last executing test programs: 4.282406523s ago: executing program 2 (id=726): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=@newsa={0x184, 0x10, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in6=@loopback, 0x3, 0xffff, 0x4e24, 0x1000, 0xa, 0x0, 0x0, 0xff}, {@in=@empty, 0xffffffff, 0x32}, @in6=@local, {0x0, 0x4, 0xfffffffffffffffb, 0x3, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x400}, {0xffffffff, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}, @algo_aead={0x4c, 0x12, {{'echainiv(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x8044000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 4.281475942s ago: executing program 2 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x85}, 0x80) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x24a, 0x401}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0x1, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x80000001, 0xa, 0x4, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10001, 0x0, 0x8f, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0x10, 0x80000001, 0x1000, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0xe56, 0x403, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400001, 0x0, 0x4, 0x1c, 0x7, 0xfffff9d5, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xee, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x9, 0x1, 0x1ff, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x1, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x6, 0x5, 0x491, 0x8d3, 0x200006, 0x800d, 0x400, 0x2, 0x400, 0x41, 0x6, 0x1000, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x6, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x7, 0x3437, 0x3, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x8, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x14002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x5, 0x40, 0x100, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x7, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0xffffffca, 0xd8d2, 0x7fffffff, 0x9, 0x8, 0x30f, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="4b3bdf58587a27", 0x7, 0x40100c0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0xc, 0x40000000000180, 0xffffffffffffffff, 0x80000000, 0xf2, 0x9, 0xfffffffffffff801, 0x2000000000007, 0x8, 0x7, 0x0, 0x3, 0x4, 0x3], 0x25000, 0x1144}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_create_resource$binfmt(0x0) socket(0x2b, 0x80801, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, 0xfffffffffffffffe) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) 4.079394802s ago: executing program 2 (id=731): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4", 0x1}}], 0x12}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r7, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x732, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x0) 3.77374104s ago: executing program 2 (id=735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 3.77360731s ago: executing program 2 (id=736): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcff000009"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x20801) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000840)) 3.772746024s ago: executing program 2 (id=739): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) (async) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 3.769906639s ago: executing program 1 (id=742): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb383fac7e651aac093930061101a40fe1a2008f88d820cd26f7f30100bbfd0eea708f2a183b652a14702721413f902335568e9f"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x5}, 0x10}, 0x94) 3.69220949s ago: executing program 1 (id=743): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x8c, 0xfffffffc, 0x4}, 0x9c) setrlimit(0x0, &(0x7f0000000980)={0x0, 0x62}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000580), 0x1000000000000297) 3.690209812s ago: executing program 1 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x44, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xf9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket(0xa, 0x3, 0x3a) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000000400)) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r7}, 0xc) r8 = fsopen(&(0x7f0000000000)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#X\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000000c0)=0xe, 0x4) (async) getsockopt$inet6_int(r4, 0x29, 0x49, 0x0, &(0x7f0000001180)) (async) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x114, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$FE_GET_PROPERTY(r9, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x13, '\x00', @data=0x3, 0x9}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r11, &(0x7f0000000080)={0x2020}, 0x2020) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) 3.612155952s ago: executing program 1 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}}, {{@in=@local, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.740544029s ago: executing program 3 (id=771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xa}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 4) 1.532132468s ago: executing program 3 (id=774): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000029dbdf"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000000c0)={0x30, "58db8e2886c58dedae00f13cc17206c1c0dc504ae0ebea61dbf33843be189a6a1004eea6186435b4631012686b86ccf010c0de413adc834811ebcc33107b48f6fd3178493c6e694e73fa72b695e4cf1e47e6da7e03ec772868a2c65241d21058d4b193d0e1b56474a862f8aa99283cf8f507a54735c19b92c374eb97f52788c7"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x50c7f016254efb21, 0x7, 0x3, 0x4, {{0x33, 0x4, 0x2, 0x0, 0xcc, 0x66, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, {[@end, @timestamp_addr={0x44, 0x44, 0xd1, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@local, 0x4}, {@remote, 0x1}, {@multicast1, 0x10000}, {@rand_addr=0x64010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xffff}, {@broadcast, 0xf6}, {@loopback, 0x9}]}, @rr={0x7, 0x17, 0x88, [@remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x8, "4e8cad6fc7cc"}, @lsrr={0x83, 0xf, 0x28, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0xa}, @local]}, @lsrr={0x83, 0x1b, 0xd5, [@remote, @broadcast, @local, @local, @multicast2, @private=0xa010100]}, @timestamp_prespec={0x44, 0x24, 0x56, 0x3, 0x9, [{@private=0xa010102, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @noop]}}}}}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) (async) ioctl$sock_ifreq(r3, 0x8918, &(0x7f0000000200)={'pim6reg1\x00', @ifru_flags=0x800}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x3}}, 0x20) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="08e2f0ffffffffff9e22ad0ad35643b3d447ad9c843846aaa69a8cc005acb56987738fb24e84047042d697a95e0cc48944985837536c54521b7f034402b6be8038ed6961e799e6739af0948f940262471dab5fb55af008257b1ed0f792be971253b9cbb358302edcc282829a664a2f0ab038f098b4dbdc99d1ffeeeb0935b31e5c6141b175d75537660bb1fa57f2e1c464a20028dccdd216b4ad08a4dd00fcffff2b83a71e89ac"], &(0x7f0000000180)='GPL\x00', 0x6, 0x41, &(0x7f0000000340)=""/65, 0x0, 0xe6, '\x00', r2, @fallback=0x25, r4, 0x8, &(0x7f00000002c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x2, 0x0, &(0x7f0000000480)=[{0x1, 0x2, 0xa, 0x7}, {0x3, 0x1, 0x4, 0x2}], 0x10, 0x2b7a}, 0x94) 1.472130404s ago: executing program 1 (id=777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_secret(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="66ba780cb87476188cef66bafc0ced640f781ec4c17f12be002023700066b8b68c66ef65f3a7c4c178ae59c5c4c189a72166baf80cb822ac738aef66bafc0cecc4e19558690066bad104ed", 0x4b}], 0x1, 0x4498bda7e2139f52, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000028) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000440)="7f", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sendmmsg$inet6(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="534b0ac01bd0edcbe8a5dea438bce2d26b42fac94876446e7a50498dd3ce64ca74af811203320c767ab62b9746565e64d89162c210e84aacc075dc30af2f60c36e4abb4e986f149611d8bd5334996caed771187552b8fdc0c0ad7e2e3bed9400"/110, 0xfffffc53}], 0x1}}], 0x1, 0x4000000) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x8008af26, &(0x7f0000000000)={0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x3ff, 0x40, 0x7, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x5, 0x1000200004, 0x4, 0x2, 0x6de, 0x1], 0x8080000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0xd3a, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8, 0x1ff}, 0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x2, 0x6, 0x0, 0x7ffc0002}]}) getrusage(0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.151797385s ago: executing program 0 (id=780): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) r4 = fsopen(&(0x7f0000000000)='aufs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='te\x8f\xd8\x8c\xb1umm\x96\x06encryption', &(0x7f0000000180)='lloc', 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="10d40000b1eb502a200012800b00010067656e65766500001000028004000e"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async, rerun: 64) ioctl$TIOCSSOFTCAR(r3, 0x5412, &(0x7f0000000040)=0x8) (rerun: 64) 961.280884ms ago: executing program 0 (id=781): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0xd, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008080}, 0x48000) 810.874939ms ago: executing program 0 (id=782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xa}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 5) 661.602619ms ago: executing program 3 (id=783): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r2, &(0x7f0000000800)=""/4096, 0x1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xffffffffffffffff, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) (async, rerun: 64) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) (rerun: 64) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r7, r6, &(0x7f00000001c0)=0x1, 0x8) getdents64(r7, &(0x7f0000000100)=""/30, 0x1e) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES16=r5, @ANYRES16=r0, @ANYRES16=r4, @ANYRESDEC=r1, @ANYBLOB="d2269df04714016a64caa588a21e8724dd3f2b0a6dbfcf48fc71a4a3d0d8f6f6df2f28a3a009cb62fc1b3c7de0391d73e4d254a174babe6111a888c392e677d381bb9e41dfec4436f2a09a0080c5bc90e620ad29", @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES8=r3], 0xac}}, 0x0) 589.448398ms ago: executing program 0 (id=784): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000440)='qnx4\x00', 0x200013, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './cgroup\x00'}) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0x7fe2c2fe7ce3ce49) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_create_resource$binfmt(&(0x7f0000000100)='./cgroup\x00') setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "f36278d4229883cd", "42a14a400003f855def5d37a9fcaaff8d18f1224c7f840b07cc5a2ade31eb492", "63b47fa0", "550a44bf7e7dcdb9"}, 0x38) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000380)) setresuid(r1, r2, r3) 588.743838ms ago: executing program 3 (id=785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x84, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x18000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fd"], 0xd8}}, 0x20008004) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3e, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = fanotify_init(0x0, 0x80000) fanotify_mark(r7, 0x60e, 0x48000030, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x2, 0xffffffffe8110f4f, 0xd, 0xffff, 0x1ff, 0xffeffffa, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000940)={0x3d0, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffff675}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa59}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7c1d023be19dd0d1b0b68a0548a1c66c054257f98917e752"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x200}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="55935a748349afb52cbcaa0fea64d4395245e85f086154213b920c232d502c66"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d69b71cc7a95cb03"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e478e3e862c36aff5a1c11a5bf575e2fa569fd3620a6f9ee"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bbe886912d6788bdbc1d00dcf9196332"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e834d22b57a3b39d52b76c1a48297fa3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e855c8d720bb3854"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0a9d88bf55ab63cb49b6c383d4b7a727"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe728}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d527eae4e50045fbe957c118cc95197a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9951985a111a699a8cb6b0c9067b8f78"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7818ec627e56e062"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f248c7350bc52c022fc604d7f8319a6968436013182e44ef"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff117a}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2708fd5b81515a4c1424bddc02c72a97"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="32075cc54e5835041b37f463b05235628c62775c3349accd747d43db5c8ef8c0"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="31adfb9897c7249db78b658b60994e3d200b2d5247f86c0c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="20c7650861a26a76067d208905729d424504e11a4ff4ec7f3d8a9fe03cf9c460"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="151ef70534e0fc668cba85c853f718cd1ad31f96b55b5aacc3db957bef827622"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="aad1ef37410c27c953711002cd70601a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="69c715e9be1334e0e5aaae7e976fee89"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0xb4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="145ec200a5468e1a148fb033c746885b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="182c6044b0e85e1021eb2632f87b34b1c73d9627db5e6de8019783773ffdd435"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="76c5b0dea24a19b5a7d723c3c481a6876ef392b4d92b9ae320a818922e0a9ece"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b83c7b273ef7064fca3cbaa222b221a7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f515c266a61a33da26ff0121e2f7490d4fb245c93c90af429b987e8b5463acb1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0a7c09823f2a8a7f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "95730cf8b34f4798"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4afb39837b2de1f9b8a733d0ce4177f4"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6728c93dc40c0d55"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "79b16f4d09a98c60"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="562f1f2c9e8c25e58bae5c1acfd71333ee68044060b3f6039bffd390085169da"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="12ce11c16af5bab451177e25526101ee75b3c963a47cb64bbabcd6871c347af4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9ac217bda7f4d0b2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ff41d5da1716d1f9"}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x3}, 