last executing test programs: 5.050240865s ago: executing program 2 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80, 0x0) r2 = epoll_create1(0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000004c0)=0x29) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000140)={0x0, r1, r2, 0x0, 0xee, '\x00', {0x7fff, 0x1, 0xa, 0x0, 0x7, 0x6, 0x44, 0x7fffffffffffffff, {0x8, 0x9}, {0x5, 0xfffffffa}, {0x401, 0x7}, 0x9, 0x5, 0x8, 0x2, 0x8001, 0x4, 0xc3, 0x0, 0x8, 0xff91, '\x00', 0x1, 0x7fffffff, 0x8, 0x2}}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0xe, 0xf, 0x6, 0x5, 0x4, 0x4, 0x7, 0xfff4, 0xc54f]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x13d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac, {0xb, 0x2}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x2, 0x0, 0x1}}, 0xc0, @random=0x7, 0x2, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x9d, 0x6}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x1, 0xa, 0x84}}, @val={0x2d, 0x1a, {0x10, 0x3, 0x1, 0x0, {0x2, 0x4, 0x0, 0xa3, 0x0, 0x1, 0x1, 0x3}, 0x300, 0x7, 0x44}}, @void, @void, @void, [{0xdd, 0xdd, "2b64c36e2bf88d280312710be48fac6678839d27e31002f3d5a609ce9db3f6142444971bd991c92640380c55d4d14a578b988a6c579b234b32483e3a842b276f1e120d45c6b6e6a16599e66f3942e8266b89fa7db8161c455e10a2c6e36fd46430d595e193af4645f595f289285fe51b1ccd1390162e76f8c7aa7e92dad0f9f079b4c8a0f9cb156a84e08920e3d7c4854919d145f68710709005c336e30a92f20640d4c5ae201b6748c1805eb701d2e86f12f9a0e835e7de1b4a527b13a8a00ca73f6b3945d474975f14cd146db69bd5bc4827d78d668900329e676f82"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000480)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000d40)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) (async) accept4(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80, 0x0) (async) epoll_create1(0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000004c0)=0x29) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x68, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) (async) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000140)={0x0, r1, r2, 0x0, 0xee, '\x00', {0x7fff, 0x1, 0xa, 0x0, 0x7, 0x6, 0x44, 0x7fffffffffffffff, {0x8, 0x9}, {0x5, 0xfffffffa}, {0x401, 0x7}, 0x9, 0x5, 0x8, 0x2, 0x8001, 0x4, 0xc3, 0x0, 0x8, 0xff91, '\x00', 0x1, 0x7fffffff, 0x8, 0x2}}) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x18c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0xe, 0xf, 0x6, 0x5, 0x4, 0x4, 0x7, 0xfff4, 0xc54f]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x13d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @from_mac, {0xb, 0x2}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x2, 0x0, 0x1}}, 0xc0, @random=0x7, 0x2, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x9d, 0x6}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x1, 0xa, 0x84}}, @val={0x2d, 0x1a, {0x10, 0x3, 0x1, 0x0, {0x2, 0x4, 0x0, 0xa3, 0x0, 0x1, 0x1, 0x3}, 0x300, 0x7, 0x44}}, @void, @void, @void, [{0xdd, 0xdd, "2b64c36e2bf88d280312710be48fac6678839d27e31002f3d5a609ce9db3f6142444971bd991c92640380c55d4d14a578b988a6c579b234b32483e3a842b276f1e120d45c6b6e6a16599e66f3942e8266b89fa7db8161c455e10a2c6e36fd46430d595e193af4645f595f289285fe51b1ccd1390162e76f8c7aa7e92dad0f9f079b4c8a0f9cb156a84e08920e3d7c4854919d145f68710709005c336e30a92f20640d4c5ae201b6748c1805eb701d2e86f12f9a0e835e7de1b4a527b13a8a00ca73f6b3945d474975f14cd146db69bd5bc4827d78d668900329e676f82"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000480)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000d40)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r6) (async) 4.781396868s ago: executing program 2 (id=655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) r6 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0xba, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x7d, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x8, 0x6, 0x4, 0x10, 0x7}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xfd, "d208afcbe3cdef6bffffd1f0be96ca29"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xe9, &(0x7f0000000640)=@string={0xe9, 0x3, "3a932c54d526a40057a917d305b47713cd4e81d818626a0585f07051a84f2e481c60fd5bb8a798002c51c4e6e5aebfd8ba3ed7943e62268572f8740928e7f04b7777f8f68790896b527b1d48493a84537cca9664b150141dbadbc6581d14f740b7b7ed9acecac9df40228296a1c1bbdd4914539dab9dfc23dde0ecd231c1d4959399c3d2e162c9c246fc83e026a206bbe318a594a1c8ee64a2c737e352efe6f70ae44a34634dfff84eba7cccaa4b7ee8b710284da5a3384101556fb12f10778cae34ebc43bb8a38d68a88ebebdb0ae484614f5038625270a1cfce1b4b314b1a84544ab1bd60ce4"}}, {0xbb, &(0x7f0000000740)=@string={0xbb, 0x3, "ef6152f17bef51489a2f5646d4d3bef0b946ffbc3bc1ff4ad2b1d852fb7fd1ff6ccf1903c3a31cbf730f8137f11f92dbcd5d0994355b8d05b3fe329b1986a86c5bdceb9533e773e9e84a040c37e2ec5f178425dec2a97676796d512046606c51e296918ad1ecf5c0d711556499d5b2beca7b758e889994a3489b6c9030c56a661e8bfd2ddf12b9dbe4383d6efceed766eb23817486064b563da55244224884560b1068266638925240d9bd33e4a33a694fc4ceef810d210627"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40a}}, {0xc5, &(0x7f0000000840)=@string={0xc5, 0x3, "35d1deecf4f0b73bdef31f7954c4d05b9d03937b22524a3d925bdf97194c5d189eb69c574e29cd6f435477adb9cc3a310cbe5003783442028515b88ccd6930b2043ee7cc32007a090274e594e0bf1de5a8c9fcd54a6cdb414cc973df4617b70991310ec1698807c5b633057be1229ba9ace4b1a691db4cd10bb69dfcbf9a8d08c747e8da8abef314e6adacffa89306d901ddb606f022b4cc18f37836e2bd4fd51bef0720ba0fdcb36940650c4d9963d9e5dbc464184a95feb655bc42ed86c47ef3885b"}}]}) syz_usb_control_io$printer(r6, &(0x7f0000000ac0)={0x14, &(0x7f00000009c0)={0x0, 0x11, 0x7c, {0x7c, 0x1, "14948cd13d9b4eb3bd4b99e35a2ec5dee0959fccd7b71bbc8e7ef201b49ede3189d9d163298560c083b38a49226b4ba386b878f26111c93420a58a23768896d98ebf8205bd3441fcea6691167b4da8cfc0fde83ab539bf83eb7e1eec334a361b210a3038059b743199f2dd37c7a269a90cd50bf0eab87fc4b0bc"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000b00)={0xd81ed20933e8a6f4, 0x16, 0x29, "91810dfe98127e798dcbc84ff746c8811de042ad2ec3c069439cae0aa0e04c57f52ac69c946271f815"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000bc0)={0x20, 0x0, 0xca, {0xc8, "5426c397f558cb7ccc074e8a510b12ecc736279b034f9256b1076a8cc1b50665c0360cb9687cdda97fe1248b591736a7754e1ebae3cd1328e4e9dcce6bee451ff8bf8d9199fa03ed2ebd29f85f9999091f87aeca427178a504a43b584ee6c01237236c9e24107cd2a1939e089b2f35fcff381f8afe2818d1bcffefeb21240923277c2f53aba3b803894171bec7fcf102ac0ba8e70ee8059d8298ff0c664f2d5dfdbd168efce645536cdd885bfac8631da8d5dd805dc1ccb8d4c370d1eb1a62de577f073adcf2f176"}}, &(0x7f0000000cc0)={0x20, 0x1, 0x1, 0x39}, &(0x7f0000000d00)={0x20, 0x0, 0x1, 0xd4}}) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000d80)={0x4, 0x108000}) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@nested_load_syzos={0x136, 0x149, {0x3, 0x0, [@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_load_code={0x12e, 0x83, {0x0, "c74424001f000000c744240216280000ff1c2464360f01f866baf80cb8024d8a8eef66bafc0cecc7442400bfda0000c744240200000000c7442406000000000f011c240f211b66410faebd7e6baed34381645f2e079900000f08c4a32d6a51000066bad10466b8eb2066ef"}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @code={0xa, 0x5e, {"0f0866410f38005dc3c4420d367e240f128fa000000066b8f6008ed048b806000000000000800f23d80f21f835400000200f23f80f79efc18a00000000b266430fc2aa0000000000650f017700"}}, @nested_amd_vmload={0x182, 0x18, 0x3}]}}, @nested_load_syzos={0x136, 0xe0, {0x0, 0x4, [@wr_drn={0x68, 0x20, {0x1, 0x8}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0x4451, 0x5}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest16=0x80a, 0x9, 0x80000000, 0x2}}, @wrmsr={0x65, 0x20, {0xbd5, 0x6}}]}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x1, 0x5fc00000000}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c08, 0xfffffffffffff998, 0x8, 0x4}}, @nested_load_code={0x12e, 0x6f, {0x3, "c744240047000000c74424020c000000ff2c24400f08c42379044031af6466470f38800366baf80cb836f9658fef66bafc0c66ed8f4878c2effd66b818008ed00f01d1b911090000b800780000ba000000000f300f01c4"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x600a, 0x3, 0x5, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0xd8be}}], 0x3d0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x10, 0x8, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0xba, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x7d, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x4}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x8, 0x6, 0x4, 0x10, 0x7}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xfd, "d208afcbe3cdef6bffffd1f0be96ca29"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xe9, &(0x7f0000000640)=@string={0xe9, 0x3, "3a932c54d526a40057a917d305b47713cd4e81d818626a0585f07051a84f2e481c60fd5bb8a798002c51c4e6e5aebfd8ba3ed7943e62268572f8740928e7f04b7777f8f68790896b527b1d48493a84537cca9664b150141dbadbc6581d14f740b7b7ed9acecac9df40228296a1c1bbdd4914539dab9dfc23dde0ecd231c1d4959399c3d2e162c9c246fc83e026a206bbe318a594a1c8ee64a2c737e352efe6f70ae44a34634dfff84eba7cccaa4b7ee8b710284da5a3384101556fb12f10778cae34ebc43bb8a38d68a88ebebdb0ae484614f5038625270a1cfce1b4b314b1a84544ab1bd60ce4"}}, {0xbb, &(0x7f0000000740)=@string={0xbb, 0x3, "ef6152f17bef51489a2f5646d4d3bef0b946ffbc3bc1ff4ad2b1d852fb7fd1ff6ccf1903c3a31cbf730f8137f11f92dbcd5d0994355b8d05b3fe329b1986a86c5bdceb9533e773e9e84a040c37e2ec5f178425dec2a97676796d512046606c51e296918ad1ecf5c0d711556499d5b2beca7b758e889994a3489b6c9030c56a661e8bfd2ddf12b9dbe4383d6efceed766eb23817486064b563da55244224884560b1068266638925240d9bd33e4a33a694fc4ceef810d210627"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40a}}, {0xc5, &(0x7f0000000840)=@string={0xc5, 0x3, "35d1deecf4f0b73bdef31f7954c4d05b9d03937b22524a3d925bdf97194c5d189eb69c574e29cd6f435477adb9cc3a310cbe5003783442028515b88ccd6930b2043ee7cc32007a090274e594e0bf1de5a8c9fcd54a6cdb414cc973df4617b70991310ec1698807c5b633057be1229ba9ace4b1a691db4cd10bb69dfcbf9a8d08c747e8da8abef314e6adacffa89306d901ddb606f022b4cc18f37836e2bd4fd51bef0720ba0fdcb36940650c4d9963d9e5dbc464184a95feb655bc42ed86c47ef3885b"}}]}) (async) syz_usb_control_io$printer(r6, &(0x7f0000000ac0)={0x14, &(0x7f00000009c0)={0x0, 0x11, 0x7c, {0x7c, 0x1, "14948cd13d9b4eb3bd4b99e35a2ec5dee0959fccd7b71bbc8e7ef201b49ede3189d9d163298560c083b38a49226b4ba386b878f26111c93420a58a23768896d98ebf8205bd3441fcea6691167b4da8cfc0fde83ab539bf83eb7e1eec334a361b210a3038059b743199f2dd37c7a269a90cd50bf0eab87fc4b0bc"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000b00)={0xd81ed20933e8a6f4, 0x16, 0x29, "91810dfe98127e798dcbc84ff746c8811de042ad2ec3c069439cae0aa0e04c57f52ac69c946271f815"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000bc0)={0x20, 0x0, 0xca, {0xc8, "5426c397f558cb7ccc074e8a510b12ecc736279b034f9256b1076a8cc1b50665c0360cb9687cdda97fe1248b591736a7754e1ebae3cd1328e4e9dcce6bee451ff8bf8d9199fa03ed2ebd29f85f9999091f87aeca427178a504a43b584ee6c01237236c9e24107cd2a1939e089b2f35fcff381f8afe2818d1bcffefeb21240923277c2f53aba3b803894171bec7fcf102ac0ba8e70ee8059d8298ff0c664f2d5dfdbd168efce645536cdd885bfac8631da8d5dd805dc1ccb8d4c370d1eb1a62de577f073adcf2f176"}}, &(0x7f0000000cc0)={0x20, 0x1, 0x1, 0x39}, &(0x7f0000000d00)={0x20, 0x0, 0x1, 0xd4}}) (async) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) (async) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000d80)={0x4, 0x108000}) (async) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@nested_load_syzos={0x136, 0x149, {0x3, 0x0, [@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_load_code={0x12e, 0x83, {0x0, "c74424001f000000c744240216280000ff1c2464360f01f866baf80cb8024d8a8eef66bafc0cecc7442400bfda0000c744240200000000c7442406000000000f011c240f211b66410faebd7e6baed34381645f2e079900000f08c4a32d6a51000066bad10466b8eb2066ef"}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @code={0xa, 0x5e, {"0f0866410f38005dc3c4420d367e240f128fa000000066b8f6008ed048b806000000000000800f23d80f21f835400000200f23f80f79efc18a00000000b266430fc2aa0000000000650f017700"}}, @nested_amd_vmload={0x182, 0x18, 0x3}]}}, @nested_load_syzos={0x136, 0xe0, {0x0, 0x4, [@wr_drn={0x68, 0x20, {0x1, 0x8}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0x4451, 0x5}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest16=0x80a, 0x9, 0x80000000, 0x2}}, @wrmsr={0x65, 0x20, {0xbd5, 0x6}}]}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x1, 0x5fc00000000}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c08, 0xfffffffffffff998, 0x8, 0x4}}, @nested_load_code={0x12e, 0x6f, {0x3, "c744240047000000c74424020c000000ff2c24400f08c42379044031af6466470f38800366baf80cb836f9658fef66bafc0c66ed8f4878c2effd66b818008ed00f01d1b911090000b800780000ba000000000f300f01c4"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x600a, 0x3, 0x5, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0xd8be}}], 0x3d0}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 1.958895861s ago: executing program 1 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x2004c9c1) sendmmsg$unix(r2, &(0x7f000000a0c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x4004000) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e26}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) sendto$packet(r2, &(0x7f0000000040)="a90384c1d6d7f9f0476e2b2df4397eb726c18f6e4e5c1bfc3824e3137f7bf933b9e40952db78c61e98721c7da7", 0x2d, 0xc080, &(0x7f0000000080)={0x11, 0x4, r4, 0x1, 0x10, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) r6 = gettid() rt_sigqueueinfo(r6, 0x36, &(0x7f00000007c0)={0x20, 0x2, 0x8}) 1.810496521s ago: executing program 1 (id=678): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = fanotify_init(0x0, 0x1000) write$P9_RSYMLINK(r0, &(0x7f0000000340)={0x14, 0x11, 0x0, {0x0, 0x4}}, 0x14) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r2 = fanotify_init(0x1, 0x101801) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r1], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="04ae01540ae2b14f2db314f83fef4673a1cba594c7be054ea887d9012c8903ae2dd654494efb4b426f06869f84a48c8901d06ea86191853945d65c60aab6b5736b06922d002aa8", @ANYRES16=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], 0x0, 0x6}, 0x94) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) fanotify_mark(r2, 0x80, 0x37, r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0xdddfb8c95d0a80d3}, 0x4000080) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x16, 0x0, 0x0, 0x7fbf0000}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001ac0)=ANY=[@ANYRES8=0x0, @ANYRES8=r2, @ANYRESHEX, @ANYRES16=r3, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000c4) clock_nanosleep(0x5, 0x0, &(0x7f0000000580), &(0x7f00000005c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000025000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000010c0005400000000000000009140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, 0x0, 0x40) setresuid(0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x100) 1.651350748s ago: executing program 2 (id=683): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xe9) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f00000006c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) chown(&(0x7f00000003c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="00000000f319f33de6f3a247409d535208e0ceafcab1a94a6f32bef5f80bbd73fd1bbcbf26ee725668f90c135557af974bcfa27d8fc8eb0b841e1d47494cc01bf6c64b41caa80992f0d89d6fbc7dc16a062b2cdc391eba0570da44de295d38af8e6bffed101498c6104f4986410c35ec931fa686b3b85d9076988d374ae70f4c8e59d9829b6d34bdd4ebc7e563", @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080b6a512adeb83c70f36eeaf7e1c008d9c3baee9a908c1a53d0d3df63ec7e590"], 0x2c}}, 0x4808) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = accept(r8, &(0x7f0000000240)=@nfc, &(0x7f0000000100)=0x80) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x8, 0x6, 0x201, 0x0, 0x0, {0x8, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES16=r10, @ANYRES32, @ANYRES32=r11, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080200000000000000010001002d1a40000b000000733728b5486c70d4bad903580000001300040003000b00000006"], 0x68}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0f4602e3f094d7839a0a28efdc27273668aca849958b61dcaf587d155881af05e7"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.504269439s ago: executing program 2 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001b00)=0x0) prlimit64(r1, 0xe, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='adfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000180)={0x7}, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000340)='[', 0x1}], 0x2, &(0x7f0000001b40)=ANY=[@ANYBLOB="c31c989fb4a833020000000000000084000000020000000a000400190000000b000002", @ANYRES32=r4], 0x20, 0x404a055}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000a80)=@assoc_value={r4, 0x80000001}, 0x8) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000000200)={&(0x7f00000001c0)={0xa, 0x4e21, 0x6, @empty, 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000005c0)="784c3d3971054edc88c5b7302e2dd7862003734b81c70e071e9aa76420e9779093abe4301498073eccdfba6eca640ea153170998fd0b65ddc8338f9021145e892443f9237fbda0ea64749d18ec8f6332f0801494aabd3b5bd39864f93e8b3c09aa007f3f5ced5ce477563ca3298dd36c33dc221e4f4d41ddf17093706642e7b203034e09ac2c3a", 0x87}, {&(0x7f0000000680)="4ed3639322bf6c6be23460608f362f159ef168d30ead60c79636e03cca86f65532481f8eb30fca411fd8ea87f5914572c65ad55a136d405ac8a301bca4c2b41cf7c1891f4d1e2bbe9dc6f0379d274f105326097737434401ee88f7562f2028ceef527b4aa203e17f74cb398d392ff40d59a81419b203a346818e22a0720be117975f14574eee569a84a2dfef3c00fa020e24379ea71804c25d662b3eae4c4e51bed922bdaf52b3129fa9da28084c80da7bd1faf59a1b324e2d79379248a9ca5c4d5b1b1196654c", 0xc7}, {&(0x7f0000000780)="54ab72bc696de4add4d37fe3d91786c5ab999b143642073e354517f218fff9b98d2d17e7b3ff66b5041850fcb14889bc4751e1d56303bb0d1cb0562ba6cc29f7ba37e8472fb5086dbc4687b72002c02f2e4e5d7e0755b7e61a39b1f5f4e0c8ecba32815cad8ab3532c6811e1ded365e2e2da0daf0b369cdcb6da282400b40bfc0408becac5df71a12725a1096e1ef169222f47e00e99dee355a2356cd157b6b64f083037bb8b5a2c7aecd98cdb902ae5d5173e79eaad7e09d4f67fa43bf2f9043c725f07baf9f0fc88835541a3ff57224134a80148", 0xd5}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000880)="a731b37b8bebc8d1e5bb2164afcc2b502ec652d0debe8c004808541f0e066ed4529ca343c92579e41a1c42eeca58533a6c2a6514e05b3e08d9e933368f3d4b02d2b87c65dec2b5e43ab02a3a3b1e44f0f6fdc060f39794c663309c558176cf4375c79aaadf2956f07deee305279f9129cac7d47ab2fa75953b8331731452d42146abd75ff647fb3cbccf66da96a4b41105087d801059e081a09d0b7131c06071917e983fff046caf73", 0xa9}, {&(0x7f0000000940)="826b6fe0b01be22f423a70096f13ddadd46d7c1ea3980afe33ba72eb5a66b88ac91e4cf9bba66cb5d6d2f976ace1ffc39f73d51d99ae7fec34f977961af3ad2ca4e25e604ca90aba88d75b52c8e65df632d22d0819f6f95cddb8f2cdd05780fd6f0e6d1fddb9039283b15383b19bfa74c90b0a4367c7b8c561fbd65f5036e9b4c15655192c620a61fbada348f334267e6b4211aee2ca0ecc4af5bef9a7889ccef1bcf83843afe912a54829edfb4030465c8061dd59b5c0cca26ef7ffb742cd9cb995831c2e03e7ed8836ccf3", 0xcc}], 0x6, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0xa8}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = eventfd(0xfffffffd) write$eventfd(r8, &(0x7f0000000240)=0xfffffffffffffffb, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42}, 0x2000401c) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000000)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000400)={{r9, r10+10000000}, {r11, r12+10000000}}, &(0x7f0000000a40)) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r13) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b\x00'], 0x1c}}, 0x4000054) 1.240554736s ago: executing program 3 (id=690): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d3078303030303030303030303030313030302c"]) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@mcast1, 0x71, r1}) 1.129696068s ago: executing program 3 (id=691): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x80, 0x4, '\x00', &(0x7f0000000040)=0x2}) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000001c0)={{[0x0, 0x2, 0x3, 0x9]}, 0x0, 0x3, 0x2, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x4, 0xffffffff]}, {0xff38, 0x7, 0x12, 0x53e}}, 0x6, 0x0, ';[\x00'}, {{@_ha_fsid={[0xa68ad00, 0x5]}, {0x1, 0x5, 0x90, 0x4}}, 0xe7, 0x0, '+&\x00'}, {{@align=0x3ff, {0x0, 0x101, 0x9, 0x3}}, 0x1, 0x0, '$][(@\x00'}, {{@_ha_fsid={[0x3, 0x6]}, {0x4, 0x2, 0x65, 0xd9}}, 0x3, 0x0, '\x00'}, {{@_ha_fsid={[0x9, 0x4]}, {0x9, 0x9817, 0x9, 0x8}}, 0x3, 0x0, '&:\x00'}, {{@align, {0x6, 0x6, 0x2000000, 0xf}}, 0x3ff, 0x0, '$\\\x00'}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@mcast1, @broadcast, 0x4, 0x7}}) (async, rerun: 32) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0xf7305000) (async, rerun: 32) r2 = dup(r1) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe) (async) r3 = mq_open(&(0x7f0000000300)='.