last executing test programs: 2.689980851s ago: executing program 1 (id=577): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000100)=ANY=[]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x96, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00603afffe800000000000000000000000000000fe8000000000000000000000000000aa89009078000000002001000000000000bf9468dbc1e021a28e5bd4030000000000000000fc01000000000000000000000000000004079595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301"], 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x50, 0x1, 0x560c, {0x803, 0x5d5}, {0x200, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x7fff, 0x5, 0xe9, 0xa}, 0x0, 0x0}}) shutdown(r0, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x100010, r4, 0xffffd000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x980912}}) r6 = gettid() r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) bind$l2tp(r7, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) process_vm_writev(r6, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) rt_sigqueueinfo(r6, 0x2b, &(0x7f0000000100)={0x3e, 0x6}) msgsnd(0x0, &(0x7f0000000380)={0x2, "fb4de6de0fcbc440c87b377d14c527b92c86c0626b1c7a3d18244ebee4e286"}, 0x27, 0x0) prlimit64(r6, 0x2, &(0x7f0000000200)={0x10001, 0x7}, &(0x7f0000000240)) 1.97063002s ago: executing program 3 (id=589): r0 = userfaultfd(0x80801) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x498}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000140)={0x1, 0x6f7, 0x809d, 0xfff9}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) setns(r5, 0x24020000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0xf4, 0x7, 0x8, 0x4, @private1, @private0, 0x700, 0x1, 0x7, 0x7}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r9], 0x40}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@RTM_DELMDB={0x0, 0x55, 0x10, 0x70bd27, 0x25dfdbfc, {0x7, r7}, [@MDBA_SET_ENTRY={0x0, 0x1, {r7, 0x0, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r7, 0x1, 0x0, 0x1, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r7, 0x1, 0x0, 0x4, {@in6_addr=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x800}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r7, 0x0, 0x1, 0x0, {@in6_addr=@loopback, 0x82dd}}}, @MDBA_SET_ENTRY={0x0, 0x1, {r9, 0x1, 0x0, 0x1, {@ip4=@private=0xa810102, 0x86dd}}}]}, 0x28}, 0x1, 0xba01, 0x0, 0x44844}, 0x4000001) 1.538690249s ago: executing program 2 (id=603): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1600, 0x4000}, 0x0) 1.458896025s ago: executing program 2 (id=604): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x2da, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xf, &(0x7f00000000c0)=@raw=[@alu={0x5, 0x1, 0x8, 0x0, 0x9, 0x4, 0x8}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc24}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], &(0x7f0000000240)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sk_reuseport=0x27, r0, 0x8, &(0x7f0000000280)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x5, 0x9}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r0], 0x0, 0x10, 0x5}, 0x94) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000480), &(0x7f00000004c0)={0x0, 0xfb, 0xa5, 0x6, 0x52, "5d9535d988862360d8baa4ead7cf701e", "92975e66542c99a709bf20bbf36de6c7806937cc659dca90836790fee00f33bcd78fb4de8fc2e90440471ebdd473e56eb6fccc783c214448b101edbb63afa84aa87b2ff37e34d99d7a0b4a23ce7c90a4c83b38458734c5000f61e5931d48dbff5a456d88b601902258298e4a030ad6a7b6292ab2966bc1fbf725b7985581e17529c45e43cb0fbfa42b21244f11668d6d"}, 0xa5, 0x1) read(r2, &(0x7f0000000140)=""/220, 0xdc) 1.453134s ago: executing program 2 (id=606): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg1\x00', 0x200}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0) (rerun: 64) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) (async, rerun: 32) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) 1.229755439s ago: executing program 1 (id=608): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x3, 0xfffd) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001e001000"/28], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r4}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x6, r4}, 0x38) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r5 = accept4$alg(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r9, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x3, 0x0, r5, &(0x7f0000000040)="b1d7d8611e154868b65935c84b501c19", 0x10, 0x2}]) sendmmsg$alg(r5, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0) 1.228768988s ago: executing program 0 (id=609): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000440)=[@wrmsr={0x65, 0x20, {0xb0f, 0x101}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0xa313}, @wrmsr={0x65, 0x20, {0x8e9, 0x100000000}}, @wr_drn={0x68, 0x20, {0x4, 0x6}}, @nested_create_vm={0x12d, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x7, 0x3}}, @out_dx={0x6a, 0x28, {0xb27e, 0x6, 0x6}}, @nested_create_vm={0x12d, 0x18}, @wr_drn={0x68, 0x20, {0x2, 0xffffffffffffffff}}, @nested_load_code={0x12e, 0x5b, {0x1, "c4e1391279096564460f352e0f01bca35bd20000400f3066baf80cb835e66b8bef66bafc0cb084eec481c571e10067410fc798a6280000400f01cb0f01c3410f784f00"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host_nat=0x6c16, 0x8, 0x8, 0x18}}, @out_dx={0x6a, 0x28, {0xc856, 0x4, 0xfffffffffffffff4}}, @cpuid={0x64, 0x18, {0x0, 0xbc}}, @in_dx={0x69, 0x20, {0x274f, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x7c, 0x1}}, @code={0xa, 0x66, {"66420f38801a48b896000000000000000f23d00f21f835000000010f23f80f322e44f40f06dd10420f2306b9800000c00f3235000800000f3048b800000000000000800f23c00f21f83502000f000f23f8420f01ca"}}, @code={0xa, 0x75, {"660f3a0a468089c4e26997b8e5000000c74424002c000000c74424020f000000c7442406000000000f0114240f35c4e138c6820f000000002e440f3acc96400000001c660f5c71f866baf80cb884c47f81ef66bafc0ced66ba420066b80d8066efdf7680"}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x0, 0x200}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x58, 0xf, 0x6, 0x7}}, @nested_load_code={0x12e, 0x4d, {0x3, "f30f09420f35c4a3d16bec0066b8ec008ed8470f30440f20c03507000000440f22c0f30fc773bf3e0f0766420fc772f066ba2000ec"}}, @nested_load_code={0x12e, 0x4e, {0x1, "2e0fc76e00660f383d5caefd4c0fc76d000f20c035200000000f22c064f20fd0c9c42271aa2940f4470f01cab9030000400f32652bd7"}}, @wr_crn={0x67, 0x20, {0x8, 0x9}}, @nested_load_code={0x12e, 0x49, {0x3, "26f20f5daf43890000f3470f090f2016470f017417008f89e894370fe70e0f01cb2e410fc730470f61e064660f3800347f"}}, @wr_crn={0x67, 0x20, {0x2, 0x800}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro32=0x4400, 0x7, 0x2, 0x40}}, @code={0xa, 0x5b, {"0f01c50f855a5a0be166ba430066ed430f07b9560a0000b809b388e4ba59befc000f3066b848000f00d8663e66c7806986000000000f01c5420f01c8b9800000c00f3235004000000f30"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5ec, 0xfff, 0x4, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x477, 0x2, 0xe, 0xca}}], 0x5bd}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000061000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="ea0000000048000f785c92bbc4c281a8ab00000000f33e0f01df26360f01c90f2cd926670fc7b86aec2e0f01df0f20e035000100000f22e0c4e31969eee4", 0x3e}], 0x1, 0x55, &(0x7f0000000100)=[@cstype3={0x5, 0xf}], 0x1) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x30c, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$unix(0x1, 0x2, 0x0) 1.118899551s ago: executing program 0 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x14840, 0x102, 0x20}, 0x18) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) write$binfmt_misc(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x8, 0x2) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5c, 0xa, 0x0, "b75cbb1844038d2cd97c94fc49f31638b5f9623a74002a5b00", 0x31303553}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 1.1186227s ago: executing program 3 (id=611): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppl2tp(r0, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x2, 0x4, 0x3, 0x1}}, 0x26) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) (async) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x8, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000280)={0x1, 0xfffb, 'ae#', 0x10, 0x7}) (async) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000280)={0x1, 0xfffb, 'ae#', 0x10, 0x7}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r6, 0x434, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x11) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x5000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fchown(r10, 0xee01, 0x0) listen(r10, 0x50) (async) listen(r10, 0x50) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r11, 0x0, 0x0) (async) getpeername(r11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 989.948722ms ago: executing program 3 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000140)={0xc4, 0x0, 0xc}) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 989.683861ms ago: executing program 1 (id=613): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) (async) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$char_usb(r2, &(0x7f0000000240)="48ec94994a28644b12d476667a14a9bbd9b37a903d4bc4e76b3cacb0b2c8bcdfa9c36bf330b026f5e8c8f78474242e62f46febe49bf7beb9a0b9c467b274d5ad86353788f9ab8ed84a82c86a0aafe4d48df98712249c6314ed33d5ce6cdfda4804c0b64c700e953ed65fed0203dbc0b672300694d8f65441e20604", 0x7b) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000200)='posixacl\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000200)='posixacl\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=ANY=[@ANYBLOB="35f29d0cbcf1641759e0186cc82c000000", @ANYRES16=r5, @ANYBLOB="01082cbd7000fedbdf250c0000001800058008000100657468000c0002800800040003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) r6 = socket(0x10, 0x80a, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="47fde9789ae1b32205291a727a316a7b1e0a5c125a33c9a5cf5a711359995440ad322123df7352f76e028b56b2ce980afd904f00a97679582bf081d6176795ebd7ede0d8734c3c2c303a15059df0b8fb49"], 0x24}, 0x1, 0x8000000, 0x0, 0x810}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="47fde9789ae1b32205291a727a316a7b1e0a5c125a33c9a5cf5a711359995440ad322123df7352f76e028b56b2ce980afd904f00a97679582bf081d6176795ebd7ede0d8734c3c2c303a15059df0b8fb49"], 0x24}, 0x1, 0x8000000, 0x0, 0x810}, 0x0) accept$alg(r1, 0x0, 0x0) (async) r7 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="ef8ea0e1a5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e1f", 0x20}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x20008040) recvmmsg(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) (async) recvmmsg(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x188, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) r8 = socket(0x1e, 0x80002, 0x7) sendmsg$nl_route(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) recvmmsg$unix(r8, &(0x7f0000002380), 0x0, 0x26022, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) 796.378808ms ago: executing program 1 (id=614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x90) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) splice(r0, &(0x7f0000000040)=0x401, r1, &(0x7f0000000080)=0x100000001, 0x101, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (rerun: 32) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000002400)=0x35, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01040000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000030000000180a0101000b000000000000010000000900020073797a30000000f30800010073797a30"], 0xb8}}, 0x0) 739.792753ms ago: executing program 1 (id=615): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x100010, r0, 0xde545000) (async) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x4, 0x428000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0x7) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000100)=0x10) (async, rerun: 64) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (rerun: 64) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x8, 0x12, r1, 0x83000000) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r2}) (rerun: 