0x40084) r10 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 531.636759ms ago: executing program 0 (id=786): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x305}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="f9d4bdb17867397f958b5596ab020400007d5b981eb6c151126c87e8", @ANYRES16=r2, @ANYBLOB="31830000000000000000190000000c0001800800030007000000"], 0x20}, 0x1, 0x4000}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x4, 0x1, {{0x33, 0x4, 0x2, 0x9, 0xcc, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0x48, [@multicast2]}, @generic={0x82, 0xd, "1ad973bc0b76557bff08db"}, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x6, 0x11, "0e673192bfe45d25f4f9fae611f220"}, {0x2, 0xe, "b57105d4c16230a61628ec86"}, {0x6, 0x6, "2689bd66"}, {0x0, 0x9, "859a158a6e8ad5"}, {0x7, 0x11, "e40e12dbb278ea420938d6effe8d0a"}, {0x0, 0x9, "979a401f5cd398"}, {0x6, 0x4, '\fI'}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x4c, 0xcb, 0x1, 0x0, [{@multicast1, 0x6}, {@multicast1, 0x5}, {@empty, 0x1b5d}, {@local}, {@local, 0x6}, {@broadcast, 0x80}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@rand_addr=0x64010101, 0x4}]}]}}}}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @dev}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x10, 0x20, 0x1bee, 0x6, {{0x23, 0x4, 0x0, 0x3, 0x8c, 0x67, 0x0, 0xfe, 0x2f, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0xf, 0x73, [@rand_addr=0x64010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x4, '\x00\b'}, @ssrr={0x89, 0x17, 0x66, [@broadcast, @private=0xa010100, @loopback, @remote, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}, @cipso={0x86, 0x24, 0x0, [{0x5, 0x12, "521170ac482d3f62bf86b564d0a8281a"}, {0x0, 0xc, "96d6416c0322cc76e98b"}]}, @lsrr={0x83, 0x17, 0x80, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010102, @multicast2]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x148, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) socket$inet6(0xa, 0x2, 0x0) r13 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x48100, 0x0) ioctl$CDROMPAUSE(r13, 0x5301) r14 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r14, 0x40096101, &(0x7f00000016c0)={{}, 0x2}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r15 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r16, 0x891c, &(0x7f0000000040)="a43a") 530.703365ms ago: executing program 1 (id=787): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) sigaltstack(0x0, 0x0) gettid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002880)={0x84, &(0x7f0000002440)={0x20, 0x14, 0x5, "a6a8c29510"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000080)="00012c61") 352.078396ms ago: executing program 0 (id=788): pipe(&(0x7f0000000000)={0xffffffffffffffff}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() kcmp(r5, r6, 0x0, r4, r4) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) preadv2(r7, &(0x7f0000002240)=[{&(0x7f0000002040)=""/76, 0x4c}], 0x1, 0x8, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r9, 0x1beed000) preadv2(r9, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x2000, 0x0, 0x1f) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000002280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 231.721398ms ago: executing program 3 (id=789): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x450, &(0x7f00000000c0)={[{@cpuset_v2_mode}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x48885) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff00000023", 0x15) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x188}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d82701", 0x8f}, {&(0x7f0000000540)}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b191986", 0xd}, {0x0}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$XFS_IOC_DIOINFO(r6, 0x800c581e, &(0x7f0000000500)) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = dup(r2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0xa}, 0x1c, &(0x7f0000000380)}, 0x4048043) 0s ago: executing program 3 (id=790): r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000002680)="ad", 0x1) r2 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat2(r3, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)={0x2380}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x11}]}]}, 0x28}}, 0x0) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="23000300010007", 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000180)="4a60b4eb100ac959366ef904a6ef465687879386c8385b6a2fc9af56bc2e7c09788613da1eac75897c6dfb2daf13244a4e679f49b74e207527c3e702ae1ca0c733bda7feeffcf2649ef5742e0917eb9b962ae86534ace916adad7363111f6ddbfb4d83f8c8960ac332ce60b33ccb8ac068e2a5491566c9b3a8b92f6809a3842fea9af1559b87cfbbaec025f40fd5d8199c2b57b8d185630b0fee", 0x9a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@ipmr_newroute={0x14c, 0x18, 0x20, 0x70bd27, 0x25dfdc00, {0x80, 0x10, 0x80, 0x6, 0x0, 0x2, 0xff, 0xb, 0x800}, [@RTA_METRICS={0xde, 0x8, 0x0, 0x1, "e5b804023fc95ec6b7778a3ba24a6309e5247aaf17d049d39eaf0350a21bf76ef4854fdee9ae4b83f9ea75e55e8b4bd1447ca8db74d756ed5a4609bf7bef00d4507c21012d574bbbe1f3f823b2b8ef63702eb7aaeb472b11cc3a7312cc40e3631e1a16c81b692bb57b2eef967a0aa297e2a308a15757cde77794c2dcfc591a0fb6e5e190983b46c6cc9e7bbcfed4d41b65c9b118cc833ec166149ed4e88c7522652903a873661d5c46f73b90fe7ab590eb81d7d30e1915eb57f11d7ceee923a212f68bbdcaae33c46551c29803144b75d5009e48b56ef0c7092f"}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x5}}, @RTA_FLOW={0x8, 0xb, 0x4}, @RTA_OIF={0x8, 0x4, r9}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_FLOW={0x8, 0xb, 0x7a13be16}, @RTA_MULTIPATH={0xc, 0x9, {0x53, 0x1c, 0xf7, r9}}, @RTA_MARK={0x8, 0x10, 0x1}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x14c}}, 0x0) kernel console output (not intermixed with test programs): unexpected cc 0x0c23 length: 249 > 4 [ 52.591538][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.596018][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.599677][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.599679][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.602827][ T5930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.607563][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.610333][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.610905][ T5930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.616195][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.616315][ T5930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.620841][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.735996][ T40] audit: type=1400 audit(1772365193.384:90): avc: denied { module_request } for pid=5921 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.807086][ T5921] chnl_net:caif_netlink_parms(): no params data found [ 53.015668][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.019414][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.022647][ T5921] bridge_slave_0: entered allmulticast mode [ 53.026194][ T5921] bridge_slave_0: entered promiscuous mode [ 53.031872][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 53.046353][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.048696][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.053166][ T5921] bridge_slave_1: entered allmulticast mode [ 53.056232][ T5921] bridge_slave_1: entered promiscuous mode [ 53.077131][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 53.109054][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 53.154319][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.181580][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.209928][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.212838][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.215255][ T5924] bridge_slave_0: entered allmulticast mode [ 53.217990][ T5924] bridge_slave_0: entered promiscuous mode [ 53.225398][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.227730][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.229981][ T5924] bridge_slave_1: entered allmulticast mode [ 53.232811][ T5924] bridge_slave_1: entered promiscuous mode [ 53.248172][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.250720][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.253117][ T5925] bridge_slave_0: entered allmulticast mode [ 53.255777][ T5925] bridge_slave_0: entered promiscuous mode [ 53.264460][ T5921] team0: Port device team_slave_0 added [ 53.279390][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.281823][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.284136][ T5925] bridge_slave_1: entered allmulticast mode [ 53.286979][ T5925] bridge_slave_1: entered promiscuous mode [ 53.295719][ T5921] team0: Port device team_slave_1 added [ 53.304820][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.314752][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.360206][ T5924] team0: Port device team_slave_0 added [ 53.362764][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.365649][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.375319][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.383218][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.387151][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.390265][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.392589][ T5932] bridge_slave_0: entered allmulticast mode [ 53.395304][ T5932] bridge_slave_0: entered promiscuous mode [ 53.399793][ T5924] team0: Port device team_slave_1 added [ 53.408170][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.410574][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.419167][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.424320][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.427398][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.430389][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.433027][ T5932] bridge_slave_1: entered allmulticast mode [ 53.435764][ T5932] bridge_slave_1: entered promiscuous mode [ 53.477894][ T5925] team0: Port device team_slave_0 added [ 53.480615][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.482883][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.491511][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.496099][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.498350][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.506932][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.511848][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.515917][ T5925] team0: Port device team_slave_1 added [ 53.529046][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.563516][ T5932] team0: Port device team_slave_0 added [ 53.574352][ T5921] hsr_slave_0: entered promiscuous mode [ 53.577371][ T5921] hsr_slave_1: entered promiscuous mode [ 53.593254][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.595597][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.603777][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.609209][ T5932] team0: Port device team_slave_1 added [ 53.627549][ T5924] hsr_slave_0: entered promiscuous mode [ 53.630327][ T5924] hsr_slave_1: entered promiscuous mode [ 53.633066][ T5924] debugfs: 'hsr0' already exists in 'hsr' [ 53.635256][ T5924] Cannot create hsr debugfs directory [ 53.637507][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.639749][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.648243][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.699678][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.702016][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.710675][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.715046][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.717584][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.725821][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.767261][ T5925] hsr_slave_0: entered promiscuous mode [ 53.769423][ T5925] hsr_slave_1: entered promiscuous mode [ 53.771504][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 53.773168][ T5925] Cannot create hsr debugfs directory [ 53.882468][ T5932] hsr_slave_0: entered promiscuous mode [ 53.884716][ T5932] hsr_slave_1: entered promiscuous mode [ 53.886855][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 53.888922][ T5932] Cannot create hsr debugfs directory [ 54.052393][ T5921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.061164][ T5921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.065367][ T5921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.078446][ T5921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.107562][ T5925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.115369][ T5925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.123654][ T5925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.128211][ T5925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.181151][ T5924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.189383][ T5924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.194159][ T5924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.198588][ T5924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.267699][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.273302][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.277842][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.283632][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.295406][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.328346][ T5921] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.346458][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.348939][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.364683][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.369827][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.373030][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.415408][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.432858][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.448120][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.451602][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.472502][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.476952][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.479317][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.488116][ T40] audit: type=1400 audit(1772365195.134:91): avc: denied { sys_module } for pid=5921 