\x00', 0x2, 0x84, &(0x7f0000000340)={0x8, 0x1, 0x7fff, 0x6}) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, r4, 0xd25, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x5) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) (async) recvmsg$unix(r1, &(0x7f00000019c0)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/241, 0xf1}, {&(0x7f0000001800)=""/167, 0xa7}], 0x4, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) read(r1, &(0x7f0000001a00)=""/4096, 0x1000) (async) r7 = syz_open_dev$vcsn(&(0x7f0000002a40), 0x5, 0x4e201) splice(r6, &(0x7f0000002a00), r7, &(0x7f0000002a80)=0x8000000000000000, 0x2, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002ac0)={0x0, 0x9, 0xfffe, 0xd9, 0x2, 0x9}, &(0x7f0000002b00)=0x14) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000002b40)={r8, 0xe0, "1b626c0a41dd26de3fefc1b626b6e1494a5315699c870d7b9f06c96b90250fc3e937805b0519eaa8c37a999d3260ed1b5f919467f36850321e45cbdf26fec17bb48311966d2845769b94e750e89839781fe329e1a8005d920035f2d892b0b5868a7218797f8d247632f105aac7bfaf906369dfc2543977b67919f0b22a4c1f8d4168e7f4c028f3256df3b06ae8eb2ee8352dfff222688316a2100dd46146e09ab3213882f8cfbaf4495e50c4c04a4fad30f6e78e2f834139f2a0135f4aad5db011e639c49f1960bab514da05dc9317839b7acd868063941deb7458336fc0dae0"}, &(0x7f0000002c40)=0xe8) (async, rerun: 64) splice(r1, &(0x7f0000002c80)=0xf6, r6, &(0x7f0000002cc0)=0x10000000, 0x4, 0x1) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000002d00)={r8}, 0x8) (async, rerun: 32) write$P9_RLERRORu(r5, &(0x7f0000002d40)={0x12, 0x7, 0x2, {{0x5, 'sit0\x00'}, 0x2}}, 0x12) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002d80)={0x0, 0x1, '\x00', [@pad1, @ra, @enc_lim={0x4, 0x1, 0x7}]}, 0x18) (async, rerun: 64) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000002dc0)={0xffffffffffffffff}) (rerun: 64) r11 = syz_open_pts(r10, 0x404a00) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f0000002e40)=""/4096, &(0x7f0000003e40)=0x1000) (async, rerun: 64) open_by_handle_at(r11, &(0x7f0000003e80)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x1ff, 0x7, 0x4, 0x3, 0xffffffffffff7fff}}, 0x4000) (rerun: 64) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000003ec0)={r9, 0x40}, &(0x7f0000003f00)=0x8) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f0000004040)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004000)={&(0x7f0000003f80)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000004080)=0x8) 1.128531161s ago: executing program 3 (id=692): iopl(0x3) syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB="7f454c460302000406000000000000000300030002000000b40300000000000040000000000000003702000000000000810000007c003800030003000100020000000070ff07000001000000000000000800000000000000040000000000000000000000000000800f000000000000009e11000000000000000000300f00000005000000000000000000000000000000fa9d00000000000058000000000000002400000000000000100000000000000002"], 0x96b) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1b, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x4}}]}, 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400268073b712b7ea46d927874ae80e42270e23707ff496287e1b0013f6e43a720eddc9cdaa29cc7abc0000000c003f0000000000000002000d00d880fc8cd828b704001880000000872dbabf04e79912548c2fe9ac2b28ebb91a02adeb0e89fac194f81a94f00d8e4c5c27ae6d83671d383ee2612e5764749d234069aa3b81f4e5707b7bfa7c7e67c9dfbb2ee974b282aa79b6c69c56debaf4749d43354e5db6bff424d6d15abe353a582bd87dab76a6075566a419610127a2f2a4df7c3d8407b73c667770f5445674871db43e2b7304405587059b16717bcdcfad1267b1f34563f9369d0aa5da400708000500", @ANYRES32=r0, @ANYBLOB="00f400080001"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3, 0x4) 1.03181805s ago: executing program 3 (id=693): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22642, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xb5d5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x23) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r4, &(0x7f00000000c0)=""/219, 0xdb) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000500)={0x1, 0x7}, 0x2) 951.464782ms ago: executing program 1 (id=694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000, 0x132}, &(0x7f0000000100)=0x0, &(0x7f0000002300)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="350e0500230000002400128009000100626f6e64000000001400028008000200", @ANYRES32=r1, @ANYBLOB="0500010005"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000140)=0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="e000000011000100350a979c281900000000000000004015143f4529d72384a65b0f683ca0a21fdf11444d7bbf3bc87e09fb185380504c23d961bdc2e326715baaca5d87ea3a2d0572f6a7882ef366b38649669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a81146b174850d36744c882033716525c995"], 0xe0}], 0x1}, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd=r7, 0xc, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000000000000010000032c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100000208000b4000000000300004802c00018008000100636d7000200002800c000380070001009c979b00080001400000001408000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000400)={'tunl0\x00', r6, 0x10, 0x8000, 0x6, 0x3, {{0x3c, 0x4, 0x2, 0x37, 0xf0, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x2, [{@local, 0xc08b}]}, @timestamp_prespec={0x44, 0x4c, 0x3a, 0x3, 0x4, [{@multicast1, 0xfffffff8}, {@private=0xa010100, 0x6}, {@loopback, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc3}, {@local, 0x4}, {@multicast1, 0x400}, {@empty, 0x84}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x800}]}, @generic={0x94, 0x11, "eea6d83cc6490e3925c926a08f3ba7"}, @timestamp={0x44, 0x2c, 0x6f, 0x0, 0x6, [0x4871, 0xb, 0x7, 0x4, 0x100, 0x7, 0x4, 0x9, 0x2, 0x400]}, @ssrr={0x89, 0xf, 0x5a, [@dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x29, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x7}, {@multicast1, 0x7}, {@rand_addr=0x64010101, 0x3}, {@loopback, 0x7ff}]}, @ssrr={0x89, 0xf, 0xee, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', r6, 0x700, 0x8, 0x100, 0x2, {{0x43, 0x4, 0x0, 0xe, 0x10c, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0x8, 0x1, 0x6, [{@private=0xa010100}, {@multicast1, 0x7}, {@remote, 0x40}, {@rand_addr=0x64010101, 0xfffffffc}, {@rand_addr=0x64010101, 0x27}, {@rand_addr=0x64010102, 0x7}, {@loopback, 0x5}]}, @timestamp_addr={0x44, 0x44, 0x6a, 0x1, 0x1, [{@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xf76}, {@local, 0x7}, {@loopback}, {@multicast2, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}]}, @ssrr={0x89, 0x3, 0x19}, @rr={0x7, 0x1f, 0xc6, [@empty, @remote, @private=0xa010102, @loopback, @private=0xa010100, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x44, 0xdf, 0x1, 0x6, [{@private=0xa010101}, {@private=0xa010102, 0xd0e}, {@empty, 0x1aa}, {@multicast1, 0x6}, {@broadcast, 0x96c4}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@rand_addr=0x64010101, 0x6}]}, @generic={0x88, 0xe, "45a015f765d7bb56eb59a399"}, @noop]}}}}}) r13 = socket$packet(0x11, 0x3, 0x300) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r13, &(0x7f0000000540)="09000000e70014000000d97bfbf7", 0xe, 0x200000c0, &(0x7f00000001c0)={0x11, 0x88a8, r15, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x67}}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000001380)=ANY=[@ANYBLOB='<\n\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000008000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000080080007000000000008000100", @ANYRES32=r6, @ANYBLOB="880002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040009000307080000000a002b9306000000040083010200000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000008000100", @ANYRES32=r6, @ANYBLOB="600102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=r6, @ANYBLOB="f800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400050000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r6, @ANYBLOB="fc00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="f400028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffff00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r11, @ANYBLOB="c0000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000001000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="8000028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004005605000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="cc0102803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000c00000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600eb2b4ab7", @ANYRES32=r15, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000034000400070008050200000001800504e4e0000005000840070000000101058100000000080040d0090000000000067f1400000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400830b0000"], 0xa3c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0xc000, 0x0) 851.756963ms ago: executing program 2 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f00000004c0)=""/88, 0x58, 0x0, &(0x7f0000000540)=""/40, 0x28}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file1\x00', 0x0, 0x4010, r0}, 0x18) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xa, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3}, [@alu={0x4, 0x1, 0xb, 0x6, 0x0, 0x18, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @generic={0x5e, 0xd, 0x7, 0xf7, 0x1e4b64db}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000b80)=""/4096, 0xe264eaee22edde68, 0x49, '\x00', r4, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x1000006, 0x1, 0x6}, 0x10, r5, r6, 0x0, &(0x7f0000000700)=[r7, r8], 0x0, 0x10, 0xff}, 0x94) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x10, 0x0, 0x800000000001780}, {0x10, 0x0, 0x8}]}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04020f2b1ef401aaaaaa1009068d920ff200000000"], 0x12) setsockopt$inet_int(r11, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) r12 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r12, &(0x7f0000000180)={0x2, 0xcc20, @empty}, 0x10) listen(r0, 0x3) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 673.286274ms ago: executing program 1 (id=696): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="8842000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="a00001000200e9ff0000030067656e6576653100000000000002684268f68d077117a65c0e866ac10000"], 0x5c}}, 0x26040090) syz_open_dev$sndmidi(&(0x7f0000000340), 0x3ff, 0x28082) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r4, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x81}], 0x2, 0x0, 0x200, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRES32=0x0], 0x0, 0x37, 0x0, 0x0, 0xfffffffc}, 0x28) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xb, 0x0, 0x0, @generic=0x3}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="1600000002", @ANYRES32=0x0, @ANYRESHEX], 0x48) r9 = fsmount(r5, 0x1, 0x0) fchdir(r9) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r8}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) pread64(r10, &(0x7f0000000500)=""/222, 0xde, 0x8d35) ioctl$CDROMEJECT(r4, 0x5309) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) bind$netlink(r10, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x20}, 0xc) 561.624688ms ago: executing program 1 (id=698): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000800)=r1, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x32, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fc7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be8200000000", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x8000) 410.273028ms ago: executing program 3 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000f9ff00"], 0x24}}, 0x80) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f0000000080)={0x2, 0xb7, 0x1, 0x88}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000040000000400a5270f4300000025ff00", @ANYBLOB="522def15d07279a64d05f769c8217ddcf96f7f00378ef2d2a3dc3b77e1f1397ebc9b287cd2c61e8ea3a13c18edc936b7e60a902379dd188d25c92ddf8a55998da61bf4d2dc7e708ee689ce73b7cf20d71d49b634445f4ec0f2cb0980e70a1246f23966e6beff3e239bddd7d216b3ab41e97d9d4ea46f2e07e12a891601004422e17cf3b1f9bf9198b8412973383871b539163efe3354973567a2558460ea6a53891f30a6265cef25672a60dd1bffdaad58c1679f817d0291e85601482bddb5e025101215e76b2ac82bb4f0bb2b5ffef9108257591a89e7083477d4127ced185d2d", @ANYBLOB="0000000000000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r1], 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010003704fefdffffffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="c30407001b14bf26280012800b000100697036746e6c00001800028014000200fc0100"/48], 0x48}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioprio_set$pid(0x2, 0x0, 0x0) r7 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47f8, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}}) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r6, 0xffffffffffffffff, 0x4, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=[0xa38], &(0x7f0000000300)=[0x5, 0x2, 0x0, 0x1], 0x8, 0x1, 0x1, 0xffffffffffffffff}}, 0x40) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x13, r12, 0x29985000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) 409.935902ms ago: executing program 1 (id=701): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x22402) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211008000000000000000080211000000000000000000000000000101010000060202020202020100710700000100080100"], 0x37) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0xb, '\x00', @data=0x4}]}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x0, 0x0, 0xa1a, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x80800) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x5, 0x4) 409.732936ms ago: executing program 0 (id=702): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x8000) 261.243577ms ago: executing program 0 (id=703): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$kcm(0xa, 0x2, 0x0) open(0x0, 0xa0000, 0xa1) r2 = socket(0x1a, 0x80805, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x8001, 0x4) 260.653032ms ago: executing program 0 (id=704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x7, 0x0, [{0x1, 0x1ff, 0x2, 0x324, 0x2}, {0x40000001, 0x6, 0x9, 0x9, 0x10000081}, {0x0, 0xa0000000, 0xe, 0x1, 0x7}, {0x80000019, 0x8001, 0x2ec, 0xfffffffc, 0x76bc}, {0x1, 0x9, 0x8, 0xfffffff9}, {0x40000001, 0x7, 0x5, 0x9}, {0x0, 0x3, 0x5, 0x1, 0xf2c}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 132.031997ms ago: executing program 0 (id=705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@deltaction={0x24, 0x18, 0x1, 0x10000004, 0x25dfdbff, {0xa}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x20004000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0xb00, @broadcast}}}}}}, 0x0) 131.875656ms ago: executing program 3 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_io_uring_setup(0x56d6, &(0x7f0000000440)={0x0, 0xabf4, 0x8, 0x4, 0x24f}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000171c000180090001006d617371000000000c000280080002400000000814000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.026456ms ago: executing program 0 (id=707): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = fsmount(r1, 0x0, 0x2) (rerun: 64) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) (async) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x11, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) 129.056µs ago: executing program 2 (id=708): r0 = socket(0xe, 0x1, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000240)={{r0, &(0x7f0000000000)='\x00', 0x4c0, &(0x7f0000000040)={@_ha_fsid={[0x7, 0xffffff80]}, {0x10, 0x7, 0x5, 0x7}}, 0x80000001, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8001}, 0x1, &(0x7f0000000200)=[{0x2, 0xd, &(0x7f0000000100)='-!