64) sendto(r2, &(0x7f00000001c0)="8b3c53889b80915a5c51899886ebeb9841c06a2dcf43b30b348b70b249bfb7e91a0fe0a0f0be0567996d398bbf2ff19abad9c63c2f", 0x35, 0x4854, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x2, 0x4, 0x3, {0xa, 0x4e20, 0x3, @loopback, 0xffff}}}, 0x80) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) (async) recvfrom$netrom(r3, &(0x7f0000000280)=""/157, 0x9d, 0x2002, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000003c0)=0x7, 0x0, 0x4) (async, rerun: 64) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) (async) r5 = inotify_init1(0x80000) pwritev2(r5, &(0x7f0000000440)=[{&(0x7f0000000400)}], 0x1, 0x3, 0x1, 0x12) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="9ef27a5376d6420e70f6ebb8a3e0d8997834f071e52fe348642e789a4cd7692b889c15e1d01875cf8eb232ca6871b0f1f7e3eaf3a2c0ebce3a224dd0eab800eeb1e78cf051b0a203ff36ca4d59d48c005326417bcfae7983d82d93c86d403defedd0fc979f7d7ca3cee9f75fa3f3081c257e8bf00f50f1e27c5daea24727565a88cf152895e45e15a85c040113cd5f9662a9ef7e4d5ea1def4ab4bb0bc96a985216cc0c2675b46430191e2c7a57c010d177d62bb6251e293fb284f198b", 0xbd}, {&(0x7f0000000540)="712286ad52aba16e791e11b559b7f6d17d78f5efea614cc3d420", 0x1a}, {&(0x7f0000000580)="eeed10412269d97062cd666c8c872cfbc620b16ea628592683beab0b3abcc86aef3d81ed02679a1890bb0d5c6477c4ca07a226a77f615af44dda303b3e066c833576ac6a4ad0c1b5eb14bbef763b6fd2414bf376235c1cae0826e2dec43d6f", 0x5f}, {&(0x7f0000000600)="318251403c7d3a47d7bad2630e", 0xd}, {&(0x7f0000000640)="43a1bd1b186104fa61bae851da2ef9c54a05bac0aeb55b6da97572e76d8faa6f803da21592e9830c4a37f2c605e12cd3bdcb1ae02056c5c7a1c70150b504931a237adc37ec81e26c56b7f24377fdbfe59090d0ea0c4ddd1578df04158424bde3525a24aba46ef4d45f35c0937384095423727d780e195f6c54a82a8bf2b233157f4ae65623ea52", 0x87}, {&(0x7f0000000700)="d07c7699cdbbaca0b2133c39d590cd08f89a304ad6c57dd725c5434e", 0x1c}], 0x6, 0x3, 0x400, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x10002, 0x0, 0x10000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000800)={0x0, 0x1, r2}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000880)={&(0x7f0000000840)=[r6], 0x2, 0x1, 0x6}) (async) fanotify_mark(r2, 0x4, 0xa3462ca556a8214c, r5, &(0x7f00000008c0)='./file0\x00') (async) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000900)={0x9, 0x38415262, 0x3, @stepwise={0xfff, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x1ff}}) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000940)={0x6, 0x2, 0x9}) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/image_size', 0x14140, 0x1a2) pwritev(r7, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="2c9f9550f5673379ce2ee91a4f58d0c7e880be135db47d182ec0acf74ac5deaf7fcf1beb4b874e70d595a07bae009c3aec34c746c0b67ed08bd3b3981580111ccdf1c8d634ddb0996827c794bad970606adb1adaea1cb919ccb07c4527777398061e909616c4fd8bbc1f51c37ca6987505dec9d34ea95d12252a31b3fd884eb7e290f2549349135de07591eb4c1b786f33eed241315f3bd9da1f84c3a01be1f28bbd28184fd427230c53f548238a261e2e8d9885a055de5c6e9612d4c5f376800115286fd6608de05b2c34e1ea7338e9a5ce2e35cf950f3100633a4af194821ec44e27ac09ea02", 0xe7}], 0x1, 0x6, 0x80) (async, rerun: 64) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b00), 0xf33652ede8ef7793, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000b40)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r8, 0x3ba0, &(0x7f0000000c40)={0x48, 0x3, r9, 0x0, 0x5, 0x6f, &(0x7f0000000bc0)="cb61d52b41311c0199d1eb9e081c03c409a3504d1b6014d973c2c4954eb851af1b6199306f3a45556bdae49e27e60661817560a302c55fa03cea3da607eabfd5efa98a1f9e29a4981283f0f9d3d141dc356750d96bc7a96af088cb5f36a9d642d8adfe8f5a40e5deb25259437d00b6"}) 739.499336ms ago: executing program 1 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) accept$unix(r2, &(0x7f0000000080), 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0x9}, {0xa, 0xffe0}}, [@filter_kind_options=@f_flower={{0x15}, {0xd, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 239.662662ms ago: executing program 0 (id=617): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0xb36c04575ccf385a, 0x5004) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x24, 0x2, 0x0, "732283ef1acb5aa7abe50000000009be3e8100", 0x34565559}) read(r0, &(0x7f0000000000)=""/9, 0x9) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000440)={0x0, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f0000000080)={{@my=0x1, 0x3}, 0x4e7, 0x6, 0x1, 0x5, 0x1, 0x9e3a, 0x4, 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r6) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r4, r4], &(0x7f0000000280)=[0x8a, 0xceea], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000080)={r4, r4, 0x4, 0xfffffffffffffffb}) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/136, 0x88}, {&(0x7f0000000280)=""/165, 0xa5}], 0x2, 0xfc, 0x1) 238.999529ms ago: executing program 2 (id=618): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r1, 0x801, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x4) 159.884142ms ago: executing program 2 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ad432bbd70000000000002f000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x20048810) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 159.695352ms ago: executing program 3 (id=620): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1c00, 0x4000}, 0x0) 157.90459ms ago: executing program 0 (id=621): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x94}}, 0x40880) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4211, r3) (async) tkill(r3, 0x12) (async, rerun: 32) ptrace(0x4208, r3) (async, rerun: 32) ptrace(0x4207, r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100a06000908010014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 108.826546ms ago: executing program 3 (id=622): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x16, &(0x7f0000000600)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 108.307086ms ago: executing program 2 (id=623): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000000c0)={0x2a, 0xffffffff00000001, 0x7ffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x5, 0x2}}, './file0\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x9, 0x8001, 0x10, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x40, 0x5, 0x9}}) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 'veth0_vlan\x00'}}, 0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="070000000400000000070000000700002c000000", @ANYRES32, @ANYBLOB="0000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYRES64=r1, @ANYRES64=r0, @ANYRESDEC=r6, @ANYRES64=r0, @ANYRESHEX=r7, @ANYRESHEX], 0x48) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x46aa00, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r10, 0x560c, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000240)=0x9, 0x4) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'macvtap0\x00', @remote}) write$tun(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r11], 0xffe) write$tun(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaa9aaaaa000000000000000c020000e00600000030b4a2eb37521839"], 0x1e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x100, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000410000000a00000000000002030000000000000005407dda9f00000002000000010000000000000003000000000000000000000009000080000000000100000003"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff, 0x10000}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000003c0)="c0b52057fc260a312e1da9a5939287af252c2b1649643276ae8778389af1f2b84eee1169bd4c8947c80a323300"/54}, 0xfffffca5) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r12, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000ad0000406e05ff0000000000000109022400010000a00009040000010300000009210340fd01220700090581030004000000"], 0x0) 107.276189ms ago: executing program 0 (id=624): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x801}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d80)={r2, &(0x7f0000000d00), 0x0}, 0x20) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x145400, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001300)={0x53, 0xfffffffffffffffd, 0x1000, 0x13, @scatter={0x2, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f00000000c0)=""/73, 0x49}]}, &(0x7f0000000300)="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", &(0x7f0000000180)=""/254, 0x81, 0x12, 0xffffffffffffffff, &(0x7f0000000280)}) 107.045487ms ago: executing program 3 (id=625): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000004000000000000000001800000001ac630000000000070000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) getpid() syz_open_dev$tty1(0xc, 0x4, 0x2) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') readv(r5, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x110, r4, 0xbed63000) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/232, 0xe8}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0) 0s ago: executing program 0 (id=626): syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x0, 0x7, 0x10, {0x10, 0x7, "de8da610b2154803356cfc62b446"}}, &(0x7f00000005c0)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x20, 0x8, 0x59, "51de33c2daf8c7a1db7fc637356c76751fdce2fcb683d7107b590540278514fb60d92a1d6d4374daacf3f61444592b9a012aa8b028795a09390a6c250b2941fb17608456437a85197b38613b43c9bcbe8dd5d485f9f0da5996"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)=ANY=[@ANYBLOB="c10500002000"], &(0x7f0000000880)={0x40, 0x5, 0x2, '=_'}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x6c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x1d, 0x8, "57b571bee295936dd837d693230b35ecf18f728b122d6193ee"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x154, 0x14, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x21, 0x8, "c5e8188bd55a5aee488833c0886418bdb402a1ed0496abffd394d84b16"}, @NFTA_OBJ_USERDATA={0x5a, 0x8, "bc279c8768e597d5b617af60c5b86bd779d05d92ffd5ceef7105b376e74ece501113fa8f87cf5f4a9b7b27ed1d2abc7f0eca34d3db55352c354d567793af330897fc42e7117de03fd09943303500b9be919453f7e10e"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_USERDATA={0x8f, 0x8, "92c1ba6a467bbd8513a184190555b329b80e045833afb9c7e1a46fa8960e90e84db109430328f114747038c71ea7c07585ff69af8a72c807ca8e53e3db364893b4e21a66682ac9996701f7356e2dd26c4b6f135f0e81bec4c5c4d5a1f25a94e65c7d0262aac01d0fbcb3b9a505a2f3cc1ca66a694d8ba1e9ad177d15ef9cfe6998530ad08c5ae8b99b211c"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x6c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4a, 0x6, "cb3f3ce11d6b530ae69a4f3317d588a63a23fe0d979ff1016d48f09c5a7e6b4c1a3df5e35ddecf3e62a3d9901638c8c42d8494fb7e66a37e92ec9a51c1457d59eceecf4d4338"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2e4}, 0x1, 0x0, 0x0, 0x8821}, 0x20004) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x8, 0x0, @tick=0x81, {}, {}, @raw32={[0x0, 0x0, 0x6]}}], 0x1c) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x8, 0x0, @tick=0x81, {}, {}, @raw32={[0x0, 0x0, 0x6]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x1b7, @time={0x9, 0x8}, 0x0, {}, 0x6}) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000380)="bdfa8fbfc3b06dba580aba772c2e62a8f0f0bcf2390d8d1ee6ddfe26f9d5467c28bb3f9554af94249d6c9960afb085e00d4625e52226f7db0d50dce6cf8d4315ed697db6141ac0c9d2", 0x49}, {&(0x7f0000000400)="bb5711a57426388c33cd8801f6618f5e2fc90996989f38e0c19acc75b9daade4f68defddf8ffed147b957ded551fd2b18ad161ad505c1f5950b1e9f4b7f2b61a54d26691073b3fa98155201c6464fe7935a99bfb177ab155d2bc4c614d1806ae340f2c061f9dbd34e8", 0x69}, {&(0x7f0000000480)="37cd57302ddd87242dcd425da5c58a80d8ad21e026a50dcf4820f2ea2c8fafc049547462dccf3022c57244d0bff6e6e5a2c532ccfe8ad9e99bba5f2bd7bb7fc2112b0acdb07937d58ea01cffce4675a070f8fc47003a46827375099318f76027813aae2a20c33cf3903da2c5363c357f335a4e37ed177c06f1adbba844de", 0x7e}], 0x3) (async) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000380)="bdfa8fbfc3b06dba580aba772c2e62a8f0f0bcf2390d8d1ee6ddfe26f9d5467c28bb3f9554af94249d6c9960afb085e00d4625e52226f7db0d50dce6cf8d4315ed697db6141ac0c9d2", 0x49}, {&(0x7f0000000400)="bb5711a57426388c33cd8801f6618f5e2fc90996989f38e0c19acc75b9daade4f68defddf8ffed147b957ded551fd2b18ad161ad505c1f5950b1e9f4b7f2b61a54d26691073b3fa98155201c6464fe7935a99bfb177ab155d2bc4c614d1806ae340f2c061f9dbd34e8", 