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.502922][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.505098][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.508107][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.510375][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.517657][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.547677][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.559784][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.562136][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.573115][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.575489][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.597740][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.601692][ T5285] Bluetooth: hci0: command tx timeout [ 54.647912][ T5921] veth0_vlan: entered promiscuous mode [ 54.654118][ T5921] veth1_vlan: entered promiscuous mode [ 54.671719][ T5921] veth0_macvtap: entered promiscuous mode [ 54.676157][ T5921] veth1_macvtap: entered promiscuous mode [ 54.685358][ T5285] Bluetooth: hci3: command tx timeout [ 54.688033][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.688036][ T5285] Bluetooth: hci2: command tx timeout [ 54.688111][ T5930] Bluetooth: hci1: command tx timeout [ 54.695412][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.716474][ T222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.719735][ T222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.732056][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.734445][ T222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.737291][ T222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.755461][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.767874][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.784569][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.789831][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.817247][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.820763][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.855111][ T5924] veth0_vlan: entered promiscuous mode [ 54.859552][ T5932] veth0_vlan: entered promiscuous mode [ 54.870289][ T5924] veth1_vlan: entered promiscuous mode [ 54.871230][ T5921] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.882043][ T5925] veth0_vlan: entered promiscuous mode [ 54.888620][ T5932] veth1_vlan: entered promiscuous mode [ 54.896176][ T5925] veth1_vlan: entered promiscuous mode [ 54.924129][ T5925] veth0_macvtap: entered promiscuous mode [ 54.931971][ T6010] openvswitch: netlink: Message has 4 unknown bytes. [ 54.934055][ T5925] veth1_macvtap: entered promiscuous mode [ 54.934567][ T6010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.940626][ T5924] veth0_macvtap: entered promiscuous mode [ 54.951563][ T5932] veth0_macvtap: entered promiscuous mode [ 54.955503][ T5932] veth1_macvtap: entered promiscuous mode [ 54.967172][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.972167][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.978883][ T5924] veth1_macvtap: entered promiscuous mode [ 54.985310][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.989296][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.000633][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.010340][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.013986][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.024228][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.029125][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.035564][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.043755][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.053557][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.064974][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.067974][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.091880][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.100601][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.104476][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.107415][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.112067][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.115255][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.145863][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.148589][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.191604][ T6024] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7'. [ 55.196344][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.198741][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.201398][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.203843][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.240601][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.243366][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.259660][ T6031] 9p: Bad value for 'wfdno' [ 55.268603][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.274081][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.396830][ T6042] xt_CT: No such helper "syz0" [ 55.459327][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 55.469343][ T6058] binder: BINDER_SET_CONTEXT_MGR already set [ 55.473093][ T6058] binder: 6056:6058 ioctl 4018620d 200000000100 returned -16 [ 55.567591][ T6055] bridge_slave_0: invalid flags given to default FDB implementation [ 55.600564][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.392474][ T6086] overlay: filesystem on ./bus not supported as upperdir [ 56.482954][ T6098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.29'. [ 56.488798][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 56.498464][ T6098] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.29'. [ 56.502894][ T6098] netlink: Unknown conntrack attr (0) [ 56.505754][ T6082] SELinux: failed to load policy [ 56.680650][ T5285] Bluetooth: hci0: command tx timeout [ 56.760477][ T5935] Bluetooth: hci1: command tx timeout [ 56.761575][ T5930] Bluetooth: hci3: command tx timeout [ 56.763229][ T5285] Bluetooth: hci2: command tx timeout [ 56.804100][ T6108] x_tables: duplicate underflow at hook 2 [ 56.820148][ T6020] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.936210][ T6113] kAFS: unable to lookup cell 'syz0' [ 56.973677][ T6020] usb 8-1: config index 0 descriptor too short (expected 157, got 72) [ 56.981837][ T6020] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.990257][ T6020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.994193][ T6020] usb 8-1: Product: syz [ 56.997865][ T6020] usb 8-1: Manufacturer: syz [ 57.002711][ T6020] usb 8-1: SerialNumber: syz [ 57.008060][ T6117] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.016156][ T6117] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.018929][ T6020] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 57.030641][ T6117] futex_wake_op: syz.1.36 tries to shift op by 32; fix this program [ 57.059071][ T6020] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 57.207766][ T6129] process 'syz.1.40' launched './file2' with NULL argv: empty string added [ 57.469784][ T6105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.31'. [ 57.476645][ T5989] usb 8-1: USB disconnect, device number 2 [ 57.506316][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 57.506327][ T40] audit: type=1400 audit(1772365198.154:193): avc: denied { create } for pid=6142 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 57.524512][ T40] audit: type=1400 audit(1772365198.174:194): avc: denied { ioctl } for pid=6142 comm="syz.1.44" path="socket:[9814]" dev="sockfs" ino=9814 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 57.542437][ T40] audit: type=1400 audit(1772365198.174:195): avc: denied { create } for pid=6142 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.554482][ T40] audit: type=1400 audit(1772365198.174:196): avc: denied { setopt } for pid=6142 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.614576][ T6151] netlink: 'syz.0.46': attribute type 7 has an invalid length. [ 57.617343][ T6151] netlink: 'syz.0.46': attribute type 8 has an invalid length. [ 57.624726][ T40] audit: type=1400 audit(1772365198.274:197): avc: denied { read write } for pid=6150 comm="syz.0.46" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 57.626248][ T6153] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 57.632373][ T40] audit: type=1400 audit(1772365198.274:198): avc: denied { open } for pid=6150 comm="syz.0.46" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 57.650153][ T40] audit: type=1400 audit(1772365198.284:199): avc: denied { write } for pid=6152 comm="syz.1.47" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.652153][ T6153] capability: warning: `syz.1.47' uses deprecated v2 capabilities in a way that may be insecure [ 57.679497][ T40] audit: type=1400 audit(1772365198.324:200): avc: denied { ioctl } for pid=6150 comm="syz.0.46" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 57.687538][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.705163][ T40] audit: type=1400 audit(1772365198.354:201): avc: denied { read write } for pid=6152 comm="syz.1.47" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 57.716088][ T40] audit: type=1400 audit(1772365198.354:202): avc: denied { open } for pid=6152 comm="syz.1.47" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 58.033836][ T6169] ======================================================= [ 58.033836][ T6169] WARNING: The mand mount option has been deprecated and [ 58.033836][ T6169] and is ignored by this kernel. Remove the mand [ 58.033836][ T6169] option from the mount to silence this warning. [ 58.033836][ T6169] ======================================================= [ 58.125837][ T6169] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 58.129234][ T6169] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 58.179652][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6181 comm=syz.3.55 [ 58.183994][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6181 comm=syz.3.55 [ 58.191288][ T6181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 58.194910][ T6182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6182 comm=syz.3.55 [ 58.196534][ T6181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6181 comm=syz.3.55 [ 58.280195][ T6020] usb 8-1: Service connection timeout for: 256 [ 58.282994][ T6020] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 58.288075][ T6020] ath9k_htc: Failed to initialize the device [ 58.291401][ T5989] usb 8-1: ath9k_htc: USB layer deinitialized [ 58.519075][ T6188] dummy0: entered allmulticast mode [ 58.523146][ T6187] dummy0: left allmulticast mode [ 58.770718][ T5285] Bluetooth: hci0: command tx timeout [ 58.807550][ T1341] cfg80211: failed to load regulatory.db [ 58.840292][ T5285] Bluetooth: hci3: command tx timeout [ 58.850610][ T5285] Bluetooth: hci2: command tx timeout [ 58.852440][ T5285] Bluetooth: hci1: command tx timeout [ 58.900216][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.969944][ T6209] overlay: Unknown parameter '/' [ 58.977439][ T6207] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 58.981452][ T6207] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 58.984643][ T6207] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.64'. [ 59.053882][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 59.071007][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 59.083246][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.086870][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 59.093356][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 59.105505][ T10] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 59.108374][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.120091][ T10] usb 5-1: Product: syz [ 59.121515][ T10] usb 5-1: Manufacturer: syz [ 59.123015][ T10] usb 5-1: SerialNumber: syz [ 59.126673][ T10] usb 5-1: config 0 descriptor?? [ 59.169021][ T6219] netlink: 'syz.3.69': attribute type 2 has an invalid length. [ 59.173063][ T6219] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.175881][ T6219] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 59.190149][ T10] rc_core: IR keymap rc-streamzap not found [ 59.192180][ T10] Registered IR keymap rc-empty [ 59.194738][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 59.199184][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 59.216308][ T6227] netlink: 'syz.2.70': attribute type 21 has an invalid length. [ 59.219201][ T6227] netlink: 156 bytes leftover after parsing attributes in process `syz.2.70'. [ 59.248741][ T6227] XFS (nullb0): Invalid superblock magic number [ 59.337570][ T10] usb 5-1: USB disconnect, device number 2 [ 59.459059][ T6243] kvm: emulating exchange as write [ 59.565869][ T6246] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 59.988043][ T6281] random: crng reseeded on system resumption [ 60.234015][ T6295] gretap1: entered promiscuous mode [ 60.256083][ T6295] Cannot find del_set index 4 as target [ 60.321584][ T6300] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 60.324107][ T6300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.850196][ T5930] Bluetooth: hci0: command tx timeout [ 60.930690][ T5930] Bluetooth: hci1: command tx timeout [ 60.933790][ T5930] Bluetooth: hci2: command tx timeout [ 60.936101][ T5930] Bluetooth: hci3: command tx timeout [ 61.126457][ T6308] binder: 6307:6308 ioctl c0306201 200000000440 returned -14 [ 61.241083][ T6324] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 61.352059][ T6338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 61.354294][ T6338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.357511][ T6338] vhci_hcd vhci_hcd.0: Device attached [ 61.359812][ T6339] vhci_hcd: cannot find the pending unlink 1023 [ 61.412652][ T6329] bond1: Unable to set down delay as MII monitoring is disabled [ 61.418233][ T6329] bond1 (unregistering): Released all slaves [ 61.448125][ T6344] netlink: 'syz.1.106': attribute type 2 has an invalid length. [ 61.451948][ T6344] __nla_validate_parse: 4 callbacks suppressed [ 61.451961][ T6344] netlink: 46 bytes leftover after parsing attributes in process `syz.1.106'. [ 61.525561][ T6354] warning: `syz.2.