\x00', &(0x7f0000000140)="a7d30697a1f539943af009b1ea4d264f713349a6967feed0fcd3c4a9c45ad388fd44ed850af808e375a8a4f159565ea31bc5ec50872acbe05d3a678071ecfc3e492e6df11f5feb8aa4d803b3d74fc0d9b307307e1cd20671a0a0cb922acc4ea60d6521f5507bfb880632a0a610fa26c904b6d51b0059638bcefbffc1a9fcfdf7401e59f5699495533402aee18d56ea3e9770e2a07b", 0x95, 0x20}]}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x5, 0x0, '\x00', {0x0, @reserved}}) unshare(0x48020200) 0s ago: executing program 0 (id=709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd25, 0x2000, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000040)={0xa, 0x4, 0x2, 0x7fff, 0x2, "773d8ecdef384aa0"}) kernel console output (not intermixed with test programs): 291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.868554][ T40] audit: type=1400 audit(1774458818.160:86): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="socket:[5805]" dev="sockfs" ino=5805 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.875186][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.881531][ T5933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.885326][ T5933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.886287][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.892540][ T5933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.893166][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.894758][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.900212][ T5933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.901482][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.902252][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.903091][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.905060][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.905069][ T5933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.906390][ T5933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.906818][ T5933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.907722][ T5933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.912581][ T5292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.915180][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.923791][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.926637][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.928980][ T40] audit: type=1400 audit(1774458818.230:87): avc: denied { read } for pid=5932 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.950205][ T40] audit: type=1400 audit(1774458818.230:88): avc: denied { open } for pid=5932 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.959580][ T40] audit: type=1400 audit(1774458818.240:89): avc: denied { mounton } for pid=5932 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.207920][ T40] audit: type=1400 audit(1774458818.520:90): avc: denied { module_request } for pid=5932 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.245542][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 63.316218][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 63.369945][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 63.375080][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 63.387554][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.389834][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.393049][ T5932] bridge_slave_0: entered allmulticast mode [ 63.395769][ T5932] bridge_slave_0: entered promiscuous mode [ 63.446191][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.448967][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.452409][ T5932] bridge_slave_1: entered allmulticast mode [ 63.456512][ T5932] bridge_slave_1: entered promiscuous mode [ 63.540144][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.543026][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.545641][ T5936] bridge_slave_0: entered allmulticast mode [ 63.548930][ T5936] bridge_slave_0: entered promiscuous mode [ 63.577800][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.580146][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.582683][ T5946] bridge_slave_0: entered allmulticast mode [ 63.585381][ T5946] bridge_slave_0: entered promiscuous mode [ 63.588257][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.590985][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.593677][ T5936] bridge_slave_1: entered allmulticast mode [ 63.596475][ T5936] bridge_slave_1: entered promiscuous mode [ 63.609694][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.615184][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.626122][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.628499][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.632215][ T5937] bridge_slave_0: entered allmulticast mode [ 63.635285][ T5937] bridge_slave_0: entered promiscuous mode [ 63.638471][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.641526][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.644093][ T5937] bridge_slave_1: entered allmulticast mode [ 63.646869][ T5937] bridge_slave_1: entered promiscuous mode [ 63.649971][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.652941][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.656143][ T5946] bridge_slave_1: entered allmulticast mode [ 63.659956][ T5946] bridge_slave_1: entered promiscuous mode [ 63.686438][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.697053][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.707989][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.713279][ T5932] team0: Port device team_slave_0 added [ 63.716840][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.741320][ T5932] team0: Port device team_slave_1 added [ 63.757698][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.772467][ T5936] team0: Port device team_slave_0 added [ 63.775864][ T5946] team0: Port device team_slave_0 added [ 63.779556][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.794170][ T5936] team0: Port device team_slave_1 added [ 63.797722][ T5946] team0: Port device team_slave_1 added [ 63.806158][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.808683][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.818368][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.830209][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.832860][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.842078][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.871862][ T5937] team0: Port device team_slave_0 added [ 63.881119][ T5937] team0: Port device team_slave_1 added [ 63.891161][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.893531][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.901932][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.914745][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.917518][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.927714][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.932576][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.934897][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.944123][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.969404][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.971935][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.980139][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.985584][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.987934][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.996616][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.008776][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.011594][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.021969][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.043703][ T5932] hsr_slave_0: entered promiscuous mode [ 64.047199][ T5932] hsr_slave_1: entered promiscuous mode [ 64.107577][ T5936] hsr_slave_0: entered promiscuous mode [ 64.110226][ T5936] hsr_slave_1: entered promiscuous mode [ 64.113005][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 64.115148][ T5936] Cannot create hsr debugfs directory [ 64.127374][ T5946] hsr_slave_0: entered promiscuous mode [ 64.131036][ T5946] hsr_slave_1: entered promiscuous mode [ 64.134308][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 64.136772][ T5946] Cannot create hsr debugfs directory [ 64.178981][ T5937] hsr_slave_0: entered promiscuous mode [ 64.182496][ T5937] hsr_slave_1: entered promiscuous mode [ 64.185561][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 64.187968][ T5937] Cannot create hsr debugfs directory [ 64.531163][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.540414][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.556690][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.563422][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.603035][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.610179][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.617372][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.624292][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.703749][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.708617][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.718303][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.743326][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.801193][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.812991][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.819082][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.831553][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.838224][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.874536][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.883107][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.894636][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.897742][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.918432][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.921475][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.930868][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.948273][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.951503][ T5940] Bluetooth: hci1: command tx timeout [ 64.951627][ T5945] Bluetooth: hci0: command tx timeout [ 64.953479][ T5940] Bluetooth: hci3: command tx timeout [ 64.953736][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.953829][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.994237][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.997321][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.013857][ T5932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.030925][ T5940] Bluetooth: hci2: command tx timeout [ 65.039663][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.053765][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.057076][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.061962][ T40] audit: type=1400 audit(1774458820.370:91): avc: denied { sys_module } for pid=5932 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.103550][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.106057][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.113635][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.139634][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.160005][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.162746][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.184225][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.187573][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.218583][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.281594][ T5932] veth0_vlan: entered promiscuous mode [ 65.297520][ T5932] veth1_vlan: entered promiscuous mode [ 65.306522][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.334176][ T5932] veth0_macvtap: entered promiscuous mode [ 65.340216][ T5932] veth1_macvtap: entered promiscuous mode [ 65.357383][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.367902][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.378753][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.384357][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.393905][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.398382][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.404361][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.477413][ T5936] veth0_vlan: entered promiscuous mode [ 65.483059][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.506605][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.509189][ T5936] veth1_vlan: entered promiscuous mode [ 65.510252][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.526458][ T5937] veth0_vlan: entered promiscuous mode [ 65.560708][ T5946] veth0_vlan: entered promiscuous mode [ 65.564790][ T5937] veth1_vlan: entered promiscuous mode [ 65.566017][ T839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.573821][ T839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.581013][ T5946] veth1_vlan: entered promiscuous mode [ 65.587413][ T5936] veth0_macvtap: entered promiscuous mode [ 65.602198][ T5936] veth1_macvtap: entered promiscuous mode [ 65.616998][ T5937] veth0_macvtap: entered promiscuous mode [ 65.622649][ T5937] veth1_macvtap: entered promiscuous mode [ 65.633730][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.646768][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.650253][ T5946] veth0_macvtap: entered promiscuous mode [ 65.657972][ T5946] veth1_macvtap: entered promiscuous mode [ 65.664891][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.669847][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.680965][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.703026][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.706183][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.722997][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.727184][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.752084][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.755064][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.770981][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.789258][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.793170][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.809315][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.813361][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.817133][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.822089][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.825264][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.843978][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.847441][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.855972][ T6022] syzkaller0: entered promiscuous mode [ 65.857856][ T6022] syzkaller0: entered allmulticast mode [ 65.889370][ T839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.900584][ T839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.930195][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.934212][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.934945][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.937441][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.995725][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.996469][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.001076][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.010027][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.044880][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.256868][ T6035] ntfs3(sr0): Primary boot signature is not NTFS. [ 66.259411][ T6035] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 66.272104][ T6037] misc userio: No port type given on /dev/userio [ 66.598718][ T6057] binder: 6055:6057 ioctl 4018620d 0 returned -22 [ 66.644818][ T6060] Zero length message leads to an empty skb [ 66.752335][ T6074] team0: No ports can be present during mode change [ 66.990756][ T829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.031236][ T5940] Bluetooth: hci0: command tx timeout [ 67.031282][ T5945] Bluetooth: hci1: command tx timeout [ 67.035889][ T5292] Bluetooth: hci3: command tx timeout [ 67.086321][ T6081] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 67.113095][ T5292] Bluetooth: hci2: command tx timeout [ 67.140671][ T829] usb 7-1: Using ep0 maxpacket: 8 [ 67.144741][ T829] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 67.147723][ T829] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 67.151546][ T829] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 67.154808][ T829] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 67.158498][ T829] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 67.162763][ T829] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.167212][ T829] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.170797][ T829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.404763][ T6091] Bluetooth: MGMT ver 1.23 [ 67.413151][ T829] usb 7-1: usb_control_msg returned -32 [ 67.415643][ T829] usbtmc 7-1:16.0: can't read capabilities [ 67.514225][ T6093] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.25'. [ 67.517914][ T6093] netlink: Unknown conntrack attr (type=2304, max=9) [ 67.557652][ T6096] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.572054][ T6096] netlink: 68 bytes leftover after parsing attributes in process `syz.1.26'. [ 67.637119][ T6100] QAT: Invalid ioctl 1074813040 [ 67.693534][ T40] kauditd_printk_skb: 122 callbacks suppressed [ 67.693549][ T40] audit: type=1400 audit(1774458823.010:214): avc: denied { create } for pid=6102 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.707644][ T40] audit: type=1400 audit(1774458823.020:215): avc: denied { write } for pid=6102 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.737194][ T40] audit: type=1400 audit(1774458823.050:216): avc: denied { create } for pid=6107 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.782200][ T40] audit: type=1400 audit(1774458823.100:217): avc: denied { write } for pid=6071 comm="syz.2.18" name="usbtmc0" dev="devtmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.829059][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 67.838966][ T6113] vlan2: entered allmulticast mode [ 67.842140][ T6113] dummy0: entered allmulticast mode [ 67.901323][ T40] audit: type=1400 audit(1774458823.220:218): avc: denied { add_name } for pid=6114 comm="syz.0.33" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.908463][ T40] audit: type=1400 audit(1774458823.220:219): avc: denied { create } for pid=6114 comm="syz.0.33" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.916556][ T40] audit: type=1400 audit(1774458823.220:220): avc: denied { associate } for pid=6114 comm="syz.0.33" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.925923][ T40] audit: type=1400 audit(1774458823.220:221): avc: denied { read } for pid=6114 comm="syz.0.33" name="file0" dev="9p" ino=75760075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.936482][ T40] audit: type=1400 audit(1774458823.220:222): avc: denied { open } for pid=6114 comm="syz.0.33" path="/6/file0/file0" dev="9p" ino=75760075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.946838][ T40] audit: type=1400 audit(1774458823.230:223): avc: denied { watch } for pid=6114 comm="syz.0.33" path="/6/file0/file0" dev="9p" ino=75760075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.320769][ T6007] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.471517][ T6007] usb 8-1: Using ep0 maxpacket: 16 [ 68.475026][ T6007] usb 8-1: config 0 has no interfaces? [ 68.476907][ T6007] usb 8-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 68.480206][ T6007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.486882][ T6007] usb 8-1: config 0 descriptor?? [ 68.693077][ T6120] netlink: 14 bytes leftover after parsing attributes in process `syz.3.35'. [ 68.702040][ T6120] team0: Port device team_slave_0 removed [ 69.024696][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 69.104487][ T34] usb 8-1: USB disconnect, device number 2 [ 69.111379][ T5945] Bluetooth: hci3: command tx timeout [ 69.113144][ T5945] Bluetooth: hci1: command tx timeout [ 69.114934][ T5292] Bluetooth: hci0: command tx timeout [ 69.174758][ T6135] macvtap1: entered promiscuous mode [ 69.177141][ T6135] macsec0: entered promiscuous mode [ 69.181799][ T6135] team0: Device macvtap1 is up. Set it down before adding it as a team port [ 69.188114][ T6135] macsec0: left promiscuous mode [ 69.191052][ T5940] Bluetooth: hci2: command tx timeout [ 69.363596][ T6146] syzkaller0: entered promiscuous mode [ 69.365406][ T6146] syzkaller0: entered allmulticast mode [ 69.378679][ T6146] pim6reg99999999: entered allmulticast mode [ 69.384206][ T6146] 9p: Bad value for 'rfdno' [ 69.694757][ T6156] 9pnet_virtio: no channels available for device syz [ 69.928183][ T6166] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.934744][ T34] usb 7-1: USB disconnect, device number 2 [ 69.973446][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 70.219285][ T6183] input: syz1 as /devices/virtual/input/input5 [ 70.264095][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 70.268054][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 70.282018][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 70.411650][ T6200] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET) [ 70.426925][ T6200] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 70.621712][ T6214] netlink: 'syz.0.64': attribute type 7 has an invalid length. [ 70.844686][ T6235] 9pnet_virtio: no channels available for device ./file0 [ 70.906013][ T6242] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 70.999621][ T6252] macvtap1: entered promiscuous mode [ 71.002753][ T6252] macvtap1: entered allmulticast mode [ 71.005009][ T6252] veth1_vlan: entered allmulticast mode [ 71.038980][ T6254] capability: warning: `syz.1.77' uses deprecated v2 capabilities in a way that may be insecure [ 71.191051][ T5940] Bluetooth: hci0: command tx timeout [ 71.191119][ T5945] Bluetooth: hci3: command tx timeout [ 71.195991][ T5292] Bluetooth: hci1: command tx timeout [ 71.261438][ T6276] sg_write: data in/out 926365459/14 bytes for SCSI command 0x0-- guessing data in; [ 71.261438][ T6276] program syz.0.81 not setting count and/or reply_len properly [ 71.353496][ T6285] __nla_validate_parse: 3 callbacks suppressed [ 71.353514][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 71.371618][ T6285] xfrm1: entered promiscuous mode [ 71.373278][ T6285] xfrm1: entered allmulticast mode [ 71.377370][ T6285] warning: `syz.1.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.440160][ T6294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 71.445411][ T6294] netlink: 7 bytes leftover after parsing attributes in process `syz.1.88'. [ 71.540732][ T1028] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.670977][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.691869][ T6309] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 71.701657][ T1028] usb 8-1: Using ep0 maxpacket: 8 [ 71.707296][ T1028] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 71.712346][ T1028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.728857][ T1028] pvrusb2: Hardware description: Terratec Grabster AV400 [ 71.732191][ T1028] pvrusb2: ********** [ 71.734250][ T1028] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 71.738470][ T1028] pvrusb2: Important functionality might not be entirely working. [ 71.742914][ T1028] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 71.748053][ T1028] pvrusb2: ********** [ 71.774596][ T6315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.96'. [ 71.923551][ T2494] pvrusb2: Invalid write control endpoint [ 72.009823][ T2494] pvrusb2: Invalid write control endpoint [ 72.031169][ T2494] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 72.070055][ T2494] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 72.083457][ T2494] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 72.091976][ T2494] pvrusb2: Device being rendered inoperable [ 72.102129][ T2494] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 72.110997][ T2494] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 72.148153][ T2494] pvrusb2: Attached sub-driver cx25840 [ 72.160244][ T2494] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 72.163660][ T2494] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 72.170788][ T1028] usb 8-1: USB disconnect, device number 3 [ 72.304585][ T6338] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 72.339103][ T6340] netlink: 64 bytes leftover after parsing attributes in process `syz.0.100'. [ 72.518853][ T6345] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 72.527263][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.102'. [ 72.531295][ T6345] openvswitch: netlink: Flow key attr not present in new flow. [ 72.749190][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 72.749200][ T40] audit: type=1400 audit(1774458828.060:303): avc: denied { create } for pid=6355 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.758393][ T40] audit: type=1400 audit(1774458828.070:304): avc: denied { ioctl } for pid=6355 comm="syz.3.105" path="socket:[9870]" dev="sockfs" ino=9870 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.777779][ T40] audit: type=1400 audit(1774458828.090:305): avc: denied { setopt } for pid=6355 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.828413][ T6362] ip6t_rpfilter: unknown options [ 72.840165][ T40] audit: type=1400 audit(1774458828.150:306): avc: denied { setopt } for pid=6363 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.843717][ T6362] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 72.847393][ T40] audit: type=1400 audit(1774458828.160:307): avc: denied { append } for pid=6361 comm="syz.1.107" name="dvr0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.850594][ T6362] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 72.858679][ T6347] /dev/sr0: Can't open blockdev [ 72.863513][ T6362] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 72.865146][ T40] audit: type=1400 audit(1774458828.160:308): avc: denied { mounton } for pid=6361 comm="syz.1.107" path="/25/file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.872370][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 72.874457][ T40] audit: type=1400 audit(1774458828.160:309): avc: denied { setcheckreqprot } for pid=6363 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.877170][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 72.877201][ T6364] netlink: 'syz.3.108': attribute type 7 has an invalid length. [ 72.877228][ T6364] netlink: 'syz.3.108': attribute type 13 has an invalid length. [ 73.032390][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.112'. [ 73.035988][ T40] audit: type=1400 audit(1774458828.350:310): avc: denied { mount } for pid=6380 comm="syz.1.114" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 73.120677][ T40] audit: type=1400 audit(1774458828.430:311): avc: denied { listen } for pid=6385 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.126946][ T40] audit: type=1400 audit(1774458828.440:312): avc: denied { accept } for pid=6385 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.181189][ T6384] random: crng reseeded on system resumption [ 73.189481][ T6384] IPVS: length: 18 != 8 [ 73.637603][ T6392] tun0: tun_chr_ioctl cmd 1074025675 [ 73.640581][ T6392] tun0: persist enabled [ 73.764168][ T6403] netlink: 148 bytes leftover after parsing attributes in process `syz.2.121'. [ 73.797667][ T6406] vxcan1: entered allmulticast mode [ 73.822569][ T6408] x_tables: ip_tables: osf match: only valid for protocol 6 [ 74.205725][ T6440] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 74.218418][ T6440] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 74.225025][ T6440] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 74.229558][ T6440] ======================================================= [ 74.229558][ T6440] WARNING: The mand mount option has been deprecated and [ 74.229558][ T6440] and is ignored by this kernel. Remove the mand [ 74.229558][ T6440] option from the mount to silence this warning. [ 74.229558][ T6440] ======================================================= [ 74.251316][ T6440] bridge: RTM_NEWNEIGH with invalid ether address [ 74.254741][ T6440] bridge: RTM_NEWNEIGH with invalid ether address [ 75.096776][ T6479] process 'syz.1.145' launched './file0' with NULL argv: empty string added [ 75.102992][ T6479] Invalid argument reading file caps for ./file0 [ 75.249871][ T6483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.400585][ T1460] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 75.466304][ T6499] comedi comedi3: dac02: I/O port conflict (0x7,8) [ 75.474741][ T6499] PM: Enabling pm_trace changes system date and time during resume. [ 75.474741][ T6499] PM: Correct system time has to be restored manually after resume. [ 75.552827][ T1460] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.557512][ T1460] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.561528][ T1460] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.566501][ T1460] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.570881][ T1460] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.577585][ T1460] usb 8-1: config 0 descriptor?? [ 75.736538][ T5975] libceph: connect (1)[b::]:6789 error -101 [ 75.739664][ T5975] libceph: mon0 (1)[b::]:6789 connect error [ 75.799236][ T1460] usbhid 8-1:0.0: can't add hid device: -71 [ 75.801958][ T1460] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 75.807419][ T1460] usb 8-1: USB disconnect, device number 4 [ 76.004549][ T5975] libceph: connect (1)[b::]:6789 error -101 [ 76.008237][ T5975] libceph: mon0 (1)[b::]:6789 connect error [ 76.322943][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.326501][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.481112][ T6544] __nla_validate_parse: 10 callbacks suppressed [ 76.481130][ T6544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.164'. [ 76.521484][ T5975] libceph: connect (1)[b::]:6789 error -101 [ 76.523777][ T5975] libceph: mon0 (1)[b::]:6789 connect error [ 76.540716][ T6546] afs: Bad value for 'flock' [ 76.548678][ T6505] ceph: No mds server is up or the cluster is laggy [ 76.895888][ T6559] 9pnet_virtio: no channels available for device syz [ 77.414798][ T6584] syzkaller0: entered promiscuous mode [ 77.417067][ T6584] syzkaller0: entered allmulticast mode [ 77.503475][ T6592] netlink: 'syz.1.182': attribute type 29 has an invalid length. [ 77.508217][ T6592] netlink: 'syz.1.182': attribute type 29 has an invalid length. [ 77.518424][ T6592] netlink: 500 bytes leftover after parsing attributes in process `syz.1.182'. [ 77.553268][ T6596] ucma_write: process 156 (syz.1.184) changed security contexts after opening file descriptor, this is not allowed. [ 77.579296][ T6600] netlink: 56 bytes leftover after parsing attributes in process `syz.0.185'. [ 77.655447][ T6597] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 77.658308][ T6597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.661500][ T6596] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 77.664239][ T6596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.668923][ T6596] vhci_hcd vhci_hcd.0: Device attached [ 77.668934][ T6597] vhci_hcd vhci_hcd.0: Device attached [ 77.732102][ T6613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 77.766715][ T6618] capability: warning: `syz.3.189' uses 32-bit capabilities (legacy support in use) [ 77.798073][ T40] kauditd_printk_skb: 8146 callbacks suppressed [ 77.798091][ T40] audit: type=1400 audit(1774458833.110:8459): avc: denied { ioctl } for pid=6610 comm="syz.0.188" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 77.803857][ T6606] vhci_hcd: connection closed [ 77.810341][ T6605] vhci_hcd: connection closed [ 77.813035][ T40] audit: type=1400 audit(1774458833.120:8460): avc: denied { prog_load } for pid=6616 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.823796][ T839] vhci_hcd vhci_hcd.1: stop threads [ 77.824055][ T839] vhci_hcd vhci_hcd.1: release socket [ 77.824187][ T839] vhci_hcd vhci_hcd.1: disconnect device [ 77.825345][ T839] vhci_hcd vhci_hcd.1: stop threads [ 77.832325][ T839] vhci_hcd vhci_hcd.1: release socket [ 77.834521][ T839] vhci_hcd vhci_hcd.1: disconnect device [ 77.839978][ T40] audit: type=1400 audit(1774458833.130:8461): avc: denied { prog_run } for pid=6616 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.860943][ T5975] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 77.871202][ T40] audit: type=1326 audit(1774458833.190:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6619 comm="syz.2.190" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7b5f9c799 code=0x0 [ 77.874565][ T6627] 9pnet_virtio: no channels available for device syz [ 77.890973][ T40] audit: type=1400 audit(1774458833.210:8463): avc: denied { watch } for pid=6626 comm="syz.3.191" path="/46/file0/file0" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.898454][ T6629] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 77.900101][ T40] audit: type=1400 audit(1774458833.210:8464): avc: denied { watch_sb watch_reads } for pid=6626 comm="syz.3.191" path="/46/file0/file0" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.913395][ T40] audit: type=1400 audit(1774458833.210:8465): avc: denied { map_read map_write } for pid=6628 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.920197][ T40] audit: type=1326 audit(1774458833.210:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.3.191" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cd519c799 code=0x0 [ 77.929141][ T6629] bond1: entered promiscuous mode [ 77.932763][ T6629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.955046][ T6629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.957644][ T6629] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 77.961189][ T6629] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 77.966556][ T6629] bond1: (slave vxcan3): making interface the new active one [ 77.968982][ T6629] vxcan3: entered promiscuous mode [ 77.972527][ T6629] vxcan3: left promiscuous mode [ 78.010308][ T6632] FAULT_INJECTION: forcing a failure. [ 78.010308][ T6632] name failslab, interval 1, probability 0, space 0, times 1 [ 78.015202][ T6632] CPU: 3 UID: 0 PID: 6632 Comm: syz.3.191 Not tainted syzkaller #0 PREEMPT(full) [ 78.015237][ T6632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.015248][ T6632] Call Trace: [ 78.015259][ T6632] [ 78.015269][ T6632] dump_stack_lvl+0x100/0x190 [ 78.015325][ T6632] should_fail_ex.cold+0x5/0xa [ 78.015348][ T6632] should_failslab+0xc2/0x120 [ 78.015367][ T6632] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 78.015393][ T6632] ? do_getname+0x35/0x390 [ 78.015416][ T6632] ? find_held_lock+0x2b/0x80 [ 78.015444][ T6632] do_getname+0x35/0x390 [ 78.015467][ T6632] do_sys_openat2+0xc5/0x1e0 [ 78.015490][ T6632] ? __pfx_do_sys_openat2+0x10/0x10 [ 78.015507][ T6632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.015547][ T6632] ? __fget_files+0x21f/0x3d0 [ 78.015572][ T6632] __x64_sys_openat+0x12d/0x210 [ 78.015595][ T6632] ? __pfx___x64_sys_openat+0x10/0x10 [ 78.015614][ T6632] ? ksys_write+0x1ac/0x250 [ 78.015636][ T6632] do_syscall_64+0x106/0xf80 [ 78.015661][ T6632] ? clear_bhb_loop+0x40/0x90 [ 78.015681][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.015699][ T6632] RIP: 0033:0x7f6cd519c799 [ 78.015716][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.015732][ T6632] RSP: 002b:00007f6cd609e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.015749][ T6632] RAX: ffffffffffffffda RBX: 00007f6cd5416090 RCX: 00007f6cd519c799 [ 78.015759][ T6632] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 78.015769][ T6632] RBP: 00007f6cd609e090 R08: 0000000000000000 R09: 0000000000000000 [ 78.015780][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.015789][ T6632] R13: 00007f6cd5416128 R14: 00007f6cd5416090 R15: 00007ffee214ae28 [ 78.015809][ T6632] [ 78.205511][ T6634] 9pnet_virtio: no channels available for device syz [ 78.211828][ T40] audit: type=1326 audit(1774458833.530:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6633 comm="syz.0.193" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea9c19c799 code=0x0 [ 78.435652][ T6637] mkiss: ax0: crc mode is auto. [ 78.453679][ T40] audit: type=1400 audit(1774458833.770:8468): avc: denied { search } for pid=5644 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.848799][ T6667] netlink: 2 bytes leftover after parsing attributes in process `syz.3.202'. [ 78.856179][ T6668] netlink: 2 bytes leftover after parsing attributes in process `syz.3.202'. [ 78.864457][ T6670] tipc: Started in network mode [ 78.866110][ T6670] tipc: Node identity 4, cluster identity 4711 [ 78.868666][ T6670] tipc: Node number set to 4 [ 78.931571][ T6678] netlink: 6 bytes leftover after parsing attributes in process `syz.2.205'. [ 78.938430][ T6680] netlink: 596 bytes leftover after parsing attributes in process `syz.3.206'. [ 78.980319][ T6687] 9pnet_virtio: no channels available for device syz [ 78.984899][ T6688] 9pnet_virtio: no channels available for device syz [ 79.113392][ T6696] FAULT_INJECTION: forcing a failure. [ 79.113392][ T6696] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.119682][ T6696] CPU: 0 UID: 0 PID: 6696 Comm: syz.3.208 Not tainted syzkaller #0 PREEMPT(full) [ 79.119705][ T6696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.119715][ T6696] Call Trace: [ 79.119724][ T6696] [ 79.119731][ T6696] dump_stack_lvl+0x100/0x190 [ 79.119764][ T6696] should_fail_ex.cold+0x5/0xa [ 79.119789][ T6696] strncpy_from_user+0x3b/0x2d0 [ 79.119829][ T6696] do_getname+0x78/0x390 [ 79.119855][ T6696] do_sys_openat2+0xc5/0x1e0 [ 79.119878][ T6696] ? __pfx_do_sys_openat2+0x10/0x10 [ 79.119897][ T6696] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.119927][ T6696] ? __fget_files+0x21f/0x3d0 [ 79.119950][ T6696] __x64_sys_openat+0x12d/0x210 [ 79.119973][ T6696] ? __pfx___x64_sys_openat+0x10/0x10 [ 79.119994][ T6696] ? ksys_write+0x1ac/0x250 [ 79.120018][ T6696] do_syscall_64+0x106/0xf80 [ 79.120041][ T6696] ? clear_bhb_loop+0x40/0x90 [ 79.120063][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.120086][ T6696] RIP: 0033:0x7f6cd519c799 [ 79.120101][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.120117][ T6696] RSP: 002b:00007f6cd609e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.120133][ T6696] RAX: ffffffffffffffda RBX: 00007f6cd5416090 RCX: 00007f6cd519c799 [ 79.120144][ T6696] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 79.120154][ T6696] RBP: 00007f6cd609e090 R08: 0000000000000000 R09: 0000000000000000 [ 79.120164][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.120173][ T6696] R13: 00007f6cd5416128 R14: 00007f6cd5416090 R15: 00007ffee214ae28 [ 79.120196][ T6696] [ 79.190063][ T6700] tipc: Started in network mode [ 79.191868][ T6700] tipc: Node identity ac14140f, cluster identity 4711 [ 79.194834][ T6700] tipc: Enabled bearer , priority 10 [ 79.197104][ T6705] tipc: Enabling of bearer rejected, already enabled [ 79.316337][ T6713] ip6tnl1: entered promiscuous mode [ 79.346040][ T6715] bpf: Bad value for 'uid' [ 79.348139][ T6716] bpf: Bad value for 'uid' [ 79.351021][ T6715] SELinux: Context system_u:object_r:ipmi_device_t:s0 is not valid (left unmapped). [ 79.525578][ T6730] netlink: 'syz.0.218': attribute type 4 has an invalid length. [ 79.904372][ T6742] 9pnet_virtio: no channels available for device syz [ 80.150694][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.191880][ T29] tipc: Node number set to 2886997007 [ 81.015982][ T6766] geneve2: entered promiscuous mode [ 81.017755][ T6766] geneve2: entered allmulticast mode [ 81.235727][ T6770] netlink: 'syz.3.231': attribute type 30 has an invalid length. [ 81.254017][ T6770] bond1: option arp_missed_max: invalid value (0) [ 81.256747][ T6770] bond1: option arp_missed_max: allowed values 1 - 255 [ 81.263142][ T6770] bond1 (unregistering): Released all slaves [ 82.466324][ T6725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.559342][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 82.576393][ T6788] random: crng reseeded on system resumption [ 82.623094][ T6793] 9pnet_virtio: no channels available for device syz [ 82.647160][ T6795] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 82.693645][ T6798] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 82.716090][ T6798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.723199][ T6798] bond2: entered allmulticast mode [ 82.732895][ T6800] FAULT_INJECTION: forcing a failure. [ 82.732895][ T6800] name failslab, interval 1, probability 0, space 0, times 0 [ 82.736211][ T6798] bond2: (slave ip6gretap1): making interface the new active one [ 82.738209][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.2.238 Not tainted syzkaller #0 PREEMPT(full) [ 82.738224][ T6800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.738230][ T6800] Call Trace: [ 82.738234][ T6800] [ 82.738238][ T6800] dump_stack_lvl+0x100/0x190 [ 82.738272][ T6800] should_fail_ex.cold+0x5/0xa [ 82.738287][ T6800] should_failslab+0xc2/0x120 [ 82.738299][ T6800] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 82.738315][ T6800] ? security_file_alloc+0x34/0x2c0 [ 82.738340][ T6800] ? trace_kmem_cache_alloc+0xf3/0x120 [ 82.738353][ T6800] security_file_alloc+0x34/0x2c0 [ 82.738370][ T6800] init_file+0x95/0x480 [ 82.738384][ T6800] alloc_empty_file+0x73/0x1c0 [ 82.738399][ T6800] path_openat+0xe8/0x31a0 [ 82.738410][ T6800] ? kasan_save_stack+0x3f/0x50 [ 82.738426][ T6800] ? kasan_save_stack+0x30/0x50 [ 82.738441][ T6800] ? kasan_save_track+0x14/0x30 [ 82.738457][ T6800] ? __kasan_slab_alloc+0x89/0x90 [ 82.738466][ T6800] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 82.738481][ T6800] ? do_getname+0x35/0x390 [ 82.738494][ T6800] ? do_sys_openat2+0xc5/0x1e0 [ 82.738508][ T6800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.738521][ T6800] ? __pfx_path_openat+0x10/0x10 [ 82.738538][ T6800] do_file_open+0x20e/0x430 [ 82.738584][ T6800] ? __pfx_do_file_open+0x10/0x10 [ 82.738610][ T6800] ? alloc_fd+0x476/0x790 [ 82.738624][ T6800] ? do_getname+0x191/0x390 [ 82.738639][ T6800] do_sys_openat2+0x10d/0x1e0 [ 82.738653][ T6800] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.738666][ T6800] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.738690][ T6800] ? __fget_files+0x21f/0x3d0 [ 82.738704][ T6800] __x64_sys_openat+0x12d/0x210 [ 82.738718][ T6800] ? __pfx___x64_sys_openat+0x10/0x10 [ 82.738732][ T6800] ? ksys_write+0x1ac/0x250 [ 82.738748][ T6800] do_syscall_64+0x106/0xf80 [ 82.738763][ T6800] ? clear_bhb_loop+0x40/0x90 [ 82.738776][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.738787][ T6800] RIP: 0033:0x7fb7b5f9c799 [ 82.738797][ T6800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.738807][ T6800] RSP: 002b:00007fb7b6d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.738817][ T6800] RAX: ffffffffffffffda RBX: 00007fb7b6216090 RCX: 00007fb7b5f9c799 [ 82.738824][ T6800] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 82.738831][ T6800] RBP: 00007fb7b6d84090 R08: 0000000000000000 R09: 0000000000000000 [ 82.738841][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.738847][ T6800] R13: 00007fb7b6216128 R14: 00007fb7b6216090 R15: 00007ffef30c3408 [ 82.738860][ T6800] [ 82.848343][ T6798] ip6gretap1: entered allmulticast mode [ 82.850833][ T6798] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 82.873348][ T40] kauditd_printk_skb: 178 callbacks suppressed [ 82.873359][ T40] audit: type=1400 audit(1774458838.190:8647): avc: denied { ioctl } for pid=6794 comm="syz.1.239" path="socket:[15504]" dev="sockfs" ino=15504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.883482][ T40] audit: type=1400 audit(1774458838.200:8648): avc: denied { create } for pid=6794 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.889867][ T40] audit: type=1400 audit(1774458838.200:8649): avc: denied { write } for pid=6794 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.896768][ T40] audit: type=1400 audit(1774458838.200:8650): avc: denied { nlmsg_write } for pid=6794 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.942454][ T40] audit: type=1400 audit(1774458838.260:8651): avc: denied { ioctl } for pid=6802 comm="syz.0.240" path="socket:[14542]" dev="sockfs" ino=14542 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.953766][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 83.075125][ T40] audit: type=1400 audit(1774458838.390:8652): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.260638][ T40] audit: type=1400 audit(1774458838.570:8653): avc: denied { create } for pid=6805 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.260831][ T12] bond0: (slave bond_slave_0): interface is now down [ 83.269949][ T12] bond0: (slave bond_slave_1): interface is now down [ 83.274585][ T12] bond0: now running without any active interface! [ 83.501435][ T40] audit: type=1400 audit(1774458838.820:8654): avc: denied { execute } for pid=6814 comm="syz.3.244" name="file0" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.508855][ T40] audit: type=1400 audit(1774458838.820:8655): avc: denied { execute_no_trans } for pid=6814 comm="syz.3.244" path="/61/file0" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.535458][ T40] audit: type=1400 audit(1774458838.850:8656): avc: denied { create } for pid=6816 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.548060][ T6819] veth0_to_bond: entered allmulticast mode [ 83.552338][ T6817] netlink: 'syz.2.245': attribute type 21 has an invalid length. [ 83.555270][ T6817] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.563637][ T6817] netlink: 220 bytes leftover after parsing attributes in process `syz.2.245'. [ 83.735451][ T6833] 9pnet_virtio: no channels available for device syz [ 83.844883][ T6835] FAULT_INJECTION: forcing a failure. [ 83.844883][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 83.850978][ T6835] CPU: 3 UID: 0 PID: 6835 Comm: syz.2.252 Not tainted syzkaller #0 PREEMPT(full) [ 83.851001][ T6835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.851010][ T6835] Call Trace: [ 83.851022][ T6835] [ 83.851029][ T6835] dump_stack_lvl+0x100/0x190 [ 83.851072][ T6835] should_fail_ex.cold+0x5/0xa [ 83.851094][ T6835] should_failslab+0xc2/0x120 [ 83.851110][ T6835] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 83.851132][ T6835] ? __d_alloc+0x34/0xa80 [ 83.851155][ T6835] __d_alloc+0x34/0xa80 [ 83.851176][ T6835] d_alloc_parallel+0x111/0x14e0 [ 83.851205][ T6835] ? find_held_lock+0x2b/0x80 [ 83.851225][ T6835] ? __d_lookup+0x25c/0x4a0 [ 83.851247][ T6835] ? __pfx_d_alloc_parallel+0x10/0x10 [ 83.851275][ T6835] ? __d_lookup+0x266/0x4a0 [ 83.851304][ T6835] lookup_open.isra.0+0x57c/0x11b0 [ 83.851333][ T6835] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 83.851361][ T6835] ? __pfx___might_resched+0x10/0x10 [ 83.851379][ T6835] ? mnt_get_write_access+0x52/0x2f0 [ 83.851405][ T6835] ? __pfx_down_write+0x10/0x10 [ 83.851432][ T6835] ? mnt_get_write_access+0x1e9/0x2f0 [ 83.851458][ T6835] path_openat+0x2291/0x31a0 [ 83.851484][ T6835] ? __pfx_path_openat+0x10/0x10 [ 83.851509][ T6835] do_file_open+0x20e/0x430 [ 83.851541][ T6835] ? __pfx_do_file_open+0x10/0x10 [ 83.851578][ T6835] ? alloc_fd+0x476/0x790 [ 83.851598][ T6835] ? do_getname+0x191/0x390 [ 83.851620][ T6835] do_sys_openat2+0x10d/0x1e0 [ 83.851640][ T6835] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.851658][ T6835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.851684][ T6835] ? __fget_files+0x21f/0x3d0 [ 83.851705][ T6835] __x64_sys_openat+0x12d/0x210 [ 83.851727][ T6835] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.851747][ T6835] ? ksys_write+0x1ac/0x250 [ 83.851769][ T6835] do_syscall_64+0x106/0xf80 [ 83.851791][ T6835] ? clear_bhb_loop+0x40/0x90 [ 83.851811][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.851827][ T6835] RIP: 0033:0x7fb7b5f9c799 [ 83.851841][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.851855][ T6835] RSP: 002b:00007fb7b6d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.851872][ T6835] RAX: ffffffffffffffda RBX: 00007fb7b6216090 RCX: 00007fb7b5f9c799 [ 83.851881][ T6835] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 83.851890][ T6835] RBP: 00007fb7b6d84090 R08: 0000000000000000 R09: 0000000000000000 [ 83.851901][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.851912][ T6835] R13: 00007fb7b6216128 R14: 00007fb7b6216090 R15: 00007ffef30c3408 [ 83.851934][ T6835] [ 84.533903][ T6839] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 84.727691][ T6857] could not allocate digest TFM handle ./file0 [ 84.754645][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 84.828318][ T6875] 9pnet_virtio: no channels available for device syz [ 84.833925][ T6876] tmpfs: Unknown parameter 'quota' [ 84.943403][ T6878] FAULT_INJECTION: forcing a failure. [ 84.943403][ T6878] name failslab, interval 1, probability 0, space 0, times 0 [ 84.947672][ T6878] CPU: 2 UID: 0 PID: 6878 Comm: syz.3.265 Not tainted syzkaller #0 PREEMPT(full) [ 84.947688][ T6878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.947694][ T6878] Call Trace: [ 84.947698][ T6878] [ 84.947703][ T6878] dump_stack_lvl+0x100/0x190 [ 84.947724][ T6878] should_fail_ex.cold+0x5/0xa [ 84.947739][ T6878] ? tomoyo_realpath_from_path+0xb6/0x690 [ 84.947765][ T6878] should_failslab+0xc2/0x120 [ 84.947777][ T6878] __kmalloc_noprof+0xe0/0x850 [ 84.947796][ T6878] tomoyo_realpath_from_path+0xb6/0x690 [ 84.947816][ T6878] tomoyo_path_number_perm+0x23c/0x580 [ 84.947830][ T6878] ? tomoyo_path_number_perm+0x22e/0x580 [ 84.947845][ T6878] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 84.947873][ T6878] ? find_held_lock+0x2b/0x80 [ 84.947888][ T6878] ? current_check_access_path+0x281/0x460 [ 84.947902][ T6878] ? __pfx_current_check_access_path+0x10/0x10 [ 84.947916][ T6878] ? d_alloc_parallel+0x864/0x14e0 [ 84.947936][ T6878] tomoyo_path_mknod+0x164/0x190 [ 84.947947][ T6878] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 84.947957][ T6878] ? find_held_lock+0x2b/0x80 [ 84.947972][ T6878] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.947990][ T6878] security_path_mknod+0x161/0x300 [ 84.948003][ T6878] may_o_create+0x30/0x3a0 [ 84.948020][ T6878] lookup_open.isra.0+0xa0d/0x11b0 [ 84.948040][ T6878] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 84.948060][ T6878] ? __pfx___might_resched+0x10/0x10 [ 84.948078][ T6878] ? mnt_get_write_access+0x52/0x2f0 [ 84.948112][ T6878] ? __pfx_down_write+0x10/0x10 [ 84.948128][ T6878] ? mnt_get_write_access+0x1e9/0x2f0 [ 84.948147][ T6878] path_openat+0x2291/0x31a0 [ 84.948164][ T6878] ? __pfx_path_openat+0x10/0x10 [ 84.948182][ T6878] do_file_open+0x20e/0x430 [ 84.948195][ T6878] ? __pfx_do_file_open+0x10/0x10 [ 84.948218][ T6878] ? alloc_fd+0x476/0x790 [ 84.948232][ T6878] ? do_getname+0x191/0x390 [ 84.948248][ T6878] do_sys_openat2+0x10d/0x1e0 [ 84.948263][ T6878] ? __pfx_do_sys_openat2+0x10/0x10 [ 84.948276][ T6878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.948294][ T6878] ? __fget_files+0x21f/0x3d0 [ 84.948308][ T6878] __x64_sys_openat+0x12d/0x210 [ 84.948323][ T6878] ? __pfx___x64_sys_openat+0x10/0x10 [ 84.948336][ T6878] ? ksys_write+0x1ac/0x250 [ 84.948351][ T6878] do_syscall_64+0x106/0xf80 [ 84.948366][ T6878] ? clear_bhb_loop+0x40/0x90 [ 84.948379][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.948391][ T6878] RIP: 0033:0x7f6cd519c799 [ 84.948401][ T6878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.948411][ T6878] RSP: 002b:00007f6cd609e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.948422][ T6878] RAX: ffffffffffffffda RBX: 00007f6cd5416090 RCX: 00007f6cd519c799 [ 84.948429][ T6878] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 84.948435][ T6878] RBP: 00007f6cd609e090 R08: 0000000000000000 R09: 0000000000000000 [ 84.948441][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.948447][ T6878] R13: 00007f6cd5416128 R14: 00007f6cd5416090 R15: 00007ffee214ae28 [ 84.948461][ T6878] [ 84.948497][ T6878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.103511][ T6882] team0: Device vlan2 is already an upper device of the team interface [ 85.198112][ T6889] bond1: entered promiscuous mode [ 85.200170][ T6889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.215774][ T6889] bond2: entered promiscuous mode [ 85.217898][ T6889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.274653][ T6894] tipc: Started in network mode [ 85.276322][ T6894] tipc: Node identity f64eef549421, cluster identity 4711 [ 85.278827][ T6894] tipc: Enabled bearer , priority 0 [ 85.282188][ T6894] syzkaller0: entered promiscuous mode [ 85.284302][ T6894] syzkaller0: entered allmulticast mode [ 85.292502][ T6894] tipc: Resetting bearer [ 85.296385][ T6893] tipc: Resetting bearer [ 85.303322][ T6893] tipc: Disabling bearer [ 85.616204][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 85.689772][ T6905] xt_CT: No such helper "pptp" [ 85.786944][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 85.789977][ T6913] netlink: 'syz.1.274': attribute type 6 has an invalid length. [ 85.793477][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 85.804896][ T1157] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.804976][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 85.808309][ T1157] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.811452][ T6913] netlink: 'syz.1.274': attribute type 6 has an invalid length. [ 85.814680][ T1157] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.817438][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 85.829517][ T1157] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.152208][ T6948] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 86.180642][ T6003] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.351988][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 86.356218][ T6003] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 86.359738][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 86.364813][ T6003] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.370252][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.376263][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.381885][ T6003] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 86.385105][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 86.389884][ T6003] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.395643][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.400736][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.407946][ T6003] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 86.411787][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 86.417132][ T6003] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.422414][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.427124][ T6003] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.439410][ T6003] usb 5-1: string descriptor 0 read error: -22 [ 86.442755][ T6003] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 86.446518][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.457550][ T6003] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 86.537564][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=6955 comm=syz.2.288 [ 86.544732][ T6955] wg1: entered promiscuous mode [ 86.546921][ T6955] wg1: entered allmulticast mode [ 86.553146][ T1027] cfg80211: failed to load regulatory.db [ 86.596243][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 86.634748][ T6960] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 86.816208][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.820405][ T6969] bridge_slave_1: left allmulticast mode [ 86.824361][ T6969] bridge_slave_1: left promiscuous mode [ 86.826338][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.838316][ T6969] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 86.850295][ T6971] overlayfs: workdir and upperdir must reside under the same mount [ 87.086034][ T6987] input: syz0 as /devices/virtual/input/input8 [ 87.211413][ T6993] ufs: You didn't specify the type of your ufs filesystem [ 87.211413][ T6993] [ 87.211413][ T6993] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 87.211413][ T6993] [ 87.211413][ T6993] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 87.287756][ T7001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.480522][ T7002] 9pnet_virtio: no channels available for device syz [ 88.028719][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 88.028736][ T40] audit: type=1400 audit(1774458843.340:8809): avc: denied { create } for pid=7009 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.040650][ T7010] __nla_validate_parse: 2 callbacks suppressed [ 88.040664][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 88.046595][ T40] audit: type=1400 audit(1774458843.350:8810): avc: denied { write } for pid=7009 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.052200][ T7010] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 88.055831][ T40] audit: type=1400 audit(1774458843.350:8811): avc: denied { nlmsg_write } for pid=7009 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.065105][ T40] audit: type=1400 audit(1774458843.370:8812): avc: denied { bind } for pid=7009 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.073897][ T40] audit: type=1400 audit(1774458843.370:8813): avc: denied { write } for pid=7009 comm="syz.2.307" path="socket:[15941]" dev="sockfs" ino=15941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.087244][ T7012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.308'. [ 88.300726][ T6007] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 88.352197][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 88.356214][ T7019] Bluetooth: hci4: Frame reassembly failed (-84) [ 88.363980][ T7020] Bluetooth: hci4: Frame reassembly failed (-84) [ 88.440578][ T6007] usb 7-1: device descriptor read/64, error -71 [ 88.441693][ T40] audit: type=1326 audit(1774458843.760:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.3.312" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cd519c799 code=0x0 [ 88.680655][ T6007] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 88.810654][ T6007] usb 7-1: device descriptor read/64, error -71 [ 88.922467][ T6007] usb usb7-port1: attempt power cycle [ 88.943692][ T1027] usb 5-1: USB disconnect, device number 2 [ 89.260645][ T6007] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 89.281078][ T6007] usb 7-1: device descriptor read/8, error -71 [ 89.350790][ T1027] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.449874][ T40] audit: type=1400 audit(1774458844.760:8815): avc: denied { watch watch_reads } for pid=7034 comm="syz.3.317" path="/91" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.520678][ T1027] usb 5-1: Using ep0 maxpacket: 16 [ 89.523628][ T1027] usb 5-1: config 15 has an invalid interface number: 4 but max is 2 [ 89.526361][ T1027] usb 5-1: config 15 has an invalid interface number: 177 but max is 2 [ 89.529631][ T1027] usb 5-1: config 15 has an invalid interface number: 85 but max is 2 [ 89.530659][ T6007] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 89.532443][ T1027] usb 5-1: config 15 has no interface number 0 [ 89.537409][ T1027] usb 5-1: config 15 has no interface number 1 [ 89.539385][ T1027] usb 5-1: config 15 has no interface number 2 [ 89.541417][ T1027] usb 5-1: config 15 interface 4 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 89.544702][ T1027] usb 5-1: config 15 interface 4 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 89.548031][ T1027] usb 5-1: config 15 interface 4 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 89.551629][ T1027] usb 5-1: config 15 interface 177 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 89.551657][ T6007] usb 7-1: device descriptor read/8, error -71 [ 89.555066][ T1027] usb 5-1: config 15 interface 177 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 89.561637][ T1027] usb 5-1: config 15 interface 85 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 89.564968][ T1027] usb 5-1: config 15 interface 85 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 89.568275][ T1027] usb 5-1: config 15 interface 85 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 89.571747][ T1027] usb 5-1: config 15 interface 85 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 89.575325][ T1027] usb 5-1: config 15 interface 85 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 89.578704][ T1027] usb 5-1: config 15 interface 85 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 89.582585][ T1027] usb 5-1: config 15 interface 4 has no altsetting 0 [ 89.584700][ T1027] usb 5-1: config 15 interface 177 has no altsetting 0 [ 89.586841][ T1027] usb 5-1: config 15 interface 85 has no altsetting 0 [ 89.590629][ T1027] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a66, bcdDevice=86.ca [ 89.593762][ T1027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.596518][ T1027] usb 5-1: Product: ࠝ [ 89.597915][ T1027] usb 5-1: Manufacturer: 忪딒戊댦炕讇斘柟ꐌꝑ棆沷℘䄥窶闷ꪽ傿ᷨ䐦孻둷诊熊뛃ᦌ䧋薕流ꂴ唪詿煡斗崆Ꭱ驀냉ﳔᅿ쭽׽΄꽧Ż雃恫砰ꚥ㯌髐ꬿ輭ဥ㯘䭀㭊놹樳뫽뼷ꟳ譲怚ﱍኑ黓閴奄ঠ钿 [ 89.605774][ T1027] usb 5-1: SerialNumber: 뺢쏊制䕀聽ࠞﮌ弦ﮒ昋軓⚺팿겪공꣊邝㣛뷽꽙옣劺଩켺䒓꘬拁툉䦝ꞳᲩલᐅԓാﱘ箿禤თ婈᥯ྚ涶ẽ祓쵐ハ޿皝ᬢ츅᝚ꈍ윷蠾㑔⭤뷹Ὧｦ瑦볽蛜熢뮕೙糚鄙崘얫 [ 89.660915][ T6007] usb usb7-port1: unable to enumerate USB device [ 89.799457][ T40] audit: type=1400 audit(1774458845.110:8816): avc: denied { execmem } for pid=7041 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 89.801586][ T7042] netlink: 'syz.3.318': attribute type 16 has an invalid length. [ 89.809159][ T7042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.318'. [ 89.813083][ T7042] veth1_macvtap: entered allmulticast mode [ 89.821231][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 89.824794][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.828232][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.833456][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.838691][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.844353][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.847408][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.855350][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.858772][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.864576][ T40] audit: type=1400 audit(1774458845.180:8817): avc: denied { create } for pid=7041 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.873969][ T40] audit: type=1400 audit(1774458845.180:8818): avc: denied { write } for pid=7041 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.891244][ T1027] usb 5-1: USB disconnect, device number 3 [ 90.120783][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 90.290640][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 90.294221][ T29] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 90.296932][ T29] usb 8-1: config 0 has no interface number 0 [ 90.299087][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 90.303189][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 90.307086][ T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.311042][ T29] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.315404][ T29] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 90.318460][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.323548][ T29] usb 8-1: config 0 descriptor?? [ 90.330143][ T29] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 90.390792][ T5292] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 90.391004][ T5945] Bluetooth: hci4: command 0x1003 tx timeout [ 90.459266][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 90.700670][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 90.850609][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 90.854456][ T53] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.858036][ T53] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.861782][ T53] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 90.865562][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.869644][ T53] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.873855][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.879312][ T53] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 90.884685][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.890300][ T53] usb 6-1: config 0 descriptor?? [ 91.107881][ T7061] tipc: Started in network mode [ 91.108232][ T53] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 91.109639][ T7061] tipc: Node identity ac14140f, cluster identity 4711 [ 91.115703][ T53] usb 6-1: USB disconnect, device number 2 [ 91.116639][ T7061] tipc: Enabled bearer , priority 10 [ 91.120385][ T53] usblp1: removed [ 91.158341][ T7063] Cannot find set identified by id 0 to match [ 91.168568][ T7063] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 91.359263][ T92] bond0: (slave bond_slave_0): interface is now down [ 91.362991][ T92] bond0: (slave bond_slave_1): interface is now down [ 91.365740][ T92] bond0: (slave bridge_slave_1): interface is now down [ 91.374752][ T92] bond0: now running without any active interface! [ 91.550707][ T1027] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 91.720878][ T1027] usb 6-1: Using ep0 maxpacket: 32 [ 91.724194][ T1027] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 91.727222][ T1027] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 91.727238][ T1027] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 91.727265][ T1027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.727276][ T1027] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.740109][ T1027] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 91.744717][ T1027] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 91.748133][ T1027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.753541][ T1027] usb 6-1: config 0 descriptor?? [ 91.961360][ T1027] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 92.036545][ T7083] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 92.111054][ T24] tipc: Node number set to 2886997007 [ 92.743561][ T7101] ALSA: seq fatal error: cannot create timer (-19) [ 92.749777][ T7101] netlink: 'syz.2.336': attribute type 6 has an invalid length. [ 92.814930][ T6007] usb 8-1: USB disconnect, device number 5 [ 92.819353][ T6007] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 92.969511][ T7115] tmpfs: Unknown parameter 'usrquotauencer' [ 92.972871][ T7115] cgroup: none used incorrectly [ 93.076548][ T7121] trusted_key: encrypted_key: keylen parameter is missing [ 93.177929][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 93.177943][ T40] audit: type=1400 audit(1774458848.490:8856): avc: denied { create } for pid=7127 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.188163][ T40] audit: type=1400 audit(1774458848.490:8857): avc: denied { setopt } for pid=7127 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 93.219792][ T40] audit: type=1326 audit(1774458848.530:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7132 comm="syz.0.345" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea9c19c799 code=0x0 [ 93.383102][ T40] audit: type=1400 audit(1774458848.700:8859): avc: denied { ioctl } for pid=7143 comm="syz.0.348" path="socket:[16478]" dev="sockfs" ino=16478 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.387374][ T7144] vcan0: tx address claim with dest, not broadcast [ 93.395789][ T40] audit: type=1400 audit(1774458848.700:8860): avc: denied { bind } for pid=7143 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.402412][ T40] audit: type=1400 audit(1774458848.700:8861): avc: denied { write } for pid=7143 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.714119][ T7149] IPVS: length: 132 != 8 [ 93.737527][ T40] audit: type=1400 audit(1774458849.050:8862): avc: denied { read write } for pid=7150 comm="syz.2.351" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 93.747238][ T40] audit: type=1400 audit(1774458849.050:8863): avc: denied { open } for pid=7150 comm="syz.2.351" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 93.757068][ T40] audit: type=1400 audit(1774458849.060:8864): avc: denied { ioctl } for pid=7150 comm="syz.2.351" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 93.784811][ T40] audit: type=1400 audit(1774458849.100:8865): avc: denied { read write } for pid=7150 comm="syz.2.351" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.812340][ T6336] usb 6-1: USB disconnect, device number 3 [ 93.819111][ T6336] usblp1: removed [ 93.881062][ T7154] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.352'. [ 94.130731][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'. [ 94.181775][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 94.358025][ T7177] hpfs: hpfs_map_sector(): read error [ 94.364182][ T7176] hpfs: hpfs_map_sector(): read error [ 94.511528][ T7198] netlink: 80 bytes leftover after parsing attributes in process `syz.2.366'. [ 94.516176][ T7198] netlink: 14 bytes leftover after parsing attributes in process `syz.2.366'. [ 94.533701][ T7198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.539554][ T7198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.545613][ T7198] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 94.549514][ T7198] bond0 (unregistering): Released all slaves [ 94.604547][ T7202] nfs: Unknown parameter '{oac' [ 94.630991][ T7204] input: syz1 as /devices/virtual/input/input9 [ 94.902023][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 94.914680][ T7219] netlink: 64 bytes leftover after parsing attributes in process `syz.1.372'. [ 94.990685][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 95.151040][ T7223] netlink: 188 bytes leftover after parsing attributes in process `syz.1.373'. [ 95.170689][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 95.175252][ T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.179352][ T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.185148][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 95.188158][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 95.192502][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.200353][ T24] usb 7-1: config 0 descriptor?? [ 95.300596][ T7225] vlan2: entered promiscuous mode [ 95.303004][ T7225] bridge0: entered promiscuous mode [ 95.423389][ T7229] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 95.442630][ T7229] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 95.516335][ T7243] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.380'. [ 95.524711][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 95.564605][ T7248] bridge0: port 3(syz_tun) entered blocking state [ 95.567527][ T7248] bridge0: port 3(syz_tun) entered disabled state [ 95.571227][ T7248] syz_tun: entered allmulticast mode [ 95.574976][ T7248] syz_tun: entered promiscuous mode [ 95.577225][ T7248] bridge0: port 3(syz_tun) entered blocking state [ 95.580206][ T7248] bridge0: port 3(syz_tun) entered forwarding state [ 95.594096][ T7248] sctp: [Deprecated]: syz.1.382 (pid 7248) Use of int in maxseg socket option. [ 95.594096][ T7248] Use struct sctp_assoc_value instead [ 95.615439][ T24] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 95.617886][ T24] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 95.633476][ T24] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 95.635882][ T24] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 95.638213][ T24] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 95.643981][ T24] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 95.856617][ T6003] usb 7-1: USB disconnect, device number 7 [ 95.870602][ T6336] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 95.923634][ T7260] loop6: detected capacity change from 0 to 8 [ 96.052494][ T6336] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.060708][ T6336] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 96.065494][ T6336] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.069289][ T6336] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.074255][ T6336] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 96.078954][ T6336] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.085759][ T6336] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.090085][ T6336] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.094019][ T6336] usb 6-1: Product: syz [ 96.095707][ T5935] Dev loop6: unable to read RDB block 8 [ 96.095941][ T6336] usb 6-1: Manufacturer: syz [ 96.098406][ T5935] loop6: unable to read partition table [ 96.103312][ T5935] loop6: partition table beyond EOD, truncated [ 96.110812][ T7254] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.118317][ T6336] cdc_wdm 6-1:1.0: skipping garbage [ 96.121963][ T6336] cdc_wdm 6-1:1.0: skipping garbage [ 96.135550][ T6336] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 96.138376][ T6336] cdc_wdm 6-1:1.0: Unknown control protocol [ 96.252176][ T7260] Dev loop6: unable to read RDB block 8 [ 96.254306][ T7260] loop6: unable to read partition table [ 96.256548][ T7260] loop6: partition table beyond EOD, truncated [ 96.258981][ T7260] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 96.313483][ T7264] x_tables: duplicate underflow at hook 2 [ 96.317531][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.319919][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.322917][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.325380][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.327679][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.330366][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.333026][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.335482][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.337884][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.340104][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.342304][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.344476][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.346968][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.349881][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.352571][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.354966][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.357865][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.360739][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.363499][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 96.365611][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 96.389363][ T7267] netlink: 'syz.0.389': attribute type 1 has an invalid length. [ 96.418218][ T7267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.521384][ T7277] bond3: entered allmulticast mode [ 97.113895][ T7330] SELinux: unknown common r [ 97.116554][ T7330] SELinux: failed to load policy [ 97.441845][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.572074][ T6007] usb 6-1: USB disconnect, device number 4 [ 97.683356][ T7384] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 97.728031][ T7388] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.732597][ T7388] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 97.762993][ T7388] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 97.766502][ T7388] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 97.772885][ T7388] overlayfs: d_ino too big (108, ino=9223372036854776402, xinobits=3) [ 97.778351][ T7388] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 97.782059][ T7388] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 97.785968][ T7388] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 97.789666][ T7388] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 97.855287][ T7400] tipc: Failed to remove unknown binding: 66,0,0/0:2857633596/2857633598 [ 97.859224][ T7400] tipc: Failed to remove unknown binding: 66,0,0/0:2857633596/2857633597 [ 97.864214][ T7400] tipc: Failed to remove unknown binding: 66,0,0/0:2857633596/2857633598 [ 97.868241][ T7400] tipc: Failed to remove unknown binding: 66,0,0/0:2857633596/2857633597 [ 97.873039][ T7402] program syz.0.416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.144780][ T7410] vivid-002: disconnect [ 98.146978][ T7411] overlayfs: conflicting options: userxattr,redirect_dir=on [ 98.154139][ T7410] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 98.277572][ T7419] 0: renamed from hsr0 (while UP) [ 98.284324][ T7419] 0: entered allmulticast mode [ 98.286779][ T7419] hsr_slave_0: entered allmulticast mode [ 98.289167][ T7419] hsr_slave_1: entered allmulticast mode [ 98.292095][ T7419] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 98.298666][ T7420] 1: renamed from 70 (while UP) [ 98.304102][ T7420] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 98.307315][ T7409] vivid-002: reconnect [ 98.404118][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 98.404134][ T40] audit: type=1326 audit(1774458853.720:8930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7422 comm="syz.3.422" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cd519c799 code=0x0 [ 98.416300][ T7434] bond0: Error: Cannot enslave bond to itself. [ 98.416746][ T40] audit: type=1400 audit(1774458853.720:8931): avc: denied { write } for pid=7432 comm="syz.1.426" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.420417][ T7431] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 98.430100][ T40] audit: type=1400 audit(1774458853.720:8932): avc: denied { ioctl } for pid=7432 comm="syz.1.426" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.435782][ T7431] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 98.443495][ T40] audit: type=1400 audit(1774458853.720:8933): avc: denied { ioctl } for pid=7432 comm="syz.1.426" path="socket:[16941]" dev="sockfs" ino=16941 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.446200][ T7431] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 98.458182][ T40] audit: type=1400 audit(1774458853.780:8934): avc: denied { getopt } for pid=7430 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.466876][ T7431] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 98.473796][ T7431] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 98.478316][ T7431] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 98.483613][ T7431] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 98.541331][ T40] audit: type=1400 audit(1774458853.860:8935): avc: denied { write } for pid=7437 comm="syz.1.427" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.554556][ T40] audit: type=1400 audit(1774458853.860:8936): avc: denied { open } for pid=7437 comm="syz.1.427" path="/102/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.562407][ T40] audit: type=1400 audit(1774458853.860:8937): avc: denied { ioctl } for pid=7437 comm="syz.1.427" path="/102/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 98.618953][ T40] audit: type=1400 audit(1774458853.930:8938): avc: denied { mount } for pid=7444 comm="syz.1.430" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 98.620666][ T7447] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.628196][ T40] audit: type=1400 audit(1774458853.930:8939): avc: denied { mounton } for pid=7444 comm="syz.1.430" path="/103/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 98.655932][ T7447] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 98.659699][ T7447] overlayfs: failed to look up (tracing) for ino (-66) [ 98.850253][ T7458] bridge0: port 3(syz_tun) entered disabled state [ 98.854542][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.857183][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.922139][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.931786][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.985560][ T7458] xfrm1: left promiscuous mode [ 98.987245][ T7458] xfrm1: left allmulticast mode [ 99.018181][ T7460] bridge0: port 3(syz_tun) entered blocking state [ 99.020730][ T7460] bridge0: port 3(syz_tun) entered forwarding state [ 99.027373][ T7460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.031628][ T7460] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.038158][ T7460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.045345][ T1157] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.049083][ T1157] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.055022][ T1157] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.059935][ T1157] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.082792][ T1157] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.086310][ T1157] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.092250][ T1157] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.096166][ T1157] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.315230][ T7478] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 99.315258][ T7479] __nla_validate_parse: 9 callbacks suppressed [ 99.315273][ T7479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.437'. [ 99.616445][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 99.622964][ T7505] macvlan0: entered promiscuous mode [ 99.985464][ T7538] 9pnet_virtio: no channels available for device syz [ 100.100638][ T6003] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 100.206905][ T7544] binder: 7543:7544 ioctl c00c6211 0 returned -14 [ 100.252804][ T6003] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 100.256254][ T6003] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.261448][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.265820][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.270305][ T6003] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.276135][ T6003] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.279989][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.285363][ T6003] usb 6-1: config 0 descriptor?? [ 100.288129][ T7530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.473594][ T7559] 9pnet_virtio: no channels available for device syz [ 100.476852][ T7559] overlay: Unknown parameter 'dont_hash' [ 100.556644][ T7566] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 100.561140][ T7566] Error validating options; rc = [-22] [ 100.615972][ T7568] validate_nla: 60 callbacks suppressed [ 100.615984][ T7568] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 100.631933][ T7568] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.637304][ T7568] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 100.647425][ T7568] bond3: entered allmulticast mode [ 100.705779][ T6003] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 100.727769][ T6003] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.739649][ T7571] bridge_slave_0: left allmulticast mode [ 100.741878][ T7571] bridge_slave_0: left promiscuous mode [ 100.744370][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.755406][ T7571] team0: Port device team_slave_0 removed [ 100.763258][ T7571] team0: Port device team_slave_1 removed [ 100.765791][ T7571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.768362][ T7571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.780447][ T7571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.787465][ T7571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.791121][ T7573] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 100.796705][ T7571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.882917][ T5292] Bluetooth: hci3: command tx timeout [ 100.917159][ T7593] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 100.925744][ T7593] exFAT-fs (nullb0): invalid boot record signature [ 100.928435][ T7593] exFAT-fs (nullb0): failed to read boot sector [ 100.930577][ T7593] exFAT-fs (nullb0): failed to recognize exfat type [ 100.989760][ T53] usb 6-1: USB disconnect, device number 5 [ 101.026310][ T7602] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 101.402256][ T7619] : entered promiscuous mode [ 101.672349][ T7635] kernel read not supported for file /policy (pid: 7635 comm: syz.1.476) [ 101.678085][ T5292] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 101.729336][ T7640] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.478'. [ 101.769973][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 101.776735][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 101.812283][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.480'. [ 101.815505][ T7648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.480'. [ 101.883947][ T7655] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 101.986324][ T7663] xt_NFQUEUE: number of total queues is 0 [ 101.989428][ T7663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 102.115757][ T7668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.483'. [ 102.289566][ T7682] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 102.343395][ T7688] fuse: Bad value for 'user_id' [ 102.348651][ T7688] fuse: Bad value for 'user_id' [ 102.554122][ T7695] overlay: ./file0 is not a directory [ 102.580605][ T6003] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 102.730646][ T6003] usb 6-1: Using ep0 maxpacket: 8 [ 102.734900][ T6003] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 102.738287][ T6003] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.744072][ T6003] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.748515][ T6003] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.753551][ T6003] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.758809][ T6003] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.764575][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.913017][ T7716] netlink: 168 bytes leftover after parsing attributes in process `syz.2.501'. [ 102.921095][ T7716] binder: 7715:7716 unknown command 0 [ 102.923914][ T7716] binder: 7715:7716 ioctl c0306201 200000000080 returned -22 [ 102.932782][ T7716] fuse: Bad value for 'rootmode' [ 102.972787][ T6003] usb 6-1: GET_CAPABILITIES returned 0 [ 102.975280][ T6003] usbtmc 6-1:16.0: can't read capabilities [ 103.189464][ T6003] usb 6-1: USB disconnect, device number 6 [ 103.297254][ T7743] nbd: couldn't find device at index -2127233020 [ 103.302736][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 103.305931][ T7743] netlink: 'syz.0.510': attribute type 6 has an invalid length. [ 103.317591][ T1146] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.317721][ T7743] netlink: 'syz.0.510': attribute type 6 has an invalid length. [ 103.321413][ T1146] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.328726][ T1146] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.332837][ T1146] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.424374][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 103.424391][ T40] audit: type=1400 audit(1774458858.740:9000): avc: denied { name_connect } for pid=7746 comm="syz.3.509" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 103.600681][ T1460] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.685778][ T7763] ptrace attach of "/syz-executor exec"[5936] was attempted by "/syz-executor exec"[7763] [ 103.757145][ T40] audit: type=1400 audit(1774458859.070:9001): avc: denied { bind } for pid=7769 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.762243][ T1460] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 103.768319][ T1460] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 103.774747][ T40] audit: type=1326 audit(1774458859.090:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7769 comm="syz.1.518" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f644599c799 code=0x0 [ 103.784988][ T40] audit: type=1400 audit(1774458859.090:9003): avc: denied { getopt } for pid=7762 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.788947][ T1460] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.795651][ T40] audit: type=1400 audit(1774458859.090:9004): avc: denied { shutdown } for pid=7762 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.803631][ T1460] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.806569][ T1460] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 103.809090][ T1460] usb 5-1: Product: syz [ 103.810451][ T1460] usb 5-1: Manufacturer: syz [ 103.812189][ T1460] usb 5-1: SerialNumber: syz [ 103.815120][ T1460] usb 5-1: config 0 descriptor?? [ 103.818276][ T1460] hub 5-1:0.0: bad descriptor, ignoring hub [ 103.820309][ T1460] hub 5-1:0.0: probe with driver hub failed with error -5 [ 103.825203][ T1460] usb 5-1: selecting invalid altsetting 0 [ 103.828289][ T40] audit: type=1400 audit(1774458859.140:9005): avc: denied { map } for pid=7774 comm="syz.2.521" path="/dev/ubi_ctrl" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.862144][ T40] audit: type=1400 audit(1774458859.180:9006): avc: denied { create } for pid=7778 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.873999][ T40] audit: type=1400 audit(1774458859.180:9007): avc: denied { connect } for pid=7778 comm="syz.2.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.882882][ T40] audit: type=1400 audit(1774458859.180:9008): avc: denied { read } for pid=7778 comm="syz.2.523" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.895406][ T40] audit: type=1400 audit(1774458859.180:9009): avc: denied { open } for pid=7778 comm="syz.2.523" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 104.733157][ T7745] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 104.861698][ T7745] usb 5-1: device descriptor read/64, error -71 [ 104.959797][ T7812] netlink: 'syz.1.531': attribute type 41 has an invalid length. [ 105.100714][ T7745] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 105.220693][ T5975] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 105.230625][ T7745] usb 5-1: device descriptor read/64, error -71 [ 105.370600][ T5975] usb 8-1: Using ep0 maxpacket: 8 [ 105.374463][ T5975] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.379314][ T5975] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.383959][ T5975] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.388143][ T5975] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.393765][ T5975] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.397775][ T5975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.470650][ T7745] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 105.491283][ T7745] usb 5-1: device descriptor read/8, error -71 [ 105.607125][ T7814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.610725][ T7814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.622103][ T5975] usb 8-1: GET_CAPABILITIES returned 0 [ 105.623938][ T5975] usbtmc 8-1:16.0: can't read capabilities [ 105.730737][ T7745] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 105.751285][ T7745] usb 5-1: device descriptor read/8, error -71 [ 105.861912][ T6438] usb 5-1: USB disconnect, device number 4 [ 106.053168][ T6438] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.190740][ T6438] usb 5-1: device descriptor read/64, error -71 [ 106.430752][ T6438] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.577967][ T7833] __nla_validate_parse: 6 callbacks suppressed [ 106.577989][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 106.591328][ T7833] erspan1: entered promiscuous mode [ 106.977686][ T7787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.007287][ T6003] usb 8-1: USB disconnect, device number 6 [ 107.091600][ T7835] netlink: 56 bytes leftover after parsing attributes in process `syz.0.540'. [ 107.264913][ T7868] comedi comedi0: comedi_config --init_data is deprecated [ 107.266180][ T7869] tmpfs: Too few inodes for current use [ 107.301377][ T7875] bridge_slave_1: default FDB implementation only supports local addresses [ 107.700670][ T6007] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 107.860551][ T6007] usb 7-1: Using ep0 maxpacket: 8 [ 107.863451][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.867052][ T6007] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.869929][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.874359][ T6007] usb 7-1: config 0 descriptor?? [ 108.079600][ T6007] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 108.448473][ T7891] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 108.472559][ T7891] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 108.524304][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 108.524318][ T40] audit: type=1400 audit(1774458863.840:9028): avc: denied { setopt } for pid=7895 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 108.544281][ T6007] usb 7-1: USB disconnect, device number 8 [ 109.107863][ T40] audit: type=1400 audit(1774458864.420:9029): avc: denied { read } for pid=7907 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 109.131376][ T7914] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.142710][ T7914] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.165655][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 109.395267][ T7925] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 109.414627][ T7925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.421349][ T7925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7925 comm=syz.2.570 [ 109.426728][ T7925] bond0: option tlb_dynamic_lb: unable to set because the bond device is up [ 109.463739][ T40] audit: type=1400 audit(1774458864.780:9030): avc: denied { bind } for pid=7932 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.471289][ T40] audit: type=1400 audit(1774458864.780:9031): avc: denied { write } for pid=7932 comm="syz.2.