0x69}, {&(0x7f0000000480)="37cd57302ddd87242dcd425da5c58a80d8ad21e026a50dcf4820f2ea2c8fafc049547462dccf3022c57244d0bff6e6e5a2c532ccfe8ad9e99bba5f2bd7bb7fc2112b0acdb07937d58ea01cffce4675a070f8fc47003a46827375099318f76027813aae2a20c33cf3903da2c5363c357f335a4e37ed177c06f1adbba844de", 0x7e}], 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18145' (ED25519) to the list of known hosts. [ 55.210808][ T40] audit: type=1400 audit(1766891168.323:62): avc: denied { name_bind } for pid=5923 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.245796][ T40] audit: type=1400 audit(1766891168.363:63): avc: denied { execute } for pid=5924 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.253875][ T40] audit: type=1400 audit(1766891168.363:64): avc: denied { execute_no_trans } for pid=5924 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.461281][ T40] audit: type=1400 audit(1766891170.573:65): avc: denied { mounton } for pid=5924 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.469693][ T40] audit: type=1400 audit(1766891170.583:66): avc: denied { mount } for pid=5924 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.477430][ T5924] cgroup: Unknown subsys name 'net' [ 57.627945][ T5924] cgroup: Unknown subsys name 'cpuset' [ 57.632903][ T5924] cgroup: Unknown subsys name 'rlimit' [ 57.853638][ T5929] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.560168][ T5924] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.919603][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.919617][ T40] audit: type=1400 audit(1766891175.033:82): avc: denied { execmem } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.094627][ T40] audit: type=1400 audit(1766891175.203:83): avc: denied { create } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.117630][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.120473][ T40] audit: type=1400 audit(1766891175.213:84): avc: denied { read write } for pid=5937 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.128489][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.131524][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.134259][ T40] audit: type=1400 audit(1766891175.213:85): avc: denied { open } for pid=5937 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.134936][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.141846][ T40] audit: type=1400 audit(1766891175.223:86): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="socket:[7276]" dev="sockfs" ino=7276 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.149684][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.154240][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.156257][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.159148][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.160394][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.163727][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.168153][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.169240][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.171865][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.171955][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.172136][ T40] audit: type=1400 audit(1766891175.283:87): avc: denied { read } for pid=5937 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.172429][ T40] audit: type=1400 audit(1766891175.283:88): avc: denied { open } for pid=5937 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.173182][ T40] audit: type=1400 audit(1766891175.283:89): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.187265][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.187310][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.187735][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.194809][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.203987][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.207052][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.407000][ T40] audit: type=1400 audit(1766891175.523:90): avc: denied { module_request } for pid=5937 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.482689][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 62.561809][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 62.640173][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.642854][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.646246][ T5937] bridge_slave_0: entered allmulticast mode [ 62.649021][ T5937] bridge_slave_0: entered promiscuous mode [ 62.673220][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 62.678450][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.680811][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.683284][ T5937] bridge_slave_1: entered allmulticast mode [ 62.686423][ T5937] bridge_slave_1: entered promiscuous mode [ 62.717786][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 62.724123][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.732640][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.735746][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.738042][ T5950] bridge_slave_0: entered allmulticast mode [ 62.740606][ T5950] bridge_slave_0: entered promiscuous mode [ 62.747355][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.750422][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.753502][ T5950] bridge_slave_1: entered allmulticast mode [ 62.757635][ T5950] bridge_slave_1: entered promiscuous mode [ 62.762449][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.848081][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.854641][ T5937] team0: Port device team_slave_0 added [ 62.864423][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.867569][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.870573][ T5941] bridge_slave_0: entered allmulticast mode [ 62.874552][ T5941] bridge_slave_0: entered promiscuous mode [ 62.881856][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.886838][ T5937] team0: Port device team_slave_1 added [ 62.909318][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.912297][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.916986][ T5941] bridge_slave_1: entered allmulticast mode [ 62.920716][ T5941] bridge_slave_1: entered promiscuous mode [ 62.969706][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.991523][ T5950] team0: Port device team_slave_0 added [ 62.993559][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.996683][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.000800][ T5942] bridge_slave_0: entered allmulticast mode [ 63.004761][ T5942] bridge_slave_0: entered promiscuous mode [ 63.011170][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.016025][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.018860][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.021859][ T5942] bridge_slave_1: entered allmulticast mode [ 63.025849][ T5942] bridge_slave_1: entered promiscuous mode [ 63.030385][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.033265][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.044516][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.051458][ T5950] team0: Port device team_slave_1 added [ 63.055212][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.057522][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.066290][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.118861][ T5941] team0: Port device team_slave_0 added [ 63.123033][ T5941] team0: Port device team_slave_1 added [ 63.134737][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.138000][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.149296][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.177548][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.188442][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.191397][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.201642][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.225585][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.229887][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.232903][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.242908][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.253487][ T5937] hsr_slave_0: entered promiscuous mode [ 63.257061][ T5937] hsr_slave_1: entered promiscuous mode [ 63.269014][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.271582][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.282130][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.315635][ T5942] team0: Port device team_slave_0 added [ 63.343700][ T5950] hsr_slave_0: entered promiscuous mode [ 63.346090][ T5950] hsr_slave_1: entered promiscuous mode [ 63.348450][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 63.350428][ T5950] Cannot create hsr debugfs directory [ 63.353860][ T5942] team0: Port device team_slave_1 added [ 63.411714][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.414002][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.422862][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.431992][ T5941] hsr_slave_0: entered promiscuous mode [ 63.435100][ T5941] hsr_slave_1: entered promiscuous mode [ 63.437384][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 63.439235][ T5941] Cannot create hsr debugfs directory [ 63.450332][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.452887][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.462021][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.613676][ T5942] hsr_slave_0: entered promiscuous mode [ 63.617263][ T5942] hsr_slave_1: entered promiscuous mode [ 63.620483][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 63.623046][ T5942] Cannot create hsr debugfs directory [ 63.782377][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.798828][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.808591][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.826588][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.893328][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.900885][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.909632][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.916337][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.982222][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.987361][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.992270][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.997598][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.061474][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.073806][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.082244][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.090011][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.099063][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.133674][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.140149][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.150830][ T4750] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.154052][ T4750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.166508][ T4750] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.169424][ T4750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.189661][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.196035][ T5953] Bluetooth: hci0: command tx timeout [ 64.202081][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.204506][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.213675][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.222518][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.224917][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.254300][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.265600][ T5953] Bluetooth: hci3: command tx timeout [ 64.275240][ T5953] Bluetooth: hci1: command tx timeout [ 64.275373][ T5296] Bluetooth: hci2: command tx timeout [ 64.282173][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.285215][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.295810][ T40] audit: type=1400 audit(1766891177.403:91): avc: denied { sys_module } for pid=5937 