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.554044][ T6357] capability: warning: `syz.1.110' uses 32-bit capabilities (legacy support in use) [ 61.590213][ T10] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 62.682192][ T6339] vhci_hcd: connection reset by peer [ 62.684737][ T6337] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.687080][ T6337] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.692056][ T13] vhci_hcd vhci_hcd.0: stop threads [ 62.694168][ T13] vhci_hcd vhci_hcd.0: release socket [ 62.697808][ T6337] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.700646][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 62.704643][ T6337] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.707392][ T6337] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.711278][ T6337] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.717928][ T6337] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.721575][ T6337] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.726337][ T6337] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.729754][ T6337] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.732759][ T6337] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.736005][ T6337] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.780108][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 62.780124][ T40] audit: type=1400 audit(1772365203.424:300): avc: denied { append } for pid=6370 comm="syz.0.113" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.801090][ T40] audit: type=1400 audit(1772365203.454:301): avc: denied { open } for pid=6372 comm="syz.3.115" path="/dev/ttyqb" dev="devtmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 62.849058][ T40] audit: type=1400 audit(1772365203.494:302): avc: denied { read } for pid=6383 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.855598][ T40] audit: type=1400 audit(1772365203.494:303): avc: denied { getopt } for pid=6384 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.886583][ T6388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.119'. [ 62.902209][ T40] audit: type=1400 audit(1772365203.554:304): avc: denied { write } for pid=6383 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.911546][ T40] audit: type=1400 audit(1772365203.564:305): avc: denied { ioctl } for pid=6383 comm="syz.3.118" path="socket:[10875]" dev="sockfs" ino=10875 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.948371][ T6398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=6398 comm=syz.1.122 [ 62.957666][ T40] audit: type=1400 audit(1772365203.604:306): avc: denied { mounton } for pid=6389 comm="syz.0.120" path="/file0" dev="ramfs" ino=11563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 63.011293][ T6404] netlink: 32 bytes leftover after parsing attributes in process `syz.1.123'. [ 63.015055][ T40] audit: type=1400 audit(1772365203.664:307): avc: denied { validate_trans } for pid=6402 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.025618][ T40] audit: type=1400 audit(1772365203.674:308): avc: denied { ioctl } for pid=6405 comm="syz.0.124" path="socket:[12342]" dev="sockfs" ino=12342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.078187][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 63.083499][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 63.136841][ T6414] trusted_key: encrypted_key: master key parameter '' is invalid [ 63.150330][ T6406] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 63.180171][ T6424] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 63.181462][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.118'. [ 63.182813][ T6423] binder: Binderfs stats mode cannot be changed during a remount [ 63.184398][ T40] audit: type=1400 audit(1772365203.834:309): avc: denied { remount } for pid=6422 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.204732][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 63.293818][ T6432] input: syz1 as /devices/virtual/input/input7 [ 63.473140][ T6455] block device autoloading is deprecated and will be removed. [ 63.480181][ T5285] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.500228][ T6445] sp0: Synchronizing with TNC [ 63.790315][ T54] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 63.940143][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 63.943515][ T54] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 63.946245][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.949387][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.953443][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.956645][ T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.960940][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.964667][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.172635][ T54] usb 8-1: GET_CAPABILITIES returned 0 [ 64.175087][ T54] usbtmc 8-1:16.0: can't read capabilities [ 64.373406][ T6445] netlink: 36 bytes leftover after parsing attributes in process `syz.3.136'. [ 64.383124][ T54] usb 8-1: USB disconnect, device number 3 [ 64.559238][ T6493] EXT4-fs (nbd0): unable to read superblock [ 64.606661][ T6497] usb usb8: usbfs: process 6497 (syz.0.152) did not claim interface 0 before use [ 64.656781][ T6497] syzkaller0: entered promiscuous mode [ 64.658679][ T6497] syzkaller0: entered allmulticast mode [ 64.760317][ T5285] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.760348][ T5930] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.760420][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.810166][ T6184] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 64.976916][ T6184] usb 6-1: no configurations [ 64.978953][ T6184] usb 6-1: can't read configurations, error -22 [ 65.040121][ T6007] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 65.110144][ T6184] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.170151][ T6007] usb 7-1: device descriptor read/64, error -71 [ 65.270690][ T6184] usb 6-1: no configurations [ 65.273045][ T6184] usb 6-1: can't read configurations, error -22 [ 65.276174][ T6184] usb usb6-port1: attempt power cycle [ 65.420179][ T6007] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 65.549458][ T6518] netlink: 72 bytes leftover after parsing attributes in process `syz.0.156'. [ 65.560493][ T6007] usb 7-1: device descriptor read/64, error -71 [ 65.562131][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.618476][ T6521] bridge2: entered promiscuous mode [ 65.622204][ T6184] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.653260][ T6184] usb 6-1: no configurations [ 65.655175][ T6184] usb 6-1: can't read configurations, error -22 [ 65.673862][ T6007] usb usb7-port1: attempt power cycle [ 65.681910][ T6530] fuse: Unknown parameter 'Z0x0000000000000006' [ 65.790207][ T6184] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.811063][ T6184] usb 6-1: no configurations [ 65.812953][ T6184] usb 6-1: can't read configurations, error -22 [ 65.815842][ T6184] usb usb6-port1: unable to enumerate USB device [ 66.021017][ T6007] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 66.048961][ T6547] befs: (nbd0): unable to read superblock [ 66.060512][ T6007] usb 7-1: device descriptor read/8, error -71 [ 66.147148][ T6554] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.265171][ T6559] input: syz1 as /devices/virtual/input/input8 [ 66.330183][ T6007] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 66.361741][ T6007] usb 7-1: device descriptor read/8, error -71 [ 66.482063][ T6007] usb usb7-port1: unable to enumerate USB device [ 66.670165][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 66.841902][ T5930] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.842457][ T5285] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.850456][ T5285] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.132243][ T6576] validate_nla: 2 callbacks suppressed [ 67.132255][ T6576] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 67.201326][ T6582] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 67.208399][ T6582] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 67.216467][ T6583] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 67.264603][ T6590] tipc: Started in network mode [ 67.266729][ T6590] tipc: Node identity 080000000000000024, cluster identity 4711 [ 67.273059][ T6590] input: syz1 as /devices/virtual/input/input9 [ 67.338202][ T6595] misc userio: No port type given on /dev/userio [ 67.341507][ T6595] misc userio: The device must be registered before sending interrupts [ 67.606091][ T6612] Invalid source name [ 67.607541][ T6612] UBIFS error (pid: 6612): cannot open "ubifs", error -22 [ 67.618882][ T6612] FAT-fs (sr0): bogus number of reserved sectors [ 67.624728][ T6612] FAT-fs (sr0): Can't find a valid FAT filesystem [ 67.641111][ T5285] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.750805][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 67.813547][ T6624] input: syz1 as /devices/virtual/input/input11 [ 67.850115][ T10] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 67.923952][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 67.923965][ T40] audit: type=1400 audit(1772365208.574:367): avc: denied { read write } for pid=6631 comm="syz.1.190" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.934318][ T40] audit: type=1400 audit(1772365208.574:368): avc: denied { open } for pid=6631 comm="syz.1.190" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.963774][ T40] audit: type=1400 audit(1772365208.614:369): avc: denied { ioctl } for pid=6631 comm="syz.1.190" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.010408][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 68.013324][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.017099][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.031897][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.035955][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.051323][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 68.053881][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.058169][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.062693][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.066688][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.071808][ T10] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 68.074509][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.078407][ T10] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.082471][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.086766][ T10] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.095937][ T10] usb 8-1: string descriptor 0 read error: -22 [ 68.099317][ T10] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 68.109371][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.120512][ T10] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 68.345790][ T40] audit: type=1400 audit(1772365208.994:370): avc: denied { ioctl } for pid=6654 comm="syz.0.197" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.352420][ T6655] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.194'. [ 68.366553][ T6655] pimreg3: entered allmulticast mode [ 68.395707][ T40] audit: type=1400 audit(1772365209.044:371): avc: denied { read } for pid=6659 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.396366][ T6660] x_tables: duplicate underflow at hook 1 [ 68.405023][ T40] audit: type=1400 audit(1772365209.044:372): avc: denied { getopt } for pid=6659 comm="syz.0.198" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.418677][ T40] audit: type=1400 audit(1772365209.064:373): avc: denied { accept } for pid=6659 comm="syz.0.198" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.512724][ T40] audit: type=1400 audit(1772365209.164:374): avc: denied { setopt } for pid=6661 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.920203][ T5285] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.920272][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.924935][ T5930] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.996652][ T6665] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 68.999624][ T6665] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.008683][ T6665] vhci_hcd vhci_hcd.0: Device attached [ 69.013884][ T6666] vhci_hcd: unknown pdu 2 [ 69.018476][ T6665] ptrace attach of "/syz-executor exec"[5925] was attempted by "/syz-executor exec"[6665] [ 69.018970][ T60] vhci_hcd vhci_hcd.1: stop threads [ 69.027315][ T60] vhci_hcd vhci_hcd.1: release socket [ 69.029687][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 69.075537][ T6645] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.077674][ T6645] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.079878][ T6645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.082515][ T6645] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.258250][ T6676] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 69.444041][ T6685] input: syz1 as /devices/virtual/input/input12 [ 69.455989][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'. [ 69.621074][ T6694] netlink: 116 bytes leftover after parsing attributes in process `syz.1.209'. [ 69.626657][ T6694] Bluetooth: MGMT ver 1.23 [ 69.668108][ T6696] hub 2-0:1.0: USB hub found [ 69.672168][ T6696] hub 2-0:1.0: 2 ports detected [ 69.722437][ T40] audit: type=1400 audit(1772365210.374:375): avc: denied { getopt } for pid=6701 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.771718][ T6705] syzkaller0: entered promiscuous mode [ 69.772445][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.214'. [ 69.774198][ T6705] syzkaller0: entered allmulticast mode [ 69.818789][ T6704] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 69.892517][ T6710] tipc: Failed to obtain node identity [ 69.894561][ T6710] tipc: Enabling of bearer rejected, failed to enable media [ 69.899170][ T6710] xt_hashlimit: invalid rate [ 69.926986][ T6714] netlink: 'syz.1.216': attribute type 29 has an invalid length. [ 69.931174][ T6714] netlink: 'syz.1.216': attribute type 29 has an invalid length. [ 69.935766][ T6714] netlink: 'syz.1.216': attribute type 39 has an invalid length. [ 69.939080][ T40] audit: type=1400 audit(1772365210.584:376): avc: denied { bind } for pid=6713 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.053763][ T6719] smb3: Unknown parameter 'rdma/uinput' [ 70.058294][ T6719] input: syz1 as /devices/virtual/input/input13 [ 70.360215][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.378912][ T6727] syz.0.220 (6727) used obsolete PPPIOCDETACH ioctl [ 70.441636][ T839] usb 8-1: USB disconnect, device number 4 [ 70.535129][ T6733] macvlan2: entered promiscuous mode [ 70.636456][ T6744] input: syz0 as /devices/virtual/input/input15 [ 70.700350][ T6746] block nbd0: Device being setup by another task [ 70.705784][ T6736] block nbd0: shutting down sockets [ 70.759550][ T6751] Zero length message leads to an empty skb [ 70.848338][ T6760] input: syz1 as /devices/virtual/input/input16 [ 70.889563][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'. [ 71.026515][ T6770] netlink: 'syz.1.233': attribute type 4 has an invalid length. [ 71.038781][ T6770] netlink: 'syz.1.233': attribute type 4 has an invalid length. [ 71.080203][ T5930] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.082281][ T5930] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.170128][ T5935] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.254442][ T6800] input: syz1 as /devices/virtual/input/input17 [ 72.270190][ T6850] input: syz1 as /devices/virtual/input/input18 [ 72.281683][ T6850] Bluetooth: MGMT ver 1.23 [ 73.218288][ T5935] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 73.247357][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 73.247372][ T40] audit: type=1400 audit(1772365213.894:404): avc: denied { ioctl } for pid=6864 