for pid=12694 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.567789][ T40] audit: type=1400 audit(1746462350.116:894): avc: denied { mount } for pid=12694 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 177.574815][ T40] audit: type=1400 audit(1746462350.116:895): avc: denied { mounton } for pid=12694 comm="syz-executor" path="/syzkaller.S3a7Xx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 177.582947][ T40] audit: type=1400 audit(1746462350.116:896): avc: denied { mounton } for pid=12694 comm="syz-executor" path="/syzkaller.S3a7Xx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 177.584475][ C2] ------------[ cut here ]------------ [ 177.592400][ T40] audit: type=1400 audit(1746462350.116:897): avc: denied { unmount } for pid=12694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 177.593420][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 177.599693][ T40] audit: type=1400 audit(1746462350.116:898): avc: denied { mounton } for pid=12694 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 177.601938][ C2] WARNING: CPU: 2 PID: 0 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 177.609197][ T40] audit: type=1400 audit(1746462350.116:899): avc: denied { mount } for pid=12694 comm="syz-executor" name="/" dev="gadgetfs" ino=8446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 177.612065][ C2] Modules linked in: [ 177.620382][ T40] audit: type=1400 audit(1746462350.116:900): avc: denied { mount } for pid=12694 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.621846][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 177.632523][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.636465][ C2] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 177.638403][ C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 e2 8b 8b e8 05 22 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 66 96 37 00 90 0f 0b 90 e9 1b f6 ff [ 177.645267][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010082 [ 177.647474][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ac018 [ 177.650364][ C2] RDX: ffff88801d684880 RSI: ffffffff817ac025 RDI: 0000000000000001 [ 177.653155][ C2] RBP: ffff888026c24930 R08: 0000000000000001 R09: 0000000000000000 [ 177.655955][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000c918f [ 177.658796][ C2] R13: 0000000080000101 R14: ffff88803bcd7178 R15: 0000000000000001 [ 177.661661][ C2] FS: 0000000000000000(0000) GS:ffff8880d6bdf000(0000) knlGS:0000000000000000 [ 177.664846][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.667260][ C2] CR2: 0000557b3bef9c38 CR3: 0000000024cd5000 CR4: 0000000000352ef0 [ 177.670192][ C2] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 177.673060][ C2] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 177.675867][ C2] Call Trace: [ 177.677112][ C2] [ 177.678156][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 177.680210][ C2] call_timer_fn+0x197/0x620 [ 177.681951][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 177.683787][ C2] ? __run_timers+0x559/0x960 [ 177.685512][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 177.687621][ C2] __run_timers+0x569/0x960 [ 177.689313][ C2] ? __pfx___run_timers+0x10/0x10 [ 177.691157][ C2] run_timer_base+0x114/0x190 [ 177.692889][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 177.694779][ C2] ? rcu_is_watching+0x12/0xc0 [ 177.696621][ C2] run_timer_softirq+0x1a/0x40 [ 177.698372][ C2] handle_softirqs+0x216/0x8e0 [ 177.700120][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 177.702049][ C2] __irq_exit_rcu+0x109/0x170 [ 177.703767][ C2] irq_exit_rcu+0x9/0x30 [ 177.705319][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 177.707104][ C2] [ 177.708045][ C2] [ 177.709012][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.710661][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 177.712420][ C2] Code: 15 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 177.718360][ C2] RSP: 0018:ffffc90000187df8 EFLAGS: 00000286 [ 177.720317][ C2] RAX: 00000000001998f1 RBX: 0000000000000002 RCX: ffffffff8b6cd419 [ 177.722849][ C2] RDX: 0000000000000000 RSI: ffffffff8dbe121f RDI: ffffffff8bf48260 [ 177.725391][ C2] RBP: ffffed1003ad0910 R08: 0000000000000001 R09: ffffed100d4c65bd [ 177.727900][ C2] R10: ffff88806a632deb R11: 0000000000000000 R12: 0000000000000002 [ 177.730353][ C2] R13: ffff88801d684880 R14: ffffffff90850510 R15: 0000000000000000 [ 177.732821][ C2] ? ct_kernel_exit+0x139/0x190 [ 177.734357][ C2] default_idle+0x13/0x20 [ 177.735784][ C2] default_idle_call+0x6d/0xb0 [ 177.737313][ C2] do_idle+0x391/0x510 [ 177.738607][ C2] ? __pfx_do_idle+0x10/0x10 [ 177.740100][ C2] ? trace_sched_exit_tp+0x31/0x130 [ 177.741756][ C2] cpu_startup_entry+0x4f/0x60 [ 177.743287][ C2] start_secondary+0x21d/0x2b0 [ 177.744809][ C2] ? __pfx_start_secondary+0x10/0x10 [ 177.746480][ C2] common_startup_64+0x13e/0x148 [ 177.748040][ C2] [ 177.749112][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.751681][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 177.755046][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.758369][ C2] Call Trace: [ 177.759307][ C2] [ 177.760123][ C2] dump_stack_lvl+0x3d/0x1f0 [ 177.761416][ C2] panic+0x71c/0x800 [ 177.762517][ C2] ? __pfx_panic+0x10/0x10 [ 177.763760][ C2] ? show_trace_log_lvl+0x29b/0x3e0 [ 177.765679][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 177.767513][ C2] ? __queue_work+0xc9c/0x10f0 [ 177.769421][ C2] check_panic_on_warn+0xab/0xb0 [ 177.771397][ C2] __warn+0xf6/0x3c0 [ 177.772976][ C2] ? __queue_work+0xc9c/0x10f0 [ 177.774909][ C2] report_bug+0x3c3/0x580 [ 177.776633][ C2] ? __queue_work+0xc9c/0x10f0 [ 177.778516][ C2] handle_bug+0x184/0x210 [ 177.780230][ C2] exc_invalid_op+0x17/0x50 [ 177.782024][ C2] asm_exc_invalid_op+0x1a/0x20 [ 177.783930][ C2] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 177.785679][ C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 c0 e2 8b 8b e8 05 22 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 66 96 37 00 90 0f 0b 90 e9 1b f6 ff [ 177.791511][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010082 [ 177.793398][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ac018 [ 177.795776][ C2] RDX: ffff88801d684880 RSI: ffffffff817ac025 RDI: 0000000000000001 [ 177.798197][ C2] RBP: ffff888026c24930 R08: 0000000000000001 R09: 0000000000000000 [ 177.800645][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000c918f [ 177.803198][ C2] R13: 0000000080000101 R14: ffff88803bcd7178 R15: 0000000000000001 [ 177.805398][ C2] ? __warn_printk+0x198/0x350 [ 177.806737][ C2] ? __warn_printk+0x1a5/0x350 [ 177.808069][ C2] ? __queue_work+0xc9b/0x10f0 [ 177.809407][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 177.811050][ C2] call_timer_fn+0x197/0x620 [ 177.812360][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 177.813783][ C2] ? __run_timers+0x559/0x960 [ 177.815091][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 177.816826][ C2] __run_timers+0x569/0x960 [ 177.818258][ C2] ? __pfx___run_timers+0x10/0x10 [ 177.819863][ C2] run_timer_base+0x114/0x190 [ 177.821402][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 177.823070][ C2] ? rcu_is_watching+0x12/0xc0 [ 177.824601][ C2] run_timer_softirq+0x1a/0x40 [ 177.826214][ C2] handle_softirqs+0x216/0x8e0 [ 177.827736][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 177.829413][ C2] __irq_exit_rcu+0x109/0x170 [ 177.831002][ C2] irq_exit_rcu+0x9/0x30 [ 177.832477][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 177.834575][ C2] [ 177.835783][ C2] [ 177.836857][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.838689][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 177.840381][ C2] Code: 15 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 177.846294][ C2] RSP: 0018:ffffc90000187df8 EFLAGS: 00000286 [ 177.848171][ C2] RAX: 00000000001998f1 RBX: 0000000000000002 RCX: ffffffff8b6cd419 [ 177.850599][ C2] RDX: 0000000000000000 RSI: ffffffff8dbe121f RDI: ffffffff8bf48260 [ 177.853047][ C2] RBP: ffffed1003ad0910 R08: 0000000000000001 R09: ffffed100d4c65bd [ 177.855492][ C2] R10: ffff88806a632deb R11: 0000000000000000 R12: 0000000000000002 [ 177.857931][ C2] R13: ffff88801d684880 R14: ffffffff90850510 R15: 0000000000000000 [ 177.860390][ C2] ? ct_kernel_exit+0x139/0x190 [ 177.861925][ C2] default_idle+0x13/0x20 [ 177.863279][ C2] default_idle_call+0x6d/0xb0 [ 177.864799][ C2] do_idle+0x391/0x510 [ 177.866118][ C2] ? __pfx_do_idle+0x10/0x10 [ 177.867560][ C2] ? trace_sched_exit_tp+0x31/0x130 [ 177.869239][ C2] cpu_startup_entry+0x4f/0x60 [ 177.870762][ C2] start_secondary+0x21d/0x2b0 [ 177.872296][ C2] ? __pfx_start_secondary+0x10/0x10 [ 177.873972][ C2] common_startup_64+0x13e/0x148 [ 177.875557][ C2] [ 177.877093][ C2] Kernel Offset: disabled [ 177.878467][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:21:34 Registers: info registers vcpu 0 CPU#0 RAX=00000000002193d1 RBX=0000000000000000 RCX=ffffffff8b6cd419 RDX=0000000000000000 RSI=ffffffff8dbe121f RDI=ffffffff8bf48260 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90850510 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd3a005bb0 