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.296163][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.306643][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.323876][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.341560][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.361566][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.363910][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.374224][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.376860][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.408246][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.462704][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.471460][ T5937] veth0_vlan: entered promiscuous mode [ 64.483654][ T5937] veth1_vlan: entered promiscuous mode [ 64.513585][ T5941] veth0_vlan: entered promiscuous mode [ 64.519249][ T5937] veth0_macvtap: entered promiscuous mode [ 64.525462][ T5937] veth1_macvtap: entered promiscuous mode [ 64.534021][ T5941] veth1_vlan: entered promiscuous mode [ 64.556981][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.569055][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.573780][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.585906][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.591472][ T4704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.599111][ T4704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.602323][ T4704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.609357][ T5941] veth0_macvtap: entered promiscuous mode [ 64.614184][ T4704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.622617][ T5941] veth1_macvtap: entered promiscuous mode [ 64.680477][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.697115][ T4704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.700641][ T4704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.704851][ T5950] veth0_vlan: entered promiscuous mode [ 64.717314][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.726872][ T5950] veth1_vlan: entered promiscuous mode [ 64.747898][ T5942] veth0_vlan: entered promiscuous mode [ 64.753977][ T4704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.757890][ T4704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.763985][ T4704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.767801][ T4704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.772392][ T4704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.775740][ T4704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.785595][ T5942] veth1_vlan: entered promiscuous mode [ 64.815652][ T5950] veth0_macvtap: entered promiscuous mode [ 64.818399][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.831519][ T5950] veth1_macvtap: entered promiscuous mode [ 64.871350][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.871923][ T5942] veth0_macvtap: entered promiscuous mode [ 64.874398][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.892393][ T5942] veth1_macvtap: entered promiscuous mode [ 64.911090][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.928201][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.939308][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.943150][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.956712][ T3578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.972335][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.975765][ T3578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.987145][ T3578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.995704][ T3578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.008854][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.032779][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.045273][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.054986][ T72] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.062859][ T72] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.070960][ T4750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.073670][ T4750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.096987][ T6038] syzkaller1: entered promiscuous mode [ 65.098878][ T6038] syzkaller1: entered allmulticast mode [ 65.112687][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.116634][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.166475][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 65.169840][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 65.172724][ T6040] Zero length message leads to an empty skb [ 65.181866][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.184446][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.215827][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.221301][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.246916][ T6044] xfrm0 speed is unknown, defaulting to 1000 [ 65.260396][ T6044] xfrm0 speed is unknown, defaulting to 1000 [ 65.264621][ T6046] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 65.272769][ T6044] xfrm0 speed is unknown, defaulting to 1000 [ 65.283219][ T6047] faux_driver vkms: [drm] Unknown color mode 36; guessing buffer size. [ 65.448412][ T6044] infiniband ryz1: set active [ 65.450857][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 65.453415][ T6044] infiniband ryz1: added xfrm0 [ 65.467233][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 65.486297][ T6049] i2c i2c-1: Invalid block write size 34 [ 65.505854][ T6044] RDS/IB: ryz1: added [ 65.507988][ T6044] smc: adding ib device ryz1 with port count 1 [ 65.510773][ T6044] smc: ib device ryz1 port 1 has no pnetid [ 65.514623][ T5310] xfrm0 speed is unknown, defaulting to 1000 [ 65.521362][ T6044] xfrm0 speed is unknown, defaulting to 1000 [ 65.566048][ T6061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.740408][ T6044] xfrm0 speed is unknown, defaulting to 1000 [ 65.887320][ T6044] xfrm0 speed is unknown, defaulting to 1000 [ 65.995798][ T6044] xfrm0 speed is unknown, defaulting to 1000 [ 66.265538][ T5296] Bluetooth: hci0: command tx timeout [ 66.345359][ T5296] Bluetooth: hci1: command tx timeout [ 66.345392][ T5953] Bluetooth: hci3: command tx timeout [ 66.355824][ T5953] Bluetooth: hci2: command tx timeout [ 66.378973][ T6091] syzkaller1: entered promiscuous mode [ 66.381831][ T6091] syzkaller1: entered allmulticast mode [ 66.555550][ T6026] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.686410][ T9] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 66.715065][ T6106] i2c i2c-1: Invalid block write size 34 [ 66.715991][ T6026] usb 8-1: Using ep0 maxpacket: 8 [ 66.723021][ T6026] usb 8-1: unable to get BOS descriptor or descriptor too short [ 66.728666][ T6026] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 66.733724][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 66.738695][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.742793][ T6026] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 66.751379][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 66.756019][ T6026] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166 [ 66.761676][ T6026] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 66.764886][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.768417][ T6026] usb 8-1: Product: syz [ 66.770138][ T6026] usb 8-1: Manufacturer: syz [ 66.771947][ T6026] usb 8-1: SerialNumber: syz [ 66.775855][ T6026] usb 8-1: config 0 descriptor?? [ 66.780485][ T6087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.783732][ T6087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.791614][ T6026] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.835349][ T9] usb 7-1: device descriptor read/64, error -71 [ 66.895294][ T5310] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.065252][ T5310] usb 6-1: Using ep0 maxpacket: 32 [ 67.069941][ T5310] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 67.074734][ T5310] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 67.075330][ T9] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 67.077830][ T5310] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 67.083650][ T5310] usb 6-1: Product: syz [ 67.085042][ T5310] usb 6-1: Manufacturer: syz [ 67.086699][ T5310] usb 6-1: SerialNumber: syz [ 67.089557][ T5310] usb 6-1: config 0 descriptor?? [ 67.091728][ T6108] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 67.205453][ T9] usb 7-1: device descriptor read/64, error -71 [ 67.296364][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 67.296375][ T40] audit: type=1400 audit(1766891180.413:187): avc: denied { setopt } for pid=6107 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.304940][ T40] audit: type=1400 audit(1766891180.413:188): avc: denied { write } for pid=6107 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.317796][ T6026] usb 6-1: USB disconnect, device number 2 [ 67.326531][ T9] usb usb7-port1: attempt power cycle [ 67.635937][ T40] audit: type=1400 audit(1766891180.753:189): avc: denied { execute } for pid=6114 comm="syz.0.29" path=2F6D656D66643A0241BBCCEB1416E86D146F536157202864656C6574656429 dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.665627][ T9] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 67.686889][ T40] audit: type=1400 audit(1766891180.803:190): avc: denied { ioctl } for pid=6114 comm="syz.0.29" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.705800][ T9] usb 7-1: device descriptor read/8, error -71 [ 67.877667][ T40] audit: type=1400 audit(1766891180.993:191): avc: denied { setopt } for pid=6120 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.930837][ T40] audit: type=1400 audit(1766891181.043:192): avc: denied { open } for pid=6122 comm="syz.0.31" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 67.944022][ T40] audit: type=1400 audit(1766891181.053:193): avc: denied { ioctl } for pid=6122 comm="syz.0.31" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 67.944595][ T6123] 9p: Bad value for 'rfdno' [ 67.945443][ T9] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 67.954096][ T40] audit: type=1400 audit(1766891181.053:194): avc: denied { mounton } for pid=6122 comm="syz.0.31" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 67.966153][ T9] usb 7-1: device descriptor read/8, error -71 [ 68.010135][ T40] audit: type=1400 audit(1766891181.123:195): avc: denied { create } for pid=6124 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.019558][ T40] audit: type=1400 audit(1766891181.133:196): avc: denied { write } for pid=6124 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.076316][ T9] usb usb7-port1: unable to enumerate USB device [ 68.153363][ T6131] netlink: 36 bytes leftover after parsing attributes in process `syz.0.33'. [ 68.345746][ T5953] Bluetooth: hci0: command tx timeout [ 68.425368][ T5953] Bluetooth: hci1: command tx timeout [ 68.435346][ T5953] Bluetooth: hci2: command tx timeout [ 68.435557][ T5296] Bluetooth: hci3: command tx timeout [ 69.182486][ T6145] syzkaller1: entered promiscuous mode [ 69.184441][ T6145] syzkaller1: entered allmulticast mode [ 69.298277][ T5296] Bluetooth: hci1: unexpected event 0x3d length: 97 > 14 [ 69.315031][ T9] usb 8-1: USB disconnect, device number 2 [ 69.328112][ T6147] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 69.343254][ T6150] random: crng reseeded on system resumption [ 69.442414][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 69.557304][ T6175] syzkaller1: entered promiscuous mode [ 69.559207][ T6175] syzkaller1: entered allmulticast mode [ 69.608492][ T6179] syzkaller0: entered promiscuous mode [ 69.611491][ T6179] syzkaller0: entered allmulticast mode [ 69.778743][ T6196] xt_l2tp: v2 doesn't support IP mode [ 69.804314][ T6190] [U] [ 69.805485][ T6190] [U] [ 69.806766][ T6190] [U] [ 69.807748][ T6190] [U] [ 69.810551][ T6190] [U] [ 69.811680][ T6190] [U] [ 69.812883][ T6190] [U] [ 69.813974][ T6190] [U] [ 69.815060][ T6190] [U] [ 69.816249][ T6190] [U] [ 69.817412][ T6190] [U] [ 69.818604][ T6190] [U] [ 69.820378][ T6201] netlink: 184 bytes leftover after parsing attributes in process `syz.0.55'. [ 69.824810][ T6201] xt_socket: unknown flags 0xd0 [ 69.829298][ T6190] [U] 0009,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000 [ 69.833701][ T6190] [U] [ 69.834680][ T6190] [U] [ 69.835665][ T6190] [U] [ 69.837116][ T6204] xfrm1: entered allmulticast mode [ 69.840229][ T6190] [U] [ 69.841253][ T6190] [U] [ 69.842214][ T6190] [U] [ 69.843193][ T6190] [U] [ 69.844384][ T6190] [U] [ 69.845565][ T6190] [U] [ 69.846636][ T6190] [U] [ 69.847585][ T6190] [U] [ 69.849313][ T6190] [U] [ 69.849877][ T6200] macvtap1: entered promiscuous mode [ 69.850459][ T6190] [U] [ 69.852983][ T6200] macvtap1: entered allmulticast mode [ 69.853986][ T6190] [U] [ 69.857451][ T6190] [U] [ 69.859027][ T6190] [U] [ 69.860177][ T6190] [U] [ 69.861226][ T6190] [U] [ 69.862184][ T6190] [U] [ 69.863234][ T6190] [U] [ 69.864222][ T6190] [U] [ 69.865169][ T6190] [U] [ 69.866125][ T6190] [U] [ 69.868011][ T6190] [U] [ 69.868971][ T6190] [U] [ 69.869960][ T6190] [U] [ 69.870937][ T6190] [U] [ 69.872018][ T6190] [U] [ 69.872969][ T6190] [U] [ 69.873941][ T6190] [U] [ 69.874970][ T6190] [U] [ 69.876518][ T6190] [U] [ 69.877484][ T6190] [U] [ 69.878436][ T6190] [U] "j>d ?