comm="syz.0.256" path="socket:[13185]" dev="sockfs" ino=13185 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.386488][ T40] audit: type=1400 audit(1772365214.034:405): avc: denied { write } for pid=6873 comm="syz.0.258" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.388300][ T6874] program syz.0.258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.399882][ T6874] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 73.406936][ T40] audit: type=1400 audit(1772365214.054:406): avc: denied { relabelto } for pid=6873 comm="syz.0.258" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 73.417194][ T40] audit: type=1400 audit(1772365214.054:407): avc: denied { associate } for pid=6873 comm="syz.0.258" name="sg0" dev="devtmpfs" ino=721 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_log_t:s0" [ 73.435147][ T40] audit: type=1400 audit(1772365214.084:408): avc: denied { write } for pid=6876 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.466351][ T40] audit: type=1400 audit(1772365214.114:409): avc: denied { create } for pid=6878 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 73.485540][ T40] audit: type=1400 audit(1772365214.134:410): avc: denied { read } for pid=6878 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.497454][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.260'. [ 73.502996][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 73.508284][ T6879] netlink: 7 bytes leftover after parsing attributes in process `syz.0.260'. [ 73.588192][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 73.720087][ T40] audit: type=1400 audit(1772365214.364:411): avc: denied { read write } for pid=6892 comm="syz.0.264" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 73.727934][ T40] audit: type=1400 audit(1772365214.364:412): avc: denied { open } for pid=6892 comm="syz.0.264" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 74.381376][ T6808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.563589][ T40] audit: type=1400 audit(1772365215.214:413): avc: denied { ioctl } for pid=6908 comm="syz.1.269" path="socket:[14241]" dev="sockfs" ino=14241 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.574873][ T6909] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.269'. [ 74.584728][ T6909] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.639732][ T6912] serio: Serial port pty20 [ 75.001875][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 75.083394][ T6964] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 75.129496][ T6970] fuse: Unknown parameter 'group_id}00000000000000000000' [ 75.286173][ T6966] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 75.370171][ T839] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.437509][ T6983] 9pnet_fd: p9_fd_create_unix (6983): problem connecting socket: ./file0: -111 [ 75.487526][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 75.822371][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 76.120000][ T7010] macvlan0: entered allmulticast mode [ 76.122663][ T7010] veth1_vlan: entered allmulticast mode [ 76.128311][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 76.133628][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 76.138504][ T7010] pim6reg: entered allmulticast mode [ 76.446510][ T7021] kAFS: unparsable volume name [ 76.451923][ T7021] xt_hashlimit: size too large, truncated to 1048576 [ 76.455234][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.457981][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.506464][ T7023] kAFS: unable to lookup cell '(,cL' [ 76.565432][ T7026] block nbd0: not configured, cannot reconfigure [ 76.570143][ T7027] block nbd0: not configured, cannot reconfigure [ 76.780404][ T5935] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 77.050267][ T54] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 77.190943][ T54] usb 5-1: device descriptor read/64, error -71 [ 77.430185][ T54] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 77.560280][ T54] usb 5-1: device descriptor read/64, error -71 [ 77.680477][ T54] usb usb5-port1: attempt power cycle [ 78.030204][ T54] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 78.051433][ T54] usb 5-1: device descriptor read/8, error -71 [ 78.223835][ T7062] FAULT_INJECTION: forcing a failure. [ 78.223835][ T7062] name failslab, interval 1, probability 0, space 0, times 1 [ 78.228106][ T7062] CPU: 3 UID: 0 PID: 7062 Comm: syz.3.316 Not tainted syzkaller #0 PREEMPT(full) [ 78.228122][ T7062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.228128][ T7062] Call Trace: [ 78.228133][ T7062] [ 78.228138][ T7062] dump_stack_lvl+0x100/0x190 [ 78.228161][ T7062] should_fail_ex.cold+0x5/0xa [ 78.228176][ T7062] should_failslab+0xc2/0x120 [ 78.228194][ T7062] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 78.228209][ T7062] ? alloc_empty_file+0x55/0x1c0 [ 78.228225][ T7062] alloc_empty_file+0x55/0x1c0 [ 78.228238][ T7062] alloc_file_pseudo+0x13a/0x230 [ 78.228253][ T7062] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 78.228266][ T7062] ? inode_init_always_gfp+0xd0e/0x1040 [ 78.228281][ T7062] sock_alloc_file+0x50/0x210 [ 78.228294][ T7062] do_accept+0x242/0x530 [ 78.228310][ T7062] ? do_raw_spin_lock+0x128/0x260 [ 78.228323][ T7062] ? __pfx_do_accept+0x10/0x10 [ 78.228347][ T7062] __sys_accept4+0x108/0x200 [ 78.228364][ T7062] ? __pfx___sys_accept4+0x10/0x10 [ 78.228380][ T7062] ? ksys_write+0x1ac/0x250 [ 78.228396][ T7062] ? __pfx_ksys_write+0x10/0x10 [ 78.228415][ T7062] __x64_sys_accept+0x74/0xb0 [ 78.228431][ T7062] ? lockdep_hardirqs_on+0x78/0x100 [ 78.228443][ T7062] do_syscall_64+0x106/0xf80 [ 78.228454][ T7062] ? clear_bhb_loop+0x40/0x90 [ 78.228468][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.228479][ T7062] RIP: 0033:0x7f613b19c799 [ 78.228488][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.228498][ T7062] RSP: 002b:00007f613bfc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 78.228509][ T7062] RAX: ffffffffffffffda RBX: 00007f613b415fa0 RCX: 00007f613b19c799 [ 78.228515][ T7062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 78.228521][ T7062] RBP: 00007f613bfc8090 R08: 0000000000000000 R09: 0000000000000000 [ 78.228527][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.228533][ T7062] R13: 00007f613b416038 R14: 00007f613b415fa0 R15: 00007ffe780e27a8 [ 78.228547][ T7062] [ 78.333276][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 78.333294][ T40] audit: type=1400 audit(1772365218.984:434): avc: denied { accept } for pid=7064 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 78.344913][ T40] audit: type=1400 audit(1772365218.984:435): avc: denied { ioctl } for pid=7064 comm="syz.3.317" path="socket:[16515]" dev="sockfs" ino=16515 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.370185][ T54] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 78.390635][ T54] usb 5-1: device descriptor read/8, error -71 [ 78.510634][ T54] usb usb5-port1: unable to enumerate USB device [ 78.536801][ T7073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.620144][ T7076] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 78.666511][ T40] audit: type=1400 audit(1772365219.314:436): avc: denied { read } for pid=7077 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.709796][ T40] audit: type=1400 audit(1772365219.354:437): avc: denied { ioctl } for pid=7077 comm="syz.2.323" path="socket:[14815]" dev="sockfs" ino=14815 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.740332][ T6020] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 78.827525][ T7083] FAULT_INJECTION: forcing a failure. [ 78.827525][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 78.833331][ T7083] CPU: 3 UID: 0 PID: 7083 Comm: syz.2.325 Not tainted syzkaller #0 PREEMPT(full) [ 78.833350][ T7083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.833356][ T7083] Call Trace: [ 78.833362][ T7083] [ 78.833367][ T7083] dump_stack_lvl+0x100/0x190 [ 78.833389][ T7083] should_fail_ex.cold+0x5/0xa [ 78.833404][ T7083] should_failslab+0xc2/0x120 [ 78.833423][ T7083] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 78.833438][ T7083] ? security_file_alloc+0x34/0x2c0 [ 78.833461][ T7083] ? trace_kmem_cache_alloc+0xf3/0x120 [ 78.833473][ T7083] security_file_alloc+0x34/0x2c0 [ 78.833487][ T7083] init_file+0x95/0x480 [ 78.833500][ T7083] alloc_empty_file+0x73/0x1c0 [ 78.833517][ T7083] alloc_file_pseudo+0x13a/0x230 [ 78.833534][ T7083] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 78.833547][ T7083] ? inode_init_always_gfp+0xd0e/0x1040 [ 78.833563][ T7083] sock_alloc_file+0x50/0x210 [ 78.833576][ T7083] do_accept+0x242/0x530 [ 78.833592][ T7083] ? do_raw_spin_lock+0x128/0x260 [ 78.833605][ T7083] ? __pfx_do_accept+0x10/0x10 [ 78.833630][ T7083] __sys_accept4+0x108/0x200 [ 78.833647][ T7083] ? __pfx___sys_accept4+0x10/0x10 [ 78.833662][ T7083] ? ksys_write+0x1ac/0x250 [ 78.833679][ T7083] ? __pfx_ksys_write+0x10/0x10 [ 78.833698][ T7083] __x64_sys_accept+0x74/0xb0 [ 78.833714][ T7083] ? lockdep_hardirqs_on+0x78/0x100 [ 78.833726][ T7083] do_syscall_64+0x106/0xf80 [ 78.833737][ T7083] ? clear_bhb_loop+0x40/0x90 [ 78.833750][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.833761][ T7083] RIP: 0033:0x7ff10199c799 [ 78.833771][ T7083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.833781][ T7083] RSP: 002b:00007ff0ffbee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 78.833794][ T7083] RAX: ffffffffffffffda RBX: 00007ff101c15fa0 RCX: 00007ff10199c799 [ 78.833800][ T7083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 78.833812][ T7083] RBP: 00007ff0ffbee090 R08: 0000000000000000 R09: 0000000000000000 [ 78.833820][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.833830][ T7083] R13: 00007ff101c16038 R14: 00007ff101c15fa0 R15: 00007ffc27731a88 [ 78.833851][ T7083] [ 78.901445][ T6020] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 78.928283][ T6020] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.933375][ T6020] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.937594][ T6020] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 78.942510][ T6020] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 78.949140][ T6020] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 78.953617][ T6020] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 78.957184][ T6020] usb 8-1: Product: syz [ 78.959343][ T6020] usb 8-1: Manufacturer: syz [ 78.968361][ T6020] cdc_wdm 8-1:1.0: skipping garbage [ 78.970881][ T6020] cdc_wdm 8-1:1.0: skipping garbage [ 78.975679][ T40] audit: type=1400 audit(1772365219.624:438): avc: denied { append } for pid=7088 comm="syz.2.327" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.982100][ T6020] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 78.983883][ T40] audit: type=1400 audit(1772365219.634:439): avc: denied { mount } for pid=7088 comm="syz.2.327" name="/" dev="autofs" ino=15681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 78.987394][ T6020] cdc_wdm 8-1:1.0: Unknown control protocol [ 79.012682][ T40] audit: type=1400 audit(1772365219.664:440): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 79.090708][ T7097] __nla_validate_parse: 5 callbacks suppressed [ 79.090720][ T7097] netlink: 176 bytes leftover after parsing attributes in process `syz.2.329'. [ 79.095817][ T7097] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.098417][ T7097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.101215][ T7097] IPv6: NLM_F_CREATE should be set when creating new route [ 79.107610][ T40] audit: type=1400 audit(1772365219.754:441): avc: denied { append } for pid=7096 comm="syz.2.329" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.137622][ T40] audit: type=1400 audit(1772365219.784:442): avc: denied { read write } for pid=7098 comm="syz.2.330" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 79.139645][ T7099] program syz.2.330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.147932][ T40] audit: type=1400 audit(1772365219.784:443): avc: denied { open } for pid=7098 comm="syz.2.330" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 79.216064][ T7102] futex_wake_op: syz.2.330 tries to shift op by 32; fix this program [ 79.784008][ T6184] usb 8-1: USB disconnect, device number 5 [ 79.824501][ T7113] syz.0.333 uses obsolete (PF_INET,SOCK_PACKET) [ 80.214243][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 80.219277][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 80.223482][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 80.228243][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 80.368670][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 80.660189][ T6007] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 80.831899][ T6007] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 45693, setting to 1024 [ 80.835623][ T6007] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 80.839916][ T6007] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.850874][ T6007] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 80.855369][ T6007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.860224][ T6007] usb 8-1: Product: syz [ 80.862797][ T6007] usb 8-1: Manufacturer: syz [ 80.865493][ T6007] usb 8-1: SerialNumber: syz [ 80.873915][ T7136] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 80.878450][ T6007] hub 8-1:1.0: bad descriptor, ignoring hub [ 80.880909][ T6007] hub 8-1:1.0: probe with driver hub failed with error -5 [ 81.011810][ T7154] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 81.089026][ T6007] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 81.163573][ T7161] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.167050][ T7161] netlink: 'syz.2.352': attribute type 11 has an invalid length. [ 81.169952][ T7161] netlink: 'syz.2.352': attribute type 11 has an invalid length. [ 81.173273][ T7161] netlink: 224 bytes leftover after parsing attributes in process `syz.2.352'. [ 81.203312][ T7163] input: syz1 as /devices/virtual/input/input19 [ 81.252281][ T7165] sctp: [Deprecated]: syz.1.354 (pid 7165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.252281][ T7165] Use struct sctp_sack_info instead [ 81.288453][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 81.292529][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'. [ 81.410805][ T39] usb 8-1: USB disconnect, device number 6 [ 81.415520][ T39] usblp0: removed [ 81.589894][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 81.953388][ T7192] syzkaller0: entered promiscuous mode [ 81.955289][ T7192] syzkaller0: entered allmulticast mode [ 82.008543][ T7146] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 82.086482][ T7203] bridge_slave_0: invalid flags given to default FDB implementation [ 82.089846][ T5935] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 82.207086][ T7217] input: syz1 as /devices/virtual/input/input20 [ 82.416082][ T7231] 9p: Bad value for 'wfdno' [ 82.447726][ T7231] 9p: Bad value for 'rfdno' [ 82.490113][ T54] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 82.730643][ T54] usb 5-1: device descriptor read/64, error -71 [ 82.965807][ T7245] netlink: 'syz.2.376': attribute type 4 has an invalid length. [ 82.970123][ T54] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.105501][ T54] usb 5-1: device descriptor read/64, error -71 [ 83.220268][ T54] usb usb5-port1: attempt power cycle [ 83.571420][ T54] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 83.592238][ T54] usb 5-1: device descriptor read/8, error -71 [ 83.840103][ T54] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.863748][ T54] usb 5-1: device descriptor read/8, error -71 [ 83.945744][ T7296] bridge_slave_1: default FDB implementation only supports local addresses [ 83.970358][ T54] usb usb5-port1: unable to enumerate USB device [ 84.141954][ T7305] __nla_validate_parse: 3 callbacks suppressed [ 84.141966][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 84.195598][ T7307] input: syz1 as /devices/virtual/input/input21 [ 84.332763][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 84.332780][ T40] audit: type=1400 audit(1772365224.984:462): avc: denied { bind } for pid=7317 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.477189][ T1192] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.525852][ T40] audit: type=1400 audit(1772365225.174:463): avc: denied { accept } for pid=7323 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 84.609932][ T40] audit: type=1400 audit(1772365225.254:464): avc: denied { name_bind } for pid=7326 comm="syz.2.389" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 84.630215][ T40] audit: type=1400 audit(1772365225.264:465): avc: denied { append } for pid=7323 comm="syz.3.388" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.700076][ T40] audit: type=1326 audit(1772365225.344:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.3.388" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613b19c799 code=0x7ffc0000 [ 84.707905][ T40] audit: type=1326 audit(1772365225.344:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.3.388" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f613b13db19 code=0x7ffc0000 [ 84.714897][ T7331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 84.720200][ T40] audit: type=1326 audit(1772365225.344:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.3.388" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613b19c799 code=0x7ffc0000 [ 84.727508][ T40] audit: type=1326 audit(1772365225.344:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.3.388" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f613b13db19 code=0x7ffc0000 [ 84.740229][ T40] audit: type=1326 audit(1772365225.344:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.3.388" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f613b13db19 code=0x7ffc0000 [ 84.749561][ T40] audit: type=1326 audit(1772365225.344:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7323 comm="syz.3.388" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f613b13db19 code=0x7ffc0000 [ 84.859599][ T7335] syzkaller1: entered promiscuous mode [ 84.863341][ T7335] syzkaller1: entered allmulticast mode [ 84.880514][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 84.939211][ T7338] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 85.021207][ T7345] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 85.023568][ T7345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.027652][ T7345] vhci_hcd vhci_hcd.0: Device attached [ 85.035155][ T7345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'. [ 85.043510][ T7345] unsupported nla_type 4111 [ 85.046643][ T7345] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(3) [ 85.049028][ T7345] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.053310][ T7345] vhci_hcd vhci_hcd.0: Device attached [ 85.055825][ T7350] vhci_hcd: connection closed [ 85.057213][ T153] vhci_hcd vhci_hcd.2: stop threads [ 85.062692][ T153] vhci_hcd vhci_hcd.2: release socket [ 85.064549][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 85.066522][ T7346] vhci_hcd: connection closed [ 85.066848][ T153] vhci_hcd vhci_hcd.2: stop threads [ 85.070940][ T153] vhci_hcd vhci_hcd.2: release socket [ 85.072901][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 85.220279][ T7359] input: syz1 as /devices/virtual/input/input22 [ 85.517790][ T7387] input: syz1 as /devices/virtual/input/input23 [ 85.654482][ T7398] vim2m vim2m.0: vidioc_s_fmt queue busy [ 85.962727][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 85.982443][ T7415] input: syz1 as /devices/virtual/input/input25 [ 86.037697][ T7419] binder: 7418:7419 ioctl c0306201 200000000040 returned -22 [ 86.043646][ T7419] binder: 7418:7419 ioctl c0306201 200000000640 returned -22 [ 86.047138][ T7419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7419 comm=syz.1.418 [ 86.250926][ T7432] program syz.1.422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.520132][ T5935] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.520141][ T5930] Bluetooth: hci4: command 0x1003 tx timeout [ 86.533222][ T7454] input: syz1 as /devices/virtual/input/input26 [ 86.644995][ T39] kernel write not supported for file /audio1 (pid: 39 comm: kworker/2:1) [ 86.686639][ T7459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.745026][ T7467] SELinux: failed to load policy [ 86.983366][ T7477] kvm: kvm [7476]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 86.987197][ T7477] kvm: kvm [7476]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 87.054779][ T7485] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 87.135216][ T7488] syzkaller0: entered promiscuous mode [ 87.137615][ T7488] syzkaller0: entered allmulticast mode [ 87.342470][ T7497] netlink: 'syz.0.443': attribute type 4 has an invalid length. [ 87.583206][ T839] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 87.635780][ T7521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=7521 comm=syz.2.450 [ 87.712984][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.453'. [ 87.742827][ T839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 87.745324][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.749274][ T839] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.753559][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.757410][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 87.765201][ T839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 87.767843][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.772005][ T839] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.776037][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.779914][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 87.785907][ T839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 87.794732][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.798528][ T839] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.803494][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.807225][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 87.813657][ T839] usb 5-1: string descriptor 0 read error: -22 [ 87.815811][ T839] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 87.819200][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.832467][ T839] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 87.857672][ T7546] input: syz1 as /devices/virtual/input/input27 [ 87.909658][ T7551] kvm: user requested TSC rate below hardware speed [ 88.007008][ T7564] netlink: 172 bytes leftover after parsing attributes in process `syz.3.461'. [ 88.169641][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 88.173148][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 88.371048][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 88.750017][ T7601] overlayfs: empty lowerdir [ 88.847685][ T7607] hsr_slave_1 (unregistering): left promiscuous mode [ 88.863448][ T7609] xt_cgroup: invalid path, errno=-2 [ 88.865553][ T7609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=7609 comm=syz.3.473 [ 89.071490][ T7626] 9pnet_virtio: no channels available for device syz [ 89.600190][ T839] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 89.752414][ T839] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.755264][ T839] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 89.758550][ T839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.763156][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 89.768199][ T839] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 89.776512][ T839] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.780956][ T839] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.784730][ T839] usb 6-1: Product: syz [ 89.786648][ T839] usb 6-1: Manufacturer: syz [ 89.795299][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 89.797135][ T839] cdc_wdm 6-1:1.0: skipping garbage [ 89.804085][ T839] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 89.806997][ T839] cdc_wdm 6-1:1.0: Unknown control protocol [ 90.057476][ T40] kauditd_printk_skb: 12334 callbacks suppressed [ 90.057489][ T40] audit: type=1326 audit(1772365230.704:12806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7643 comm="syz.2.485" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff10199c799 code=0x0 [ 90.100193][ T6184] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 90.265715][ T6184] usb 8-1: config 0 has an invalid interface number: 86 but max is 2 [ 90.269642][ T6184] usb 8-1: config 0 has an invalid interface number: 213 but max is 2 [ 90.273560][ T6184] usb 8-1: config 0 has an invalid interface number: 29 but max is 2 [ 90.277221][ T6184] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 90.280793][ T6184] usb 8-1: config 0 has no interface number 0 [ 90.282995][ T6184] usb 8-1: config 0 has no interface number 1 [ 90.285261][ T6184] usb 8-1: config 0 has no interface number 2 [ 90.287728][ T6184] usb 8-1: config 0 interface 86 altsetting 0 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 90.291527][ T6184] usb 8-1: config 0 interface 86 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 90.295206][ T6184] usb 8-1: config 0 interface 86 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 8 [ 90.298886][ T6184] usb 8-1: config 0 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 90.303026][ T6184] usb 8-1: config 0 interface 86 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 90.306820][ T6184] usb 8-1: config 0 interface 86 altsetting 0 endpoint 0x7 has invalid maxpacket 64, setting to 8 [ 90.311824][ T6184] usb 8-1: config 0 interface 86 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 90.316814][ T6184] usb 8-1: config 0 interface 86 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 0 [ 90.322147][ T6184] usb 8-1: config 0 interface 86 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 8 [ 90.327047][ T6184] usb 8-1: config 0 interface 86 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 90.332297][ T6184] usb 8-1: config 0 interface 213 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 90.336986][ T6184] usb 8-1: config 0 interface 213 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 90.340664][ T6184] usb 8-1: config 0 interface 29 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 90.344175][ T6184] usb 8-1: config 0 interface 29 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 90.348767][ T6184] usb 8-1: config 0 interface 29 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 90.353544][ T6184] usb 8-1: config 0 interface 29 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 90.358315][ T6184] usb 8-1: config 0 interface 29 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 90.363422][ T6184] usb 8-1: config 0 interface 29 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 90.368071][ T6184] usb 8-1: config 0 interface 29 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 90.372912][ T6184] usb 8-1: config 0 interface 213 has no altsetting 0 [ 90.375845][ T6184] usb 8-1: config 0 interface 29 has no altsetting 0 [ 90.381060][ T6184] usb 8-1: New USB device found, idVendor=03f0, idProduct=0121, bcdDevice=34.a7 [ 90.384896][ T6184] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.388578][ T6184] usb 8-1: Product: ь [ 90.390640][ T6184] usb 8-1: Manufacturer:  [ 90.392432][ T6184] usb 8-1: SerialNumber: В [ 90.397923][ T6184] usb 8-1: config 0 descriptor?? [ 90.401419][ T7637] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 90.608927][ T7637] __nla_validate_parse: 4 callbacks suppressed [ 90.608987][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 90.620208][ T6184] usb_serial_simple 8-1:0.86: hp4x converter detected [ 90.627022][ T6184] usb 8-1: hp4x converter now attached to ttyUSB0 [ 90.634964][ T6184] usb_serial_simple 8-1:0.213: hp4x converter detected [ 90.640276][ T6184] usb 8-1: hp4x converter now attached to ttyUSB1 [ 90.645630][ T6184] usb_serial_simple 8-1:0.29: hp4x converter detected [ 90.649765][ T6184] usb 8-1: hp4x converter now attached to ttyUSB2 [ 90.657766][ T6184] usb 8-1: USB disconnect, device number 7 [ 90.670504][ T6184] hp4x ttyUSB0: hp4x converter now disconnected from ttyUSB0 [ 90.676785][ T6184] usb_serial_simple 8-1:0.86: device disconnected [ 90.685159][ T6184] hp4x ttyUSB1: hp4x converter now disconnected from ttyUSB1 [ 90.688106][ T6184] usb_serial_simple 8-1:0.213: device disconnected [ 90.692504][ T6184] hp4x ttyUSB2: hp4x converter now disconnected from ttyUSB2 [ 90.696519][ T6184] usb_serial_simple 8-1:0.29: device disconnected [ 91.030374][ T40] audit: type=1400 audit(1772365231.674:12807): avc: denied { view } for pid=7658 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 91.297648][ T7688] netlink: 132 bytes leftover after parsing attributes in process `syz.3.494'. [ 91.338460][ T40] audit: type=1400 audit(1772365231.984:12808): avc: denied { accept } for pid=7692 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.370679][ T40] audit: type=1400 audit(1772365232.024:12809): avc: denied { shutdown } for pid=7696 comm="syz.3.498" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.424957][ T40] audit: type=1400 audit(1772365232.074:12810): avc: denied { name_bind } for pid=7700 comm="syz.3.499" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 91.434686][ T40] audit: type=1400 audit(1772365232.074:12811): avc: denied { listen } for pid=7700 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.441656][ T7701] lo: entered promiscuous mode [ 91.510958][ T7707] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 91.700720][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 92.309343][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 92.354872][ T6020] usb 6-1: USB