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.479315][ T40] audit: type=1400 audit(1774458864.780:9032): avc: denied { shutdown } for pid=7933 comm="syz.1.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.599607][ T40] audit: type=1400 audit(1774458864.910:9033): avc: denied { write } for pid=7949 comm="syz.2.577" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.609583][ T40] audit: type=1400 audit(1774458864.920:9034): avc: denied { ioctl } for pid=7943 comm="syz.1.575" path="socket:[20107]" dev="sockfs" ino=20107 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.834413][ T40] audit: type=1326 audit(1774458865.150:9035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.583" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f644599c799 code=0x0 [ 109.885864][ T40] audit: type=1326 audit(1774458865.200:9036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.583" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f644599c799 code=0x0 [ 109.936581][ T40] audit: type=1326 audit(1774458865.250:9037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7969 comm="syz.1.583" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f644599c799 code=0x0 [ 110.591558][ T7994] tmpfs: Too few inodes for current use [ 110.893646][ T8004] serio: Serial port ptm0 [ 110.907920][ T8011] 9p: Bad value for 'wfdno' [ 111.011385][ T8022] dummy0: entered promiscuous mode [ 111.012406][ T8022] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 111.016828][ T8022] hsr1: entered allmulticast mode [ 111.016841][ T8022] dummy0: entered allmulticast mode [ 111.016852][ T8022] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 111.448621][ T8059] nfs4: Unknown parameter '00000000000000000003' [ 111.806125][ T8067] syzkaller0: entered promiscuous mode [ 111.808585][ T8067] syzkaller0: entered allmulticast mode [ 111.813597][ T8067] 0: reclassify loop, rule prio 0, protocol 800 [ 112.269457][ T8095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8095 comm=syz.0.623 [ 112.308697][ T8097] misc userio: No port type given on /dev/userio [ 112.427153][ T8106] kvm: MWAIT instruction emulated as NOP! [ 112.948407][ T8120] sp0: Synchronizing with TNC [ 113.035612][ T8120] [U] [ 113.108361][ T8125] netlink: 'syz.1.631': attribute type 21 has an invalid length. [ 113.111275][ T5292] Bluetooth: hci0: command tx timeout [ 113.116320][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 113.192694][ T8131] binder: 8130:8131 unknown command 0 [ 113.195146][ T8131] binder: 8130:8131 ioctl c0306201 200000000080 returned -22 [ 113.204362][ T8131] ceph: Path missing in source [ 113.276174][ T1157] Bluetooth: hci4: Frame reassembly failed (-84) [ 113.278079][ T8127] netlink: 64 bytes leftover after parsing attributes in process `syz.1.633'. [ 113.279273][ T1157] Bluetooth: hci4: Frame reassembly failed (-84) [ 113.497702][ T8161] binder: 8160:8161 ioctl c0306201 2000000004c0 returned -14 [ 113.704080][ T8171] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 113.800704][ T8175] binder: 8174:8175 unknown command 0 [ 113.802960][ T8175] binder: 8174:8175 ioctl c0306201 200000000080 returned -22 [ 113.811235][ T8175] ceph: Path missing in source [ 113.969338][ T8182] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.647'. [ 114.053303][ T8186] netlink: 'syz.0.649': attribute type 8 has an invalid length. [ 114.368828][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 114.368841][ T40] audit: type=1400 audit(1774458869.680:9067): avc: denied { shutdown } for pid=8200 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.379817][ T40] audit: type=1400 audit(1774458869.690:9068): avc: denied { create } for pid=8200 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.385933][ T40] audit: type=1400 audit(1774458869.690:9069): avc: denied { setopt } for pid=8200 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.516513][ T40] audit: type=1400 audit(1774458869.830:9070): avc: denied { setattr } for pid=8204 comm="syz.2.654" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 114.517680][ T8205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8205 comm=syz.2.654 [ 114.850618][ T6007] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 114.991293][ T6007] usb 7-1: device descriptor read/64, error -71 [ 115.230856][ T6007] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 115.361500][ T5292] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 115.361724][ T5945] Bluetooth: hci4: command 0x1003 tx timeout [ 115.364568][ T6007] usb 7-1: device descriptor read/64, error -71 [ 115.429328][ T8214] binder: 8211:8214 unknown command 0 [ 115.433687][ T8214] binder: 8211:8214 ioctl c0306201 200000000080 returned -22 [ 115.441771][ T8214] ceph: Path missing in source [ 115.481046][ T6007] usb usb7-port1: attempt power cycle [ 115.820618][ T6007] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 115.835804][ T40] audit: type=1800 audit(1774458871.150:9071): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.662" name="/newroot/166/file0" dev="tmpfs" ino=901 res=0 errno=0 [ 115.841140][ T6007] usb 7-1: device descriptor read/8, error -71 [ 115.850622][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.882169][ T8239] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 115.890456][ T40] audit: type=1326 audit(1774458871.200:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8238 comm="syz.1.663" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f644599c799 code=0x0 [ 116.000718][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 116.003932][ T24] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 116.006927][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 116.010913][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 116.014143][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 116.017662][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 116.021133][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.025196][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.028089][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.090690][ T6007] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 116.111482][ T6007] usb 7-1: device descriptor read/8, error -71 [ 116.194111][ T8242] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 116.197255][ T8242] netem: incorrect gi model size [ 116.199203][ T8242] netem: change failed [ 116.221009][ T6007] usb usb7-port1: unable to enumerate USB device [ 116.253261][ T40] audit: type=1400 audit(1774458871.570:9073): avc: denied { read } for pid=8229 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.259624][ T24] usb 5-1: usb_control_msg returned -32 [ 116.262804][ T24] usbtmc 5-1:16.0: can't read capabilities [ 116.319536][ T8244] kvm: pic: non byte write [ 116.661687][ T8258] SELinux: policydb magic number 0x985092dd does not match expected magic number 0xf97cff8c [ 116.665818][ T8258] SELinux: failed to load policy [ 116.827590][ T40] audit: type=1400 audit(1774458872.140:9074): avc: denied { write } for pid=8263 comm="syz.1.671" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 116.835986][ T40] audit: type=1400 audit(1774458872.140:9075): avc: denied { open } for pid=8263 comm="syz.1.671" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.003146][ T8271] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 117.040933][ T8274] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 117.439912][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 117.523169][ T8289] netlink: 64 bytes leftover after parsing attributes in process `syz.3.677'. [ 117.528638][ T8292] netlink: 64 bytes leftover after parsing attributes in process `syz.3.677'. [ 117.534617][ T40] audit: type=1326 audit(1774458872.850:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.678" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f644599c799 code=0x0 [ 117.625875][ T8299] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.892180][ T8321] program syz.3.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.951185][ T8322] netlink: 68 bytes leftover after parsing attributes in process `syz.3.688'. [ 117.961031][ T1116] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 117.964001][ T1116] ata1.00: irq_stat 0x40000000 [ 117.965842][ T1116] ata1.00: failed command: ZAC MANAGEMENT OUT [ 117.967939][ T1116] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 17 [ 117.967939][ T1116] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 117.973225][ T1116] ata1.00: status: { DRDY ERR } [ 117.974985][ T1116] ata1.00: error: { ABRT } [ 117.976479][ T1116] ata1.00: device reported invalid CHS sector 0 [ 118.017653][ C2] ata1: illegal qc_active transition (00000000->00000008) qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 118.265987][ T8335] netlink: 488 bytes leftover after parsing attributes in process `syz.3.692'. [ 118.270171][ T8335] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.692'. [ 118.356133][ T1116] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 118.363228][ T1116] ata1.00: configured for UDMA/100 [ 118.394879][ T8338] misc userio: Can't change port type on an already running userio instance [ 118.507037][ T53] libceph: connect (1)[c::]:6789 error -101 [ 118.509437][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 118.681786][ T5975] usb 5-1: USB disconnect, device number 7 [ 118.685571][ T8351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.696'. [ 118.703655][ T8351] vxcan3: entered allmulticast mode [ 118.709567][ T8351] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 118.770927][ T6438] libceph: connect (1)[c::]:6789 error -101 [ 118.773590][ T6438] libceph: mon0 (1)[c::]:6789 connect error [ 118.774762][ T8356] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 118.779437][ T8356] netlink: 192 bytes leftover after parsing attributes in process `syz.1.698'. [ 118.935559][ T8365] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 118.939344][ T8365] netlink: 164 bytes leftover after parsing attributes in process `syz.1.701'. [ 118.940153][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 118.942785][ T8364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.954215][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 118.961723][ T8370] ip6gretap0: entered promiscuous mode [ 118.964409][ T8370] macsec0: entered promiscuous mode [ 118.966184][ T8370] macsec0: entered allmulticast mode [ 118.968005][ T8370] ip6gretap0: entered allmulticast mode [ 118.973071][ T8370] ip6gretap0: left allmulticast mode [ 118.974915][ T8370] ip6gretap0: left promiscuous mode [ 119.244886][ T8380] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.281336][ T6438] libceph: connect (1)[c::]:6789 error -101 [ 119.284106][ T6438] libceph: mon0 (1)[c::]:6789 connect error [ 119.332085][ T8343] ceph: No mds server is up or the cluster is laggy [ 119.395611][ T8382] ------------[ cut here ]------------ [ 119.397843][ T8382] enable_ept && !allow_smaller_maxphyaddr [ 119.397853][ T8382] WARNING: arch/x86/kvm/vmx/vmx.c:5444 at handle_exception_nmi+0xa6e/0x1bb0, CPU#0: syz.3.706/8382 [ 119.403627][ T8382] Modules linked in: [ 119.405312][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: syz.3.706 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.409039][ T8382] Tainted: [L]=SOFTLOCKUP [ 119.410702][ T8382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.414311][ T8382] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 119.416530][ T8382] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 119.423307][ T8382] RSP: 0018:ffffc9000f1879d8 EFLAGS: 00010283 [ 119.425461][ T8382] RAX: 0000000000022368 RBX: ffff88805475a9c0 RCX: ffffc9000c402000 [ 119.428297][ T8382] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff888035a8a4c0 [ 119.431260][ T8382] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 119.434467][ T8382] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 119.437339][ T8382] R13: 0000000000000000 R14: ffff888056798000 R15: ffff88805475aa98 [ 119.440338][ T8382] FS: 00007f6cd60bf6c0(0000) GS:ffff8880d633f000(0000) knlGS:0000000000000000 [ 119.443665][ T8382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.446013][ T8382] CR2: 000000000f6632eb CR3: 000000003cbe5000 CR4: 0000000000352ef0 [ 119.448864][ T8382] Call Trace: [ 119.450189][ T8382] [ 119.451471][ T8382] ? __pfx_handle_exception_nmi+0x10/0x10 [ 119.453684][ T8382] vmx_handle_exit+0x84d/0x1f40 [ 119.455564][ T8382] vcpu_run+0x34cf/0x5ca0 [ 119.457117][ T8382] ? __pfx_vcpu_run+0x10/0x10 [ 119.458793][ T8382] ? rcu_is_watching+0x12/0xc0 [ 119.460565][ T8382] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 119.462766][ T8382] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 119.464739][ T8382] kvm_vcpu_ioctl+0x730/0x1730 [ 119.466477][ T8382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 119.468459][ T8382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.470911][ T8382] ? do_vfs_ioctl+0x226/0x13e0 [ 119.472579][ T8382] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.474454][ T8382] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 119.476984][ T8382] ? __fget_files+0x215/0x3d0 [ 119.478746][ T8382] ? hook_file_ioctl_common+0x146/0x410 [ 119.480870][ T8382] ? selinux_file_ioctl+0x139/0x290 [ 119.482771][ T8382] ? selinux_file_ioctl+0xb4/0x290 [ 119.484622][ T8382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 119.486638][ T8382] __x64_sys_ioctl+0x18e/0x210 [ 119.488491][ T8382] do_syscall_64+0x106/0xf80 [ 119.490441][ T8382] ? clear_bhb_loop+0x40/0x90 [ 119.492300][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.494422][ T8382] RIP: 0033:0x7f6cd519c799 [ 119.495952][ T8382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.502811][ T8382] RSP: 002b:00007f6cd60bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.506055][ T8382] RAX: ffffffffffffffda RBX: 00007f6cd5415fa0 RCX: 00007f6cd519c799 [ 119.508858][ T8382] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 119.511727][ T8382] RBP: 00007f6cd5232c99 R08: 0000000000000000 R09: 0000000000000000 [ 119.514457][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.517202][ T8382] R13: 00007f6cd5416038 R14: 00007f6cd5415fa0 R15: 00007ffee214ae28 [ 119.520128][ T8382] [ 119.521437][ T8382] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.524835][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: syz.3.706 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.529598][ T8382] Tainted: [L]=SOFTLOCKUP [ 119.531516][ T8382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.536125][ T8382] Call Trace: [ 119.537754][ T8382] [ 119.539137][ T8382] dump_stack_lvl+0x100/0x190 [ 119.541253][ T8382] vpanic+0x552/0x970 [ 119.543011][ T8382] ? __pfx_vpanic+0x10/0x10 [ 119.545091][ T8382] panic+0xd1/0xe0 [ 119.546750][ T8382] ? __pfx_panic+0x10/0x10 [ 119.548742][ T8382] check_panic_on_warn.cold+0x19/0x34 [ 119.551071][ T8382] ? handle_exception_nmi+0xa6e/0x1bb0 [ 119.553440][ T8382] __warn.cold+0x191/0x348 [ 119.555410][ T8382] __report_bug+0x296/0x3d0 [ 119.557094][ T8382] ? handle_exception_nmi+0xa6e/0x1bb0 [ 119.558969][ T8382] ? __pfx___report_bug+0x10/0x10 [ 119.560675][ T8382] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 119.562819][ T8382] ? kvm_pmu_trigger_event.isra.0+0x789/0xc00 [ 119.564942][ T8382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.567004][ T8382] ? handle_exception_nmi+0xa6e/0x1bb0 [ 119.568897][ T8382] report_bug+0xb2/0x220 [ 119.570391][ T8382] ? handle_exception_nmi+0xa6e/0x1bb0 [ 119.572296][ T8382] handle_bug+0x16a/0x2a0 [ 119.574020][ T8382] exc_invalid_op+0x17/0x50 [ 119.575733][ T8382] asm_exc_invalid_op+0x1a/0x20 [ 119.577457][ T8382] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 119.579857][ T8382] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 119.586700][ T8382] RSP: 0018:ffffc9000f1879d8 EFLAGS: 00010283 [ 119.588834][ T8382] RAX: 0000000000022368 RBX: ffff88805475a9c0 RCX: ffffc9000c402000 [ 119.591595][ T8382] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff888035a8a4c0 [ 119.594313][ T8382] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 119.597070][ T8382] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 119.599945][ T8382] R13: 0000000000000000 R14: ffff888056798000 R15: ffff88805475aa98 [ 119.602749][ T8382] ? handle_exception_nmi+0xa6d/0x1bb0 [ 119.604694][ T8382] ? handle_exception_nmi+0xa6d/0x1bb0 [ 119.606632][ T8382] ? __pfx_handle_exception_nmi+0x10/0x10 [ 119.608629][ T8382] vmx_handle_exit+0x84d/0x1f40 [ 119.610365][ T8382] vcpu_run+0x34cf/0x5ca0 [ 119.611939][ T8382] ? __pfx_vcpu_run+0x10/0x10 [ 119.613615][ T8382] ? rcu_is_watching+0x12/0xc0 [ 119.615356][ T8382] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 119.617384][ T8382] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 119.619340][ T8382] kvm_vcpu_ioctl+0x730/0x1730 [ 119.621041][ T8382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 119.622900][ T8382] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.624940][ T8382] ? do_vfs_ioctl+0x226/0x13e0 [ 119.626673][ T8382] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.628532][ T8382] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 119.631042][ T8382] ? __fget_files+0x215/0x3d0 [ 119.632754][ T8382] ? hook_file_ioctl_common+0x146/0x410 [ 119.634807][ T8382] ? selinux_file_ioctl+0x139/0x290 [ 119.636698][ T8382] ? selinux_file_ioctl+0xb4/0x290 [ 119.638551][ T8382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 119.640373][ T8382] __x64_sys_ioctl+0x18e/0x210 [ 119.642060][ T8382] do_syscall_64+0x106/0xf80 [ 119.643788][ T8382] ? clear_bhb_loop+0x40/0x90 [ 119.645468][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.647557][ T8382] RIP: 0033:0x7f6cd519c799 [ 119.649247][ T8382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.656111][ T8382] RSP: 002b:00007f6cd60bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.659250][ T8382] RAX: ffffffffffffffda RBX: 00007f6cd5415fa0 RCX: 00007f6cd519c799 [ 119.662081][ T8382] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 119.664911][ T8382] RBP: 00007f6cd5232c99 R08: 0000000000000000 R09: 0000000000000000 [ 119.667669][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.670401][ T8382] R13: 00007f6cd5416038 R14: 00007f6cd5415fa0 R15: 00007ffee214ae28 [ 119.673237][ T8382] [ 119.675299][ T8382] Kernel Offset: disabled [ 119.677070][ T8382] Rebooting in 86400 seconds..