%jK،- ~#'7u‡Nx[m1#Õl^ӵ [ 69.881161][ T6190] [U] )eO3Dtޭ DA2E6qJfq;|JxqxxCz aZ&l:l6ldu5h6WOlg׬[=&ʼY8ۦuqHϛ [ 69.885780][ T6190] [U] ~$*~b;vy ߨQ>ޖHGK_&۰*/TuNdpe@w^FKhYќ=1th8"47ġ [ 69.889590][ T6190] [U] I1t9o3+~zp_>V|S1*0{vI+ïizLDHG Lt˻~lb2 d*z=nҭ n5@g/ZˮiMLp|t3^99=>@ 9o^fKIz [ 69.896539][ T6190] [U] K2ލGl1.5r^aoW1w@rdNl8MG#O\; [ 69.901927][ T6190] [U] q81Zr^’\⁠'/ [ 69.903999][ T6190] [U] G9^ѪՆ [ 69.905404][ T6190] [U] &W,X[m!Rk7bڞ61|Ϳ`@)z=1|@ -hΧbVS^ߍˆ@]&W>|ٱZ\eRQЅyvo?Zb,QvHM?Ya ߋ\f} [ 69.910467][ T6190] [U] UE Q)pk [ 69.912003][ T6190] [U] pF [ 69.913074][ T6190] [U] 8t|mYM2 oK|Fi"+$kq {%p4uCb|XH|} ^@JjB=Uzc-wwjwL*"?#j87s̱ٲ>OR`7bCzjݖb0)pԝ鍋=~ԟ`vn`y]$i sV .6-jUw [ 69.920526][ T6190] [U] .IO,F+pTPHRhŴŰC" Yj@d\|#eDe (8w`8vtњ=vxf3(k-nTVMybj`\>P,dDj&uD`]Kn&&\)tZFqkHcL*ʼnU%wtk⁴QZM;|6gj>uMA3һ*S7r 1h)ɱU [ 69.928467][ T6190] [U] s%7vvO6\vI)aR>=?)bF =VBWӖҀV 0',ۏτt>dAܗ1TTKVid)L%3ڎUb?(M'/N`ʋ`?*\+5RCR':[ f [ 69.930307][ T6210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.58'. [ 69.934266][ T6190] [U] $㥺엕/^12.ɷ[C3GEˠ=@C06:(P_;ռ [ 69.934281][ T6190] [U] v.fi\.-&f?Yr`3cCn$wcOT [ 69.934291][ T6190] [U] 3w 3ٴ8yz~#(SeVV?`AvU·/DgH /#I[ST8'rѿGӸqtvnip [ 69.934297][ T6190] [U] ȉkm [ 69.934300][ T6190] [U] [ 69.934305][ T6190] [U] m7S [ 69.934309][ T6190] [U] &i1 [ 69.934313][ T6190] [U] NeX $1K˚:2v3COA [ 69.934317][ T6190] [U] / [ 69.953524][ T6190] [U] ~-=ir#')īgk*.h0j`ϿI^gݷC$'ve<-֭ [ 69.955999][ T6190] [U] lo< ݡx?ԕ^0׆M+G~$]>ԏ*D[߯<~^ࡅ3 [ 69.958682][ T6190] [U] [ 69.960269][ T6190] [U] D`s#g40>Y&22u\Vg%2Ov4u$dC<_]qڄ+3sI*HPy1Oo69,䃎fÔ^vp<&cȅ [ 69.968999][ T6190] [U] š1R77rg[i=rSJ+Y!&-#Ddiڣh1VTD abB, [ 69.972124][ T6190] [U] .z+;j9{;d_z̟Y8a=o=cC"*St40khYh_X%\m$:9E|ϨBճvUqQ.xI_AQ3 ԅSvQBzfR2TQ[A+`j[tW.?3կ+jk0.S>s6ƚOH7譈SӱdgR&c [ 69.979776][ T6190] [U] Tc0O:rav}h>?yng_ohExwfUe}9׳:S3ݲ_18[΢yu [ 69.982916][ T6190] [U] Rpy [ 69.984033][ T6190] [U] &9 w%hT ԕ@3:퇆lGdwwH+h$ c#9 [ 69.987269][ T6190] [U] ;)Z(0@BCg'}c[e VmzBA|:mv [ 69.989767][ T6190] [U] IK6O/ڃؼwV6/TU2\ʈ)Η2 [ 70.009858][ T6190] [U] {! [ 70.011543][ T6190] [U] I&8Y+iolR}DٻrP3M$0ï.Yc2bpwy[-YVTiK'u@v($ [ 70.014342][ T6209] Bluetooth: MGMT ver 1.23 [ 70.015485][ T6190] [U] 4p:j!4+sg [ 70.015493][ T6190] [U] wWVē,! [ 70.015502][ T6190] [U] mGPK!kVjbͦg%N0#%IHt6n5W ;neu3kthdz!jQ!oTXgL`¨/`d&+d#W [ 70.015518][ T6190] [U] " [ 70.015522][ T6190] [U] sIo~8;Ō/t{JR|0XZӳ^Jo(ٶ [ 70.015527][ T6190] [U] 3 {"f/sl嗇 [ 70.015533][ T6190] [U] ETlCfpʧ20hlՏ֩☣8v60ވV{`K%% h [ 70.015542][ T6190] [U] &&5o,}GK{HodvS+)1:p|+$H܍d2vWi86t >8Dl I[Y2A**vd|"FȬʚlUr夰hl]FJ:WCan;E) [ 70.015581][ T6190] [U] " [ 70.015587][ T6190] [U]  ma頻R0 [ 70.051343][ T6190] [U] ftkЋY/Sz;Y֗k0dB3.,EmY4ԙhV=sׂc+7Woi0A#l>Lso4O-k6jX'Y]?:מqL:bIzdc]5z;@ ֏ [ 70.075339][ T6190] [U] n|SU6j.|, ݞ~zLrYͦ6M"K\ԫ%e|%s$ uv [ 70.078605][ T6190] [U] iwtb uϴ!zLU3ZtC [ 70.081019][ T6190] [U] [ 70.082159][ T6190] [U] [ 70.084563][ T6190] [U] [ 70.085716][ T6190] [U] [ 70.086880][ T6190] [U] [ 70.088068][ T6190] [U] [ 70.090074][ T6190] [U] [ 70.091238][ T6190] [U] [ 70.092395][ T6190] [U] [ 70.093557][ T6190] [U] [ 70.095131][ T6190] [U] [ 70.096125][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 70.096387][ T6190] [U] [ 70.100963][ T6190] [U] [ 70.102209][ T6190] [U] [ 70.104377][ T6190] [U] [ 70.105675][ T6190] [U] [ 70.106941][ T6190] [U] [ 70.108175][ T6190] [U] [ 70.110944][ T6190] [U] [ 70.112201][ T6190] [U] [ 70.113483][ T6190] [U] [ 70.114816][ T6190] [U] [ 70.116615][ T6190] [U] [ 70.117901][ T6190] [U] [ 70.119159][ T6190] [U] [ 70.120446][ T6190] [U] [ 70.121829][ T6190] [U] [ 70.123129][ T6190] [U] [ 70.124338][ T6190] [U] [ 70.125573][ T6190] [U] [ 70.127242][ T6190] [U] [ 70.128713][ T6190] [U] [ 70.130107][ T6190] [U] [ 70.131402][ T6190] [U] [ 70.133173][ T6190] [U] [ 70.134496][ T6190] [U] [ 70.135812][ T6190] [U] [ 70.137077][ T6190] [U] [ 70.138598][ T6190] [U] [ 70.139886][ T6190] [U] [ 70.141123][ T6190] [U] [ 70.142370][ T6190] [U] [ 70.144121][ T6190] [U] [ 70.145545][ T6190] [U] [ 70.146818][ T6190] [U] [ 70.148096][ T6190] [U] [ 70.150198][ T6190] [U] [ 70.151520][ T6190] [U] [ 70.152807][ T6190] [U] [ 70.154067][ T6190] [U] [ 70.157776][ T6190] [U] [ 70.159059][ T6190] [U] [ 70.160066][ T6190] [U] [ 70.161108][ T6190] [U] [ 70.162403][ T6190] [U] [ 70.163575][ T6190] [U] [ 70.164572][ T6190] [U] [ 70.165600][ T6190] [U] [ 70.166764][ T6190] [U] [ 70.167809][ T6190] [U] [ 70.168806][ T6190] [U] [ 70.169878][ T6190] [U] [ 70.171340][ T6190] [U] [ 70.172621][ T6190] [U] [ 70.173690][ T6190] [U] [ 70.212100][ T6222] netlink: 'syz.3.61': attribute type 9 has an invalid length. [ 70.216192][ T6222] netlink: 'syz.3.61': attribute type 11 has an invalid length. [ 70.219488][ T6222] netlink: 'syz.3.61': attribute type 12 has an invalid length. [ 70.222751][ T6222] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.61'. [ 70.227563][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 70.413169][ T6244] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 70.425322][ T5296] Bluetooth: hci0: command tx timeout [ 70.466663][ T6256] netlink: 'syz.3.70': attribute type 23 has an invalid length. [ 70.506622][ T5296] Bluetooth: hci2: command tx timeout [ 70.506666][ T5953] Bluetooth: hci1: command tx timeout [ 70.506699][ T5945] Bluetooth: hci3: command tx timeout [ 70.541060][ T6261] x_tables: duplicate underflow at hook 1 [ 70.569076][ T6189] [U] [ 70.722648][ T6288] deleting an unspecified loop device is not supported. [ 70.726706][ T6289] netlink: 80 bytes leftover after parsing attributes in process `syz.1.81'. [ 70.726858][ T6284] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:0 [ 70.735973][ T6284] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:0 [ 70.739930][ T6284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 70.786278][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'. [ 70.796135][ T6298] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.800153][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'. [ 71.112110][ T6331] netlink: 'syz.3.95': attribute type 30 has an invalid length. [ 71.112125][ T6338] netlink: 'syz.3.95': attribute type 30 has an invalid length. [ 71.140932][ T6331] bond1: option arp_missed_max: invalid value (0) [ 71.143968][ T6331] bond1: option arp_missed_max: allowed values 1 - 255 [ 71.152006][ T6331] bond1 (unregistering): Released all slaves [ 71.180989][ T6338] bond1: option arp_missed_max: invalid value (0) [ 71.183752][ T6338] bond1: option arp_missed_max: allowed values 1 - 255 [ 71.189288][ T6338] bond1 (unregistering): Released all slaves [ 71.414153][ T6354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6354 comm=syz.3.101 [ 71.542209][ T6361] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 71.621659][ T6370] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.621991][ T6371] program syz.1.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.727945][ T6381] 9p: Unknown uid 00000000004294967295 [ 71.777439][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 71.782501][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'. [ 71.803587][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'. [ 71.835108][ T6393] overlayfs: invalid origin (0000) [ 71.837222][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 71.887143][ T6398] syz.1.117 uses obsolete (PF_INET,SOCK_PACKET) [ 71.995537][ T6408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40533 sclass=netlink_route_socket pid=6408 comm=syz.2.120 [ 72.003381][ T6408] SQUASHFS error: Failed to read block 0x0: -5 [ 72.005684][ T6408] unable to read squashfs_super_block [ 72.045043][ T6411] Bluetooth: MGMT ver 1.23 [ 72.091347][ T6419] netlink: 'syz.1.123': attribute type 11 has an invalid length. [ 72.167014][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 72.338545][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 72.338560][ T40] audit: type=1400 audit(1766891185.453:320): avc: denied { write } for pid=6443 comm="syz.2.132" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.368721][ T40] audit: type=1400 audit(1766891185.453:321): avc: denied { open } for pid=6443 comm="syz.2.132" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.558187][ T40] audit: type=1400 audit(1766891185.673:322): avc: denied { connect } for pid=6450 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.567996][ T6451] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 72.606720][ T6451] tmpfs: Bad value for 'mpol' [ 72.629145][ T40] audit: type=1400 audit(1766891185.743:323): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.673361][ T40] audit: type=1400 audit(1766891185.783:324): avc: denied { mounton } for pid=6464 comm="syz.1.137" path="/28/file0" dev="gadgetfs" ino=7851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 72.782084][ T40] audit: type=1400 audit(1766891185.893:325): avc: denied { setopt } for pid=6470 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.805338][ T40] audit: type=1400 audit(1766891185.913:326): avc: denied { create } for pid=6470 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.814387][ T40] audit: type=1400 audit(1766891185.913:327): avc: denied { setopt } for pid=6470 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.823802][ T40] audit: type=1400 audit(1766891185.913:328): avc: denied { ioctl } for pid=6470 comm="syz.2.140" path="socket:[10206]" dev="sockfs" ino=10206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.838463][ T40] audit: type=1400 audit(1766891185.913:329): avc: denied { append } for pid=6470 comm="syz.2.140" name="nbd2" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.021253][ T6481] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 73.025999][ T6481] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 73.092660][ T6485] pimreg: entered allmulticast mode [ 73.349441][ T6510] sctp: [Deprecated]: syz.0.153 (pid 6510) Use of int in max_burst socket option deprecated. [ 73.349441][ T6510] Use struct sctp_assoc_value instead [ 73.435301][ T836] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 73.565320][ T836] usb 7-1: device descriptor read/64, error -71 [ 73.668098][ T6528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.709623][ T6530] netlink: 'syz.3.159': attribute type 9 has an invalid length. [ 73.712889][ T6530] netlink: 'syz.3.159': attribute type 11 has an invalid length. [ 73.825344][ T836] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 73.955392][ T836] usb 7-1: device descriptor read/64, error -71 [ 74.047396][ T6542] PM: Enabling pm_trace changes system date and time during resume. [ 74.047396][ T6542] PM: Correct system time has to be restored manually after resume. [ 74.075931][ T836] usb usb7-port1: attempt power cycle [ 74.130414][ T6548] warning: `syz.0.