disconnect, device number 7 [ 92.479917][ T40] audit: type=1400 audit(1772365233.124:12812): avc: denied { map } for pid=7734 comm="syz.2.511" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.488250][ T40] audit: type=1400 audit(1772365233.124:12813): avc: denied { execute } for pid=7734 comm="syz.2.511" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.497027][ T7749] netlink: 'syz.1.516': attribute type 11 has an invalid length. [ 92.501049][ T7749] netlink: 'syz.1.516': attribute type 11 has an invalid length. [ 92.503706][ T7749] netlink: 224 bytes leftover after parsing attributes in process `syz.1.516'. [ 92.510495][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'. [ 92.633385][ T7765] random: crng reseeded on system resumption [ 92.720631][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 92.729367][ T40] audit: type=1400 audit(1772365233.374:12814): avc: denied { nlmsg_tty_audit } for pid=7767 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 92.841547][ T7772] bridge2: entered promiscuous mode [ 92.843224][ T7772] bridge2: entered allmulticast mode [ 92.848409][ T7772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.855049][ T40] audit: type=1400 audit(1772365233.504:12815): avc: denied { watch_mount } for pid=7773 comm="syz.2.524" path="/135" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.855561][ T7774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.524'. [ 92.876912][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 92.879877][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 92.930476][ T7776] FAT-fs (sr0): bogus number of reserved sectors [ 92.933174][ T7776] FAT-fs (sr0): Can't find a valid FAT filesystem [ 93.190660][ T7785] bond1 (unregistering): Released all slaves [ 93.302609][ T34] usb 5-1: USB disconnect, device number 11 [ 93.680236][ T6184] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 93.793149][ T7807] netlink: 'syz.2.537': attribute type 9 has an invalid length. [ 93.831298][ T6184] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.834444][ T6184] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.837498][ T6184] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.860968][ T6184] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 93.863941][ T6184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.866521][ T6184] usb 6-1: Product: syz [ 93.867885][ T6184] usb 6-1: Manufacturer: syz [ 93.869429][ T6184] usb 6-1: SerialNumber: syz [ 93.871856][ T6184] hub 6-1:1.0: bad descriptor, ignoring hub [ 93.871870][ T6184] hub 6-1:1.0: probe with driver hub failed with error -5 [ 93.883577][ T7809] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 93.936810][ T7811] bridge_slave_1: default FDB implementation only supports local addresses [ 94.105420][ T6184] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.130801][ T6184] usb 6-1: USB disconnect, device number 8 [ 94.143468][ T6184] usblp0: removed [ 94.225348][ T7830] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 94.228699][ T7830] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 94.274189][ T7833] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 94.278241][ T7833] exFAT-fs (nullb0): invalid boot record signature [ 94.282613][ T7833] exFAT-fs (nullb0): failed to read boot sector [ 94.284746][ T7833] exFAT-fs (nullb0): failed to recognize exfat type [ 94.337764][ T7805] syz.0.534 (7805) used greatest stack depth: 18264 bytes left [ 94.646562][ T7868] bridge0: entered promiscuous mode [ 94.656383][ T7868] bridge0: left promiscuous mode [ 94.705307][ T7872] bridge0: entered promiscuous mode [ 94.711782][ T7872] bridge0: left promiscuous mode [ 95.360935][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 95.360949][ T40] audit: type=1400 audit(1772365236.014:12822): avc: denied { getopt } for pid=7896 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.413656][ T40] audit: type=1400 audit(1772365236.064:12823): avc: denied { ioctl } for pid=7898 comm="syz.2.559" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 95.424179][ T7899] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 96.060262][ T40] audit: type=1400 audit(1772365236.704:12824): avc: denied { ioctl } for pid=7907 comm="syz.3.563" path="socket:[19330]" dev="sockfs" ino=19330 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 96.237808][ T7911] __nla_validate_parse: 5 callbacks suppressed [ 96.237826][ T7911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.564'. [ 96.253612][ T7911] netlink: 'syz.3.564': attribute type 4 has an invalid length. [ 96.497363][ T7926] ref_ctr increment failed for inode: 0x30b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888030a48c40 [ 96.657062][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 96.662975][ T40] audit: type=1400 audit(1772365237.314:12825): avc: denied { create } for pid=7929 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 96.671418][ T40] audit: type=1400 audit(1772365237.314:12826): avc: denied { ioctl } for pid=7929 comm="syz.3.568" path="socket:[20629]" dev="sockfs" ino=20629 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.717331][ T7931] xt_hashlimit: size too large, truncated to 1048576 [ 97.291166][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 97.358318][ T7948] Device name not specified. [ 97.358318][ T7948] [ 97.441602][ T7958] nfs4: Unknown parameter '' [ 97.897478][ T7885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.961356][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 97.975912][ T7966] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 97.979001][ T7966] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.984301][ T7966] vhci_hcd vhci_hcd.0: Device attached [ 97.984370][ T7976] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.987978][ T7966] program syz.1.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.000272][ T7974] vhci_hcd: connection closed [ 98.000650][ T12] vhci_hcd vhci_hcd.1: stop threads [ 98.003368][ T7976] team0: Device gtp0 is of different type [ 98.004103][ T12] vhci_hcd vhci_hcd.1: release socket [ 98.012226][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 98.129278][ T40] audit: type=1326 audit(1772365238.774:12827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f19c799 code=0x7ffc0000 [ 98.139291][ T40] audit: type=1326 audit(1772365238.774:12828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f19c799 code=0x7ffc0000 [ 98.146881][ T40] audit: type=1326 audit(1772365238.784:12829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f19c799 code=0x7ffc0000 [ 98.154362][ T40] audit: type=1326 audit(1772365238.784:12831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.585" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb2f19c799 code=0x7ffc0000 [ 98.164994][ T40] audit: type=1326 audit(1772365238.784:12830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7985 comm="syz.0.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2f19c799 code=0x7ffc0000 [ 98.220188][ T839] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 98.227716][ T7990] bridge0: port 3(syz_tun) entered blocking state [ 98.230647][ T7990] bridge0: port 3(syz_tun) entered disabled state [ 98.233330][ T7990] syz_tun: entered allmulticast mode [ 98.236246][ T7990] syz_tun: entered promiscuous mode [ 98.239036][ T7990] bridge0: port 3(syz_tun) entered blocking state [ 98.241526][ T7990] bridge0: port 3(syz_tun) entered forwarding state [ 98.247614][ T7990] netlink: 'syz.2.587': attribute type 7 has an invalid length. [ 98.392094][ T839] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 98.396139][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 98.400325][ T839] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 98.406560][ T839] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.410089][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.412706][ T839] usb 8-1: Product: syz [ 98.414196][ T839] usb 8-1: Manufacturer: syz [ 98.415825][ T839] usb 8-1: SerialNumber: syz [ 98.421620][ T839] usb 8-1: config 0 descriptor?? [ 98.426968][ T7970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.626423][ T7999] netlink: 48 bytes leftover after parsing attributes in process `syz.1.591'. [ 98.634649][ T7970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.854581][ T839] usb 8-1: USB disconnect, device number 8 [ 98.988435][ T8013] netlink: 'syz.1.594': attribute type 21 has an invalid length. [ 99.100884][ T8022] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 99.105615][ T8022] SELinux: failed to load policy [ 99.260174][ T839] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 99.413876][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.602'. [ 99.420355][ T839] usb 6-1: Using ep0 maxpacket: 32 [ 99.424362][ T839] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.427126][ T839] usb 6-1: config 0 has no interface number 0 [ 99.433065][ T839] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 99.436456][ T839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.439233][ T839] usb 6-1: Product: syz [ 99.441471][ T839] usb 6-1: Manufacturer: syz [ 99.443025][ T839] usb 6-1: SerialNumber: syz [ 99.450531][ T839] usb 6-1: config 0 descriptor?? [ 99.459926][ T839] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 99.466248][ T839] usb 6-1: selecting invalid altsetting 1 [ 99.468865][ T839] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 99.479799][ T839] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 99.493763][ T839] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 99.497057][ T839] usb 6-1: media controller created [ 99.506794][ T839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.590520][ T8041] netlink: 168 bytes leftover after parsing attributes in process `syz.2.604'. [ 100.020627][ T8050] overlayfs: missing 'workdir' [ 100.568498][ T8055] ip6erspan0: entered promiscuous mode [ 100.601805][ T839] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 100.610348][ T839] zl10353_read_register: readreg error (reg=127, ret==-110) [ 100.621127][ T8047] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 100.646836][ T839] usb 6-1: USB disconnect, device number 9 [ 100.665490][ T8064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=8064 comm=syz.2.610 [ 100.732876][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 101.101076][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 101.252574][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.256586][ T10] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.261196][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.265213][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 101.270143][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 101.276376][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.280755][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.284235][ T10] usb 8-1: Product: syz [ 101.286143][ T10] usb 8-1: Manufacturer: syz [ 101.295067][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 101.297421][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 101.304883][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 101.307716][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 101.357318][ T8083] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 101.451446][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 101.454556][ T8085] bridge_slave_1: left allmulticast mode [ 101.456502][ T8085] bridge_slave_1: left promiscuous mode [ 101.458444][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.464367][ T8085] bridge_slave_0: left allmulticast mode [ 101.466569][ T8085] bridge_slave_0: left promiscuous mode [ 101.468825][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.501620][ T40] kauditd_printk_skb: 5668 callbacks suppressed [ 101.501633][ T40] audit: type=1400 audit(1772365242.154:18500): avc: denied { write } for pid=8086 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.509161][ T8089] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 101.510011][ T8088] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.524625][ T8087] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 101.550320][ T40] audit: type=1400 audit(1772365242.204:18501): avc: denied { unmount } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 101.675563][ T8102] netlink: 'syz.1.623': attribute type 2 has an invalid length. [ 101.680175][ T8102] netlink: 32 bytes leftover after parsing attributes in process `syz.1.623'. [ 101.766292][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 101.810480][ T40] audit: type=1400 audit(1772365242.464:18502): avc: denied { map } for pid=8110 comm="syz.2.627" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.822426][ T40] audit: type=1400 audit(1772365242.464:18503): avc: denied { execute } for pid=8110 comm="syz.2.627" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.900997][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 101.929092][ T8126] netlink: 68 bytes leftover after parsing attributes in process `syz.2.630'. [ 101.983596][ T8132] ufs: You didn't specify the type of your ufs filesystem [ 101.983596][ T8132] [ 101.983596][ T8132] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 101.983596][ T8132] [ 101.983596][ T8132] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 102.002019][ T8132] ufs: failed to set blocksize [ 102.022219][ T40] audit: type=1400 audit(1772365242.674:18504): avc: denied { execute } for pid=8125 comm="syz.2.630" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 102.042212][ T8133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8133 comm=syz.2.630 [ 102.338524][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 102.352520][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.352634][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 102.355597][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.363296][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.366322][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.414321][ T8138] mkiss: ax0: crc mode is auto. [ 102.545632][ T8142] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 102.618786][ T40] audit: type=1400 audit(1772365243.264:18505): avc: denied { nlmsg_write } for pid=8146 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 102.807114][ T40] audit: type=1400 audit(1772365243.454:18506): avc: denied { read } for pid=8155 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.813964][ T40] audit: type=1400 audit(1772365243.454:18507): avc: denied { getopt } for pid=8155 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.908356][ T8167] loop2: detected capacity change from 0 to 14 [ 102.915172][ T8167] Dev loop2: unable to read RDB block 14 [ 102.917797][ T8167] loop2: unable to read partition table [ 102.919918][ T8167] loop2: partition table beyond EOD, truncated [ 102.924982][ T8167] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 102.930984][ T8168] netlink: 185368 bytes leftover after parsing attributes in process `syz.0.640'. [ 103.315220][ T8188] ip6t_srh: unknown srh invflags 4000 [ 103.320555][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.469265][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 103.473986][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 103.478320][ T40] audit: type=1400 audit(1772365244.124:18508): avc: denied { setopt } for pid=8189 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 103.857653][ T6184] usb 8-1: USB disconnect, device number 9 [ 103.881892][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 103.986482][ T40] audit: type=1400 audit(1772365244.634:18509): avc: denied { connect } for pid=8204 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.033935][ T8209] program syz.0.