CR3=0000000046eb5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa0547836a3 00007fa0547836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64657474696d7265 7020746f6e206e6f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3a008036 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3a008036 00007ffd3a00803c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88806a53afc0 RCX=ffffffff81af411e RDX=ffff88801d2fc880 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90000157d10 RSP=ffffc90000157c38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c7947e R12=1ffff9200002af8c R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4a75f9 RIP=ffffffff81bb2e30 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc8039cf0d0 CR3=000000000e180000 CR4=00352ef0 DR0=000000000000f4eb DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0c0c0 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3a008080 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3a008036 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3a008036 00007ffd3a00803c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa054611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029706d742d7a79 73287269646b6d00 706d742d7a79732f 2e00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 050c554851085f5c 560d574c414e4800 554851085f5c560a 0b00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000012 RCX=ffffffff819b12a2 RDX=ffff88801d684880 RSI=ffffffff819b1290 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000648858 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920000c910d R13=0000000000000000 R14=ffff88801bf20000 R15=ffffc90000648920 RIP=ffffffff819b1292 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000557b3bef9c38 CR3=0000000024cd5000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63b9f83d00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000008 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000009 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63b9f83d00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636f73203a746e69 6f706b6365686320 656c626174626520 3a4c4941465a5953 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 544f52505049202c 4d41455254535f4b 434f53202c54454e 495f46412874656b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746f6e206e6f69 74617265704f203a 31206f6e72726528 200a295043545f4f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7461747320687469 7720646574697865 20706f6f6c0a2964 657474696d726570 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a37362073757461 7473206874697720 6465746978652070 6f6f6c0a29646574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74696d7265702074 6f6e206e6f697461 7265704f203a3120 6f6e72726528200a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 295043545f4f544f 52505049202c4d41 455254535f4b434f 53202c54454e495f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46412874656b636f 73203a746e696f70 6b6365686320656c 6261746265203a4c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 8003001000021000 02c8800401000002 080608010000002c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65686361630a3432 302e30303632203a 09097a484d207570 630a666666666666 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30203a096469206c 616369737968700a 424b203438333631 203a09657a697320 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63207570630a3020 3a09096469206572 6f630a34203a0973 676e696c6269730a ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574636972747365 726e752064697076 2074706520636970 61762066746d2072 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636d765f776f6461 6873206469762067 65725f6369706176 2074736575675f64 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572746365707320 31765f6572746365 7073203a09097367 75620a6c6d702073 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6269652073677061 7773207373617079 625f65726f74735f 636570732032765f info registers vcpu 3 CPU#3 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f5635 RDI=ffffffff9adf94e0 RBP=ffffffff9adf94a0 RSP=ffffc900007cf888 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006f R14=ffffffff9adf94a0 R15=ffffffff854f55d0 RIP=ffffffff854f565f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056162db59128 CR3=00000000302aa000 CR4=00352ef0 DR0=000000000000f64a DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=00000000ffffffff Opmask02=00000000fff80000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee5faa6c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000