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.337239][ T6573] fuse: blksize only supported for fuseblk [ 74.415673][ T836] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 74.436367][ T836] usb 7-1: device descriptor read/8, error -71 [ 74.552726][ T6497] random: crng reseeded on system resumption [ 75.123501][ T6592] overlayfs: conflicting lowerdir path [ 75.192994][ T6594] syzkaller0: entered promiscuous mode [ 75.195319][ T6594] syzkaller0: entered allmulticast mode [ 75.293912][ T6596] syzkaller1: entered promiscuous mode [ 75.298758][ T6596] syzkaller1: entered allmulticast mode [ 75.392944][ T6602] mkiss: ax0: crc mode is auto. [ 75.413769][ T6606] overlayfs: unescaped trailing colons in lowerdir mount option. [ 75.696538][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.756569][ T836] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 75.936770][ T836] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 75.941582][ T836] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 75.945945][ T836] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 75.949691][ T836] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 75.953661][ T836] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 75.957212][ T836] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 75.962679][ T836] usb 5-1: string descriptor 0 read error: -22 [ 75.964880][ T836] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 75.968106][ T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.973641][ T836] usb 5-1: rejected 3 configurations due to insufficient available bus power [ 75.977631][ T836] usb 5-1: no configuration chosen from 3 choices [ 76.428745][ T6656] xfrm0 speed is unknown, defaulting to 1000 [ 76.429909][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.434734][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.706068][ T6673] __nla_validate_parse: 6 callbacks suppressed [ 76.706082][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.210'. [ 76.760952][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 76.814817][ T6688] validate_nla: 1 callbacks suppressed [ 76.814863][ T6688] netlink: 'syz.1.216': attribute type 7 has an invalid length. [ 76.897760][ T6686] batadv_slave_1: entered promiscuous mode [ 76.912151][ T6685] batadv_slave_1: left promiscuous mode [ 76.973127][ T6702] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 76.976006][ T6702] lo: entered promiscuous mode [ 76.978289][ T6702] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 77.044673][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 77.132669][ T6714] SELinux: syz.1.225 (6714) set checkreqprot to 1. This is no longer supported. [ 77.143814][ T6715] SELinux: syz.1.225 (6715) set checkreqprot to 1. This is no longer supported. [ 77.213477][ T6720] overlayfs: workdir and upperdir must be separate subtrees [ 77.326327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.423999][ T6735] syzkaller1: entered promiscuous mode [ 77.426578][ T6735] syzkaller1: entered allmulticast mode [ 77.460472][ T6737] ptrace attach of "/syz-executor exec"[5950] was attempted by "/syz-executor exec"[6737] [ 77.460754][ T6713] [U] e9[wW kUI)suJz 14 received [ 81.054323][ T7012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7012 comm=syz.0.320 [ 81.060116][ T7012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7012 comm=syz.0.320 [ 81.065566][ T7012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7012 comm=syz.0.320 [ 81.537175][ T7028] ISOFS: Unable to identify CD-ROM format. [ 81.804530][ T7030] __nla_validate_parse: 5 callbacks suppressed [ 81.804545][ T7030] netlink: 96 bytes leftover after parsing attributes in process `syz.0.326'. [ 81.811975][ T7030] netlink: 'syz.0.326': attribute type 248 has an invalid length. [ 81.826117][ T7032] macsec1: entered allmulticast mode [ 81.872114][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.898052][ T7045] geneve2: entered promiscuous mode [ 81.900546][ T7045] geneve2: entered allmulticast mode [ 81.903596][ T61] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.907460][ T61] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.910621][ T61] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 81.913706][ T61] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.082122][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'. [ 82.148036][ T7065] tc_dump_action: action bad kind [ 82.150373][ T7065] Device name cannot be null; rc = [-22] [ 82.323599][ T7092] ubi8: attaching mtd0 [ 82.337490][ T7092] ubi8: scanning is finished [ 82.337512][ T7092] ubi8: empty MTD device detected [ 82.337543][ T7092] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 82.346017][ T7093] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 82.417624][ T7092] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 82.554578][ T7114] capability: warning: `syz.1.350' uses deprecated v2 capabilities in a way that may be insecure [ 82.693309][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 82.693321][ T40] audit: type=1400 audit(1766891195.803:444): avc: denied { read write } for pid=5942 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.706496][ T40] audit: type=1400 audit(1766891195.803:445): avc: denied { open } for pid=5942 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.713554][ T40] audit: type=1400 audit(1766891195.803:446): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.723412][ T40] audit: type=1400 audit(1766891195.823:447): avc: denied { map_create } for pid=7135 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 82.729229][ T40] audit: type=1400 audit(1766891195.823:448): avc: denied { map_read map_write } for pid=7135 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 82.735252][ T40] audit: type=1400 audit(1766891195.823:449): avc: denied { prog_load } for pid=7135 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 82.741420][ T40] audit: type=1400 audit(1766891195.823:450): avc: denied { bpf } for pid=7135 comm="syz.2.357" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.746861][ T7138] (syz.2.358,7138,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 82.748697][ T40] audit: type=1400 audit(1766891195.823:451): avc: denied { perfmon } for pid=7135 comm="syz.2.357" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.751706][ T7138] (syz.2.358,7138,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 82.758224][ T40] audit: type=1400 audit(1766891195.823:452): avc: denied { prog_run } for pid=7135 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 82.758247][ T40] audit: type=1400 audit(1766891195.823:453): avc: denied { read } for pid=7135 comm="syz.2.357" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.774344][ T7138] (syz.2.358,7138,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 82.777226][ T7138] (syz.2.358,7138,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 83.111231][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 83.356977][ T7187] netlink: 'syz.3.376': attribute type 8 has an invalid length. [ 83.403072][ T7194] xt_bpf: check failed: parse error [ 83.475888][ T53] delete_channel: no stack [ 83.604317][ T7211] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 83.779334][ T7236] --map-set only usable from mangle table [ 83.822945][ T7242] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.827322][ T7242] block device autoloading is deprecated and will be removed. [ 83.827646][ T7238] netlink: 108 bytes leftover after parsing attributes in process `syz.1.391'. [ 83.828599][ T7243] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 83.828644][ T7243] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 83.828653][ T7243] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 83.828663][ T7243] netlink: 'syz.2.390': attribute type 3 has an invalid length. [ 83.828673][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 83.847145][ T7238] netlink: 108 bytes leftover after parsing attributes in process `syz.1.391'. [ 83.849798][ T7238] netlink: 84 bytes leftover after parsing attributes in process `syz.1.391'. [ 83.958548][ T7249] netlink: 'syz.2.395': attribute type 10 has an invalid length. [ 83.961167][ T7249] netlink: 'syz.2.395': attribute type 27 has an invalid length. [ 83.995475][ T7257] tap0: tun_chr_ioctl cmd 1074025676 [ 83.997244][ T7257] tap0: owner set to 0 [ 84.107411][ T7270] SELinux: security policydb version 17 (MLS) not backwards compatible [ 84.110288][ T7270] SELinux: failed to load policy [ 84.148546][ T7274] trusted_key: syz.1.404 sent an empty control message without MSG_MORE. [ 84.315256][ T6024] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 84.465256][ T6024] usb 8-1: Using ep0 maxpacket: 16 [ 84.469906][ T6024] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 84.473536][ T6024] usb 8-1: config 0 has no interface number 0 [ 84.478234][ T6024] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 84.482163][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.485816][ T6024] usb 8-1: Product: syz [ 84.487320][ T6024] usb 8-1: Manufacturer: syz [ 84.488855][ T6024] usb 8-1: SerialNumber: syz [ 84.492276][ T6024] usb 8-1: config 0 descriptor?? [ 84.496414][ T6024] hub 8-1:0.132: bad descriptor, ignoring hub [ 84.499140][ T6024] hub 8-1:0.132: probe with driver hub failed with error -5 [ 84.506376][ T6024] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input8 [ 84.748345][ T7275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.847025][ T53] usb 8-1: USB disconnect, device number 3 [ 85.011412][ T7282] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 85.191167][ T7304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.247262][ T7306] program syz.2.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.378540][ T7310] xt_l2tp: v2 doesn't support IP mode [ 85.436780][ T7315] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.548746][ T7325] xfrm0 speed is unknown, defaulting to 1000 [ 85.585097][ T7332] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 85.855444][ T6024] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 86.005350][ T6024] usb 8-1: Using ep0 maxpacket: 8 [ 86.011466][ T6024] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 86.016155][ T6024] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 86.022924][ T6024] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.026717][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.029543][ T6024] usb 8-1: Product: Щ [ 86.031040][ T6024] usb 8-1: Manufacturer: Л [ 86.032691][ T6024] usb 8-1: SerialNumber: syz [ 86.150104][ T7354] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (5681137492 ns) > initial count (657219872 ns). Using initial count to start timer. [ 86.246387][ T6024] cdc_ncm 8-1:1.0: bind() failure [ 86.250830][ T6024] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 86.253221][ T6024] cdc_ncm 8-1:1.1: bind() failure [ 86.257209][ T6024] usb 8-1: USB disconnect, device number 4 [ 86.499373][ T7357] usb usb8: usbfs: process 7357 (syz.2.426) did not claim interface 0 before use [ 86.677033][ T24] cfg80211: failed to load regulatory.db [ 86.809504][ T7383] 9p: Bad value for 'rfdno' [ 86.811857][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.436'. [ 86.815487][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 86.865436][ T7393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.907348][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 86.975767][ T836] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 86.989817][ T7401] trusted_key: encrypted_key: insufficient parameters specified [ 87.001418][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 87.044261][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 87.064089][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 87.068254][ T7405] macsec0: entered allmulticast mode [ 87.070606][ T7405] veth1_macvtap: entered allmulticast mode [ 87.255316][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 87.405255][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 87.410851][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.417549][ T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.421581][ T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.425670][ T24] usb 7-1: Product: syz [ 87.427606][ T24] usb 7-1: Manufacturer: syz [ 87.429706][ T24] usb 7-1: SerialNumber: syz [ 87.433766][ T24] usb 7-1: config 0 descriptor?? [ 87.437012][ T7403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.643428][ T24] usb 7-1: USB disconnect, device number 10 [ 87.986779][ T40] kauditd_printk_skb: 155 callbacks suppressed [ 87.986790][ T40] audit: type=1400 audit(1766891201.103:609): avc: denied { write } for pid=7415 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.996113][ T40] audit: type=1400 audit(1766891201.113:610): avc: denied { connect } for pid=7415 comm="syz.3.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.012883][ T40] audit: type=1400 audit(1766891201.123:611): avc: denied { bind } for pid=7419 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.023016][ T40] audit: type=1400 audit(1766891201.123:612): avc: denied { connect } for pid=7419 comm="syz.0.449" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.063751][ T40] audit: type=1400 audit(1766891201.173:613): avc: denied { write } for pid=7428 comm="syz.0.453" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.092376][ T40] audit: type=1400 audit(1766891201.203:614): avc: denied { ioctl } for pid=7433 comm="syz.1.454" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18786 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.111093][ T40] audit: type=1400 audit(1766891201.223:615): avc: denied { mount } for pid=7436 comm="syz.3.455" name="/" dev="9p" ino=71827775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.121034][ T40] audit: type=1400 audit(1766891201.223:616): avc: denied { unmount } for pid=7436 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.202985][ T40] audit: type=1400 audit(1766891201.313:617): avc: denied { map } for pid=7444 comm="syz.0.458" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.214382][ T40] audit: type=1400 audit(1766891201.313:618): avc: denied { execute } for pid=7444 comm="syz.0.458" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.258262][ T7451] tmpfs: Bad value for 'mpol' [ 88.373306][ T7465] xfrm0 speed is unknown, defaulting to 1000 [ 88.440452][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 88.480788][ T7469] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 88.522352][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.466'. [ 88.561027][ T7479] binder: 7478:7479 ioctl c0046209 0 returned -22 [ 88.677108][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 88.684372][ T24] hid (null): unknown global tag 0xe [ 88.687389][ T24] hid (null): bogus close delimiter [ 88.701724][ T24] hid-generic 00E6:035F:0005.0002: reserved main item tag 0xd [ 88.711610][ T24] hid-generic 00E6:035F:0005.0002: unknown global tag 0xe [ 88.714750][ T24] hid-generic 00E6:035F:0005.0002: item 0 2 1 14 parsing failed [ 88.725328][ T24] hid-generic 00E6:035F:0005.0002: probe with driver hid-generic failed with error -22 [ 88.733554][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 88.792741][ T7495] bad cache= option: nonw [ 88.792741][ T7495] [ 88.796667][ T7495] CIFS: VFS: bad cache= option: nonw [ 88.799103][ T7495] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 88.809547][ T7495] CIFS mount error: No usable UNC path provided in device string! [ 88.809547][ T7495] [ 88.816865][ T7495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 88.900001][ T7502] vivid-000: ================= START STATUS ================= [ 88.902888][ T7502] vivid-000: Test Pattern: 75% Colorbar [ 88.904983][ T7502] vivid-000: Fill Percentage of Frame: 100 [ 88.907926][ T7502] vivid-000: Horizontal Movement: No Movement [ 88.910166][ T7502] vivid-000: Vertical Movement: No Movement [ 88.912306][ T7502] vivid-000: OSD Text Mode: All [ 88.914102][ T7502] vivid-000: Show Border: false [ 88.916231][ T7502] vivid-000: Show Square: false [ 88.917900][ T7502] vivid-000: Sensor Flipped Horizontally: false [ 88.920074][ T7502] vivid-000: Sensor Flipped Vertically: false [ 88.922230][ T7502] vivid-000: Insert SAV Code in Image: false [ 88.924379][ T7502] vivid-000: Insert EAV Code in Image: false [ 88.926673][ T7502] vivid-000: Insert Video Guard Band: false [ 88.928984][ T7502] vivid-000: Reduced Framerate: false [ 88.932269][ T7502] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 88.935573][ T7502] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 88.938252][ T7502] vivid-000: Enable Capture Cropping: true [ 88.940257][ T7502] vivid-000: Enable Capture Composing: true [ 88.942236][ T7502] vivid-000: Enable Capture Scaler: true [ 88.944243][ T7502] vivid-000: Timestamp Source: End of Frame [ 88.946491][ T7502] vivid-000: Colorspace: sRGB [ 88.948134][ T7502] vivid-000: Transfer Function: Default [ 88.949992][ T7502] vivid-000: Y'CbCr Encoding: Default [ 88.952327][ T7502] vivid-000: HSV Encoding: Hue 0-179 [ 88.954249][ T7502] vivid-000: Quantization: Default [ 88.956110][ T7502] vivid-000: Apply Alpha To Red Only: false [ 88.958162][ T7502] vivid-000: Standard Aspect Ratio: 4x3 [ 88.960109][ T7502] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 88.962707][ T7502] vivid-000: DV Timings: 640x480p59 inactive [ 88.964952][ T7502] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 88.969347][ T7502] vivid-000: Maximum EDID Blocks: 2 [ 88.971102][ T7502] vivid-000: Limited RGB Range (16-235): false [ 88.973331][ T7502] vivid-000: Rx RGB Quantization Range: Automatic [ 88.976379][ T7502] vivid-000: Power Present: 0x00000001 [ 88.978237][ T7502] tpg source WxH: 320x180 (Y'CbCr) [ 88.980088][ T7502] tpg field: 1 [ 88.981521][ T7502] tpg crop: (0,0)/320x180 [ 88.982753][ T7512] netlink: 'syz.0.475': attribute type 30 has an invalid length. [ 88.983335][ T7502] tpg compose: (0,0)/320x180 [ 88.987793][ T7502] tpg colorspace: 1 [ 88.989123][ T7502] tpg transfer function: 6/0 [ 88.990758][ T7502] tpg Y'CbCr encoding: 0/0 [ 88.992238][ T7502] tpg quantization: 0/0 [ 88.993752][ T7502] tpg RGB range: 0/2 [ 88.995429][ T7502] vivid-000: ================== END STATUS ================== [ 89.008749][ T7514] ip6gre1: entered promiscuous mode [ 89.010674][ T7514] ip6gre1: entered allmulticast mode [ 89.062775][ T12] Bluetooth: hci4: Frame reassembly failed (-90) [ 89.247021][ T7546] syz.1.485: attempt to access beyond end of device [ 89.247021][ T7546] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 89.252783][ T7546] gfs2: error -5 reading superblock [ 89.400710][ T7568] exFAT-fs (nullb0): invalid boot record signature [ 89.403086][ T7568] exFAT-fs (nullb0): failed to read boot sector [ 89.406618][ T7568] exFAT-fs (nullb0): failed to recognize exfat type [ 89.467354][ T7561] /dev/sr0: Can't open blockdev [ 89.597765][ T7599] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 89.600944][ T7599] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 89.611333][ T7599] vhci_hcd vhci_hcd.0: Device attached [ 89.611761][ T7600] netlink: 'syz.0.500': attribute type 2 has an invalid length. [ 89.615369][ T7601] vhci_hcd: connection closed [ 89.625979][ T3578] vhci_hcd vhci_hcd.3: stop threads [ 89.630334][ T3578] vhci_hcd vhci_hcd.3: release socket [ 89.632220][ T3578] vhci_hcd vhci_hcd.3: disconnect device [ 89.642465][ T7604] [U] v3f"S/4:XTzWtlW= [ 89.644956][ T7604] [U] J"e:" [ 89.647587][ T7604] exFAT-fs (nbd0): unable to read boot sector [ 89.649653][ T7604] exFAT-fs (nbd0): failed to read boot sector [ 89.651663][ T7604] exFAT-fs (nbd0): failed to recognize exfat type [ 89.715643][ T7608] netlink: 'syz.0.504': attribute type 11 has an invalid length. [ 89.718567][ T7608] netlink: 'syz.0.504': attribute type 13 has an invalid length. [ 89.851984][ T7620] netlink: 'syz.0.508': attribute type 29 has an invalid length. [ 90.159991][ T5296] Bluetooth: Unexpected continuation frame (len 169) [ 90.655255][ T6006] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 90.805189][ T6006] usb 8-1: Using ep0 maxpacket: 8 [ 90.808944][ T6006] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 90.812682][ T6006] usb 8-1: config 179 has no interface number 0 [ 90.815658][ T6006] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 90.820480][ T6006] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 90.825615][ T6006] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 50, changing to 9 [ 90.830625][ T6006] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 90.835056][ T6006] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 90.839873][ T6006] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 90.843008][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.851195][ T7639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.061526][ T6006] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input9 [ 91.065289][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 91.065306][ T5296] Bluetooth: hci4: command 0x1003 tx timeout [ 91.128387][ T7667] netlink: 'syz.2.521': attribute type 12 has an invalid length. [ 91.181527][ T7669] 9p: Bad value for 'rfdno' [ 91.256141][ T7674] usb usb8: usbfs: process 7674 (syz.2.524) did not claim interface 0 before use [ 91.312080][ T5944] usb 8-1: USB disconnect, device number 5 [ 91.312113][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 91.319808][ C3] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 91.387976][ T7691] gfs2: not a GFS2 filesystem [ 91.403959][ T7693] gfs2: not a GFS2 filesystem [ 91.600390][ T7712] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 91.629334][ T836] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 91.653522][ T7716] netlink: 'syz.0.536': attribute type 9 has an invalid length. [ 91.661294][ T7717] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 91.666110][ T7717] xt_l2tp: missing protocol rule (udp|l2tpip) [ 91.670852][ T7717] netlink: 'syz.2.535': attribute type 11 has an invalid length. [ 91.742683][ T7722] openvswitch: netlink: IP tunnel dst address not specified [ 91.797408][ T836] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.801188][ T836] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.804758][ T836] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.808380][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.814599][ T7688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.819125][ T836] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.852865][ T7725] mkiss: ax0: crc mode is auto. [ 91.887801][ T7729] tmpfs: Bad value for 'mpol' [ 91.974162][ T7733] __nla_validate_parse: 9 callbacks suppressed [ 91.974173][ T7733] netlink: 830 bytes leftover after parsing attributes in process `syz.2.541'. [ 92.009642][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.543'. [ 92.020952][ T24] usb 6-1: USB disconnect, device number 4 [ 92.305641][ T7765] ceph: Path missing in source [ 92.454187][ T7776] xt_hashlimit: max too large, truncated to 1048576 [ 92.458754][ T7776] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 92.475257][ T6006] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 92.609499][ T7786] xt_hashlimit: size too large, truncated to 1048576 [ 92.638113][ T6006] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.642630][ T6006] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.655945][ T6006] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.659982][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.676726][ T7688] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.681854][ T6006] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.784342][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 92.886867][ T6006] usb 6-1: USB disconnect, device number 5 [ 92.928725][ T7799] xfrm0 speed is unknown, defaulting to 1000 [ 93.246328][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 93.246341][ T40] audit: type=1400 audit(1766891206.363:710): avc: denied { write } for pid=7813 comm="syz.3.559" name="anycast6" dev="proc" ino=4026533107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.294912][ T40] audit: type=1400 audit(1766891206.403:711): avc: denied { accept } for pid=7818 comm="syz.2.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 93.466038][ T7838] ata1.00: invalid multi_count 128 ignored [ 93.620709][ T40] audit: type=1400 audit(1766891206.733:712): avc: denied { connect } for pid=7845 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.635205][ T40] audit: type=1400 audit(1766891206.733:713): avc: denied { ioctl } for pid=7845 comm="syz.0.567" path="socket:[20916]" dev="sockfs" ino=20916 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.701220][ T6022] IPVS: starting estimator thread 0... [ 93.711391][ T7858] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 93.805326][ T7859] IPVS: using max 46 ests per chain, 110400 per kthread [ 93.986439][ T40] audit: type=1400 audit(1766891207.103:714): avc: denied { map } for pid=7878 comm="syz.2.578" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.996089][ T40] audit: type=1400 audit(1766891207.103:715): avc: denied { execute } for pid=7878 comm="syz.2.578" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.135271][ T53] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 94.160937][ T7888] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 94.175269][ T7888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.181128][ T40] audit: type=1400 audit(1766891207.293:716): avc: denied { kexec_image_load } for pid=7887 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 94.195115][ T7888] bond2: (slave geneve2): making interface the new active one [ 94.199515][ T7888] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 94.285495][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 94.289795][ T53] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 94.293411][ T53] usb 6-1: config 179 has no interface number 0 [ 94.296393][ T53] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 94.301143][ T53] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 94.306857][ T53] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 94.311665][ T53] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 94.316731][ T53] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.322426][ T53] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 94.326469][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.332869][ T7877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.367722][ T40] audit: type=1400 audit(1766891207.483:717): avc: denied { read write } for pid=7896 comm="syz.2.585" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.377459][ T40] audit: type=1400 audit(1766891207.493:718): avc: denied { open } for pid=7896 comm="syz.2.585" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.386703][ T40] audit: type=1400 audit(1766891207.493:719): avc: denied { ioctl } for pid=7896 comm="syz.2.585" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 94.439289][ T7901] sctp: [Deprecated]: syz.0.586 (pid 7901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.439289][ T7901] Use struct sctp_sack_info instead [ 94.473997][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.586'. [ 94.613898][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 94.760634][ T54] usb 6-1: USB disconnect, device number 6 [ 94.760782][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 94.765658][ C3] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 94.814354][ T7926] hpfs: hpfs_map_sector(): read error [ 94.818985][ T7926] i2c i2c-1: Invalid block write size 34 [ 94.941368][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 94.944971][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 95.117234][ T7962] mkiss: ax0: crc mode is auto. [ 95.120359][ T7963] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 95.139744][ T7959] syzkaller0: entered promiscuous mode [ 95.141570][ T7959] syzkaller0: entered allmulticast mode [ 95.145559][ T72] syzkaller0: tun_net_xmit 48 [ 95.478025][ T7984] No control pipe specified [ 95.505280][ T7981] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 95.510347][ T7982] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 95.545359][ T7987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.762934][ T7996] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 95.895662][ T8006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'. [ 96.303423][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 96.313812][ T8011] Context (ID=0x1) not attached to queue pair (handle=0x4d3:0x3) [ 96.388558][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'. [ 96.392412][ T8015] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 96.466463][ T8027] veth0_macvtap: left promiscuous mode [ 96.469090][ T8027] macvtap0: entered allmulticast mode [ 96.534136][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.538507][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.665782][ T8035] ------------[ cut here ]------------ [ 96.667918][ T8035] WARNING: net/core/skbuff.c:7243 at skb_attempt_defer_free+0x641/0x710, CPU#0: syz.3.625/8035 [ 96.671760][ T8035] Modules linked in: [ 96.673253][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.3.625 Not tainted syzkaller #0 PREEMPT(full) [ 96.676760][ T8035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.680512][ T8035] RIP: 0010:skb_attempt_defer_free+0x641/0x710 [ 96.682783][ T8035] Code: 64 e6 f8 e9 5d ff ff ff e8 2c 8a 7c f8 90 0f 0b 90 e9 f0 fc ff ff e8 1e 8a 7c f8 90 0f 0b 90 e9 74 fc ff ff e8 10 8a 7c f8 90 <0f> 0b 90 e9 95 fc ff ff e8 02 8a 7c f8 90 0f 0b 90 48 b8 00 00 00 [ 96.689822][ T8035] RSP: 0018:ffffc90005ee75a8 EFLAGS: 00010287 [ 96.691971][ T8035] RAX: 00000000000010d4 RBX: ffff88802d4e1680 RCX: ffffc9002a608000 [ 96.694825][ T8035] RDX: 0000000000080000 RSI: ffffffff89425cb0 RDI: ffff88802d4e16e0 [ 96.697917][ T8035] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000001 [ 96.700672][ T8035] R10: 0000000000000000 R11: ffff888054930b30 R12: 0000000000000000 [ 96.703307][ T8035] R13: 1ffff92000bdceb9 R14: 0000000000000000 R15: ffff88802d4e16d8 [ 96.706035][ T8035] FS: 00007f96356986c0(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 96.709693][ T8035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.711908][ T8035] CR2: 00007f155c23cf98 CR3: 000000002b876000 CR4: 0000000000352ef0 [ 96.714578][ T8035] Call Trace: [ 96.716263][ T8035] [ 96.717306][ T8035] ? __pfx__copy_to_iter+0x10/0x10 [ 96.719329][ T8035] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 96.721371][ T8035] ? __lock_acquire+0x436/0x2890 [ 96.723076][ T8035] skb_consume_udp+0x19f/0x250 [ 96.724742][ T8035] udp_recvmsg+0x6c7/0x1350 [ 96.726367][ T8035] ? __pfx_udp_recvmsg+0x10/0x10 [ 96.728261][ T8035] ? find_held_lock+0x2b/0x80 [ 96.730023][ T8035] sk_udp_recvmsg+0x9b/0x120 [ 96.731763][ T8035] udp_bpf_recvmsg+0x5c0/0xe40 [ 96.733558][ T8035] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 96.735500][ T8035] ? sock_has_perm+0x258/0x2f0 [ 96.737095][ T8035] ? __pfx_sock_has_perm+0x10/0x10 [ 96.738813][ T8035] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 96.740979][ T8035] inet_recvmsg+0x625/0x6a0 [ 96.742536][ T8035] ? __pfx_inet_recvmsg+0x10/0x10 [ 96.744276][ T8035] sock_recvmsg+0x1b2/0x250 [ 96.745937][ T8035] ____sys_recvmsg+0x218/0x6b0 [ 96.747564][ T8035] ? __pfx_____sys_recvmsg+0x10/0x10 [ 96.749608][ T8035] ? __lock_acquire+0x436/0x2890 [ 96.751786][ T8035] ___sys_recvmsg+0x114/0x1a0 [ 96.753421][ T8035] ? __pfx____sys_recvmsg+0x10/0x10 [ 96.755359][ T8035] ? find_held_lock+0x2b/0x80 [ 96.757017][ T8035] do_recvmmsg+0x2fe/0x750 [ 96.758580][ T8035] ? __pfx_do_recvmmsg+0x10/0x10 [ 96.760337][ T8035] ? do_futex+0x122/0x350 [ 96.761965][ T8035] ? __x64_sys_futex+0x1e0/0x4c0 [ 96.763732][ T8035] __x64_sys_recvmmsg+0x22a/0x280 [ 96.765569][ T8035] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 96.767481][ T8035] do_syscall_64+0xcd/0xf80 [ 96.769081][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.771102][ T8035] RIP: 0033:0x7f963478f7c9 [ 96.772943][ T8035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.775292][ T6006] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.780595][ T8035] RSP: 002b:00007f9635698038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 96.786787][ T8035] RAX: ffffffffffffffda RBX: 00007f96349e6090 RCX: 00007f963478f7c9 [ 96.789731][ T8035] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000005 [ 96.792922][ T8035] RBP: 00007f9634813f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.796039][ T8035] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 96.798901][ T8035] R13: 00007f96349e6128 R14: 00007f96349e6090 R15: 00007ffdb142c378 [ 96.802115][ T8035] [ 96.803641][ T8035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 96.806852][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.3.625 Not tainted syzkaller #0 PREEMPT(full) [ 96.810711][ T8035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.815378][ T8035] Call Trace: [ 96.816885][ T8035] [ 96.818235][ T8035] dump_stack_lvl+0x3d/0x1f0 [ 96.820315][ T8035] vpanic+0x640/0x6f0 [ 96.822092][ T8035] ? skb_attempt_defer_free+0x641/0x710 [ 96.824288][ T8035] panic+0xca/0xd0 [ 96.825863][ T8035] ? __pfx_panic+0x10/0x10 [ 96.827402][ T8035] check_panic_on_warn+0xab/0xb0 [ 96.829267][ T8035] __warn+0x108/0x3c0 [ 96.830595][ T8035] __report_bug+0x2a0/0x520 [ 96.832174][ T8035] ? skb_attempt_defer_free+0x641/0x710 [ 96.834059][ T8035] ? __pfx___report_bug+0x10/0x10 [ 96.835898][ T8035] ? __lock_acquire+0x436/0x2890 [ 96.837584][ T8035] ? skb_attempt_defer_free+0x641/0x710 [ 96.839456][ T8035] report_bug+0xb2/0x220 [ 96.840930][ T8035] ? skb_attempt_defer_free+0x641/0x710 [ 96.842802][ T8035] handle_bug+0x127/0x260 [ 96.844293][ T8035] exc_invalid_op+0x17/0x50 [ 96.845792][ T8035] asm_exc_invalid_op+0x1a/0x20 [ 96.847454][ T8035] RIP: 0010:skb_attempt_defer_free+0x641/0x710 [ 96.849513][ T8035] Code: 64 e6 f8 e9 5d ff ff ff e8 2c 8a 7c f8 90 0f 0b 90 e9 f0 fc ff ff e8 1e 8a 7c f8 90 0f 0b 90 e9 74 fc ff ff e8 10 8a 7c f8 90 <0f> 0b 90 e9 95 fc ff ff e8 02 8a 7c f8 90 0f 0b 90 48 b8 00 00 00 [ 96.855859][ T8035] RSP: 0018:ffffc90005ee75a8 EFLAGS: 00010287 [ 96.858071][ T8035] RAX: 00000000000010d4 RBX: ffff88802d4e1680 RCX: ffffc9002a608000 [ 96.860745][ T8035] RDX: 0000000000080000 RSI: ffffffff89425cb0 RDI: ffff88802d4e16e0 [ 96.863362][ T8035] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000001 [ 96.866002][ T8035] R10: 0000000000000000 R11: ffff888054930b30 R12: 0000000000000000 [ 96.868993][ T8035] R13: 1ffff92000bdceb9 R14: 0000000000000000 R15: ffff88802d4e16d8 [ 96.871785][ T8035] ? skb_attempt_defer_free+0x640/0x710 [ 96.873619][ T8035] ? skb_attempt_defer_free+0x640/0x710 [ 96.875556][ T8035] ? __pfx__copy_to_iter+0x10/0x10 [ 96.877522][ T8035] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 96.879544][ T8035] ? __lock_acquire+0x436/0x2890 [ 96.881717][ T8035] skb_consume_udp+0x19f/0x250 [ 96.883838][ T8035] udp_recvmsg+0x6c7/0x1350 [ 96.885861][ T8035] ? __pfx_udp_recvmsg+0x10/0x10 [ 96.888062][ T8035] ? find_held_lock+0x2b/0x80 [ 96.890143][ T8035] sk_udp_recvmsg+0x9b/0x120 [ 96.892188][ T8035] udp_bpf_recvmsg+0x5c0/0xe40 [ 96.894348][ T8035] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 96.896556][ T8035] ? sock_has_perm+0x258/0x2f0 [ 96.898667][ T8035] ? __pfx_sock_has_perm+0x10/0x10 [ 96.900882][ T8035] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 96.903216][ T8035] inet_recvmsg+0x625/0x6a0 [ 96.905193][ T8035] ? __pfx_inet_recvmsg+0x10/0x10 [ 96.907451][ T8035] sock_recvmsg+0x1b2/0x250 [ 96.909539][ T8035] ____sys_recvmsg+0x218/0x6b0 [ 96.911847][ T8035] ? __pfx_____sys_recvmsg+0x10/0x10 [ 96.914148][ T8035] ? __lock_acquire+0x436/0x2890 [ 96.916444][ T8035] ___sys_recvmsg+0x114/0x1a0 [ 96.918564][ T8035] ? __pfx____sys_recvmsg+0x10/0x10 [ 96.920908][ T8035] ? find_held_lock+0x2b/0x80 [ 96.923024][ T8035] do_recvmmsg+0x2fe/0x750 [ 96.925023][ T8035] ? __pfx_do_recvmmsg+0x10/0x10 [ 96.927241][ T8035] ? do_futex+0x122/0x350 [ 96.929171][ T8035] ? __x64_sys_futex+0x1e0/0x4c0 [ 96.931389][ T8035] __x64_sys_recvmmsg+0x22a/0x280 [ 96.933608][ T8035] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 96.936065][ T8035] do_syscall_64+0xcd/0xf80 [ 96.938088][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.940552][ T8035] RIP: 0033:0x7f963478f7c9 [ 96.942488][ T8035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.950427][ T8035] RSP: 002b:00007f9635698038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 96.953701][ T8035] RAX: ffffffffffffffda RBX: 00007f96349e6090 RCX: 00007f963478f7c9 [ 96.956807][ T8035] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000005 [ 96.959495][ T8035] RBP: 00007f9634813f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.962119][ T8035] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 96.965285][ T8035] R13: 00007f96349e6128 R14: 00007f96349e6090 R15: 00007ffdb142c378 [ 96.968049][ T8035] [ 96.969868][ T8035] Kernel Offset: disabled [ 96.971354][ T8035] Rebooting in 86400 seconds..