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.045320][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 104.050664][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.060204][ T10] usb 6-1: Product: syz [ 104.062072][ T10] usb 6-1: Manufacturer: syz [ 104.064131][ T10] usb 6-1: SerialNumber: syz [ 104.194862][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.655'. [ 104.359434][ T8233] gfs2: error -5 reading superblock [ 104.411066][ T8235] tmpfs: Bad value for 'mpol' [ 104.461109][ T5619] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 104.489696][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.495849][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.503586][ T8240] can0: slcan on ttyS3. [ 104.505135][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.512729][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.516685][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.520697][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.527779][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 104.536841][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 104.542597][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 104.549358][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 104.555486][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 104.567725][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 104.581412][ T10] usb 6-1: USB disconnect, device number 10 [ 104.592172][ T5933] udevd[5933]: setting owner of /dev/bus/usb/006/010 to uid=0, gid=0 failed: No such file or directory [ 104.631265][ T8240] can0 (unregistered): slcan off ttyS3. [ 104.634803][ T5619] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.638338][ T5619] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.641994][ T5619] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.644964][ T5619] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.650183][ T5619] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.655620][ T5619] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.658515][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.661353][ T5619] usb 5-1: Product: syz [ 104.662733][ T5619] usb 5-1: Manufacturer: syz [ 104.667067][ T5619] cdc_wdm 5-1:1.0: skipping garbage [ 104.669114][ T5619] cdc_wdm 5-1:1.0: skipping garbage [ 104.674153][ T5619] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 104.676632][ T5619] cdc_wdm 5-1:1.0: Unknown control protocol [ 104.717787][ T8256] openvswitch: netlink: Message has 4 unknown bytes. [ 104.720510][ T8256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.740192][ T54] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 104.910085][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 104.914198][ T54] usb 7-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 104.918312][ T54] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.922831][ T54] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.926736][ T54] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.929881][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.948889][ T54] hub 7-1:1.0: bad descriptor, ignoring hub [ 104.950965][ T54] hub 7-1:1.0: probe with driver hub failed with error -5 [ 104.953811][ T54] cdc_wdm 7-1:1.0: skipping garbage [ 104.955609][ T54] cdc_wdm 7-1:1.0: skipping garbage [ 104.957408][ T54] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 105.118007][ T8282] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 105.146922][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.190738][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.194864][ T8238] overlayfs: unescaped trailing colons in lowerdir mount option. [ 105.276079][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 105.311749][ T6184] usb 7-1: USB disconnect, device number 6 [ 105.898762][ T8342] 9p: Bad value for 'wfdno' [ 105.946349][ T8344] netlink: 'syz.2.686': attribute type 4 has an invalid length. [ 106.008630][ T8348] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 106.008630][ T8348] The task syz.2.686 (8348) triggered the difference, watch for misbehavior. [ 106.550286][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 106.701528][ T10] usb 8-1: config 0 has no interfaces? [ 106.705787][ T10] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 106.709514][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.712583][ T10] usb 8-1: Product: syz [ 106.713969][ T10] usb 8-1: Manufacturer: syz [ 106.715569][ T10] usb 8-1: SerialNumber: syz [ 106.718584][ T10] usb 8-1: config 0 descriptor?? [ 106.860718][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 106.860735][ T40] audit: type=1400 audit(1772365247.514:18515): avc: denied { getopt } for pid=8361 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.929297][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.937868][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.948522][ T6184] usb 8-1: USB disconnect, device number 10 [ 106.982641][ T8371] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 107.052385][ T8376] __nla_validate_parse: 8 callbacks suppressed [ 107.052423][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 107.059103][ T40] audit: type=1400 audit(1772365247.704:18516): avc: denied { mounton } for pid=8375 comm="syz.1.697" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 107.060432][ T8376] gfs2: not a GFS2 filesystem [ 107.156670][ T6184] IPVS: starting estimator thread 0... [ 107.239662][ T54] usb 5-1: USB disconnect, device number 12 [ 107.251067][ T8381] IPVS: using max 43 ests per chain, 103200 per kthread [ 107.365179][ T40] audit: type=1400 audit(1772365248.014:18517): avc: denied { ioctl } for pid=8389 comm="syz.0.701" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 107.471531][ T8394] input: syz1 as /devices/virtual/input/input28 [ 107.515955][ T40] audit: type=1400 audit(1772365248.164:18518): avc: denied { create } for pid=8397 comm="syz.0.705" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.569836][ T8405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9695 sclass=netlink_route_socket pid=8405 comm=syz.0.705 [ 107.659092][ T40] audit: type=1400 audit(1772365248.304:18519): avc: denied { mounton } for pid=8409 comm="syz.3.707" path="/171/bus" dev="tmpfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 107.742744][ T8417] netlink: 168 bytes leftover after parsing attributes in process `syz.3.708'. [ 107.924014][ T8439] netlink: 32 bytes leftover after parsing attributes in process `syz.3.714'. [ 107.927188][ T8439] netlink: 32 bytes leftover after parsing attributes in process `syz.3.714'. [ 107.998634][ T40] audit: type=1400 audit(1772365248.644:18520): avc: denied { bind } for pid=8444 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.082290][ T40] audit: type=1400 audit(1772365248.734:18521): avc: denied { accept } for pid=8456 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.185853][ T8477] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.189199][ T40] audit: type=1400 audit(1772365248.834:18522): avc: denied { append } for pid=8457 comm="syz.3.721" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.213345][ T40] audit: type=1400 audit(1772365248.864:18523): avc: denied { write } for pid=8469 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 108.235045][ T1192] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 108.241810][ T8482] team_slave_0: entered promiscuous mode [ 108.243987][ T8482] team_slave_1: entered promiscuous mode [ 108.249213][ T8482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.254543][ T8473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.365352][ T40] audit: type=1400 audit(1772365249.014:18524): avc: denied { unlink } for pid=5924 comm="syz-executor" name="file0" dev="tmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.454117][ T8495] netlink: 'syz.0.730': attribute type 9 has an invalid length. [ 108.489915][ T8498] tmpfs: Unknown parameter 'grpquotal' [ 108.859223][ T8536] macvlan0: entered allmulticast mode [ 108.862594][ T8536] veth1_vlan: entered allmulticast mode [ 108.866988][ T8537] macvlan0: left allmulticast mode [ 108.869236][ T8537] veth1_vlan: left allmulticast mode [ 108.959717][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.746'. [ 109.006142][ T8552] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 109.020900][ T8552] bond1: entered promiscuous mode [ 109.022927][ T8552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.093400][ T8554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.095779][ T8554] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 109.099083][ T8554] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 109.106231][ T8554] bond1: (slave vti0): making interface the new active one [ 109.108734][ T8554] vti0: entered promiscuous mode [ 109.112661][ T8554] bond1: (slave vti0): Enslaving as an active interface with an up link [ 109.205482][ T8563] bond1: (slave bond_slave_1): Device is not our slave [ 109.207966][ T8563] bond1: option active_slave: invalid value (bond_slave_1) [ 109.214328][ T8563] bond1 (unregistering): Released all slaves [ 109.287649][ T8566] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 109.336398][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.338625][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.341355][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.343497][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.345663][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.347914][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.350709][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.353248][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.355530][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.357718][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.359853][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.362236][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.364361][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.366574][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.368750][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.370993][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.373041][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.375207][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.377471][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.379814][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.382192][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.384579][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.386935][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.389094][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.391395][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.393957][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.396139][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.398256][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.400628][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.402783][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.404928][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.407112][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.409269][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.411496][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.413766][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.415937][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.418138][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.420431][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.422597][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.424752][ T8567] binder: 8565:8567 ioctl c0c89425 0 returned -22 [ 109.676783][ T8581] lo: left promiscuous mode [ 110.131892][ T8598] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 110.134725][ T8598] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 110.544913][ T8615] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 110.548686][ T8614] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 110.554505][ T8614] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 110.584226][ T6184] IPVS: starting estimator thread 0... [ 110.611434][ T8622] dlm: no locking on control device [ 110.653516][ T8623] IPVS: sh: FWM 3 0x00000003 - no destination available [ 110.691672][ T8619] IPVS: using max 43 ests per chain, 103200 per kthread [ 110.694918][ T8625] bond2: Unable to set up delay as MII monitoring is disabled [ 110.699746][ T8625] bond2 (unregistering): Released all slaves [ 110.818375][ T8632] FAULT_INJECTION: forcing a failure. [ 110.818375][ T8632] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.823841][ T8632] CPU: 2 UID: 0 PID: 8632 Comm: syz.3.771 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.823870][ T8632] Tainted: [L]=SOFTLOCKUP [ 110.823875][ T8632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.823884][ T8632] Call Trace: [ 110.823889][ T8632] [ 110.823894][ T8632] dump_stack_lvl+0x100/0x190 [ 110.823926][ T8632] should_fail_ex.cold+0x5/0xa [ 110.823941][ T8632] _copy_from_iter+0x1f4/0x1690 [ 110.823965][ T8632] ? __asan_memset+0x23/0x50 [ 110.823981][ T8632] ? __pfx__copy_from_iter+0x10/0x10 [ 110.823997][ T8632] ? __pfx___alloc_skb+0x10/0x10 [ 110.824018][ T8632] netlink_sendmsg+0x808/0xda0 [ 110.824035][ T8632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.824048][ T8632] ? __might_fault+0xc0/0x140 [ 110.824069][ T8632] ____sys_sendmsg+0xa54/0xc30 [ 110.824085][ T8632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.824113][ T8632] ___sys_sendmsg+0x190/0x1e0 [ 110.824138][ T8632] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.824192][ T8632] __sys_sendmsg+0x170/0x220 [ 110.824213][ T8632] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.824238][ T8632] do_syscall_64+0x106/0xf80 [ 110.824250][ T8632] ? clear_bhb_loop+0x40/0x90 [ 110.824264][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.824275][ T8632] RIP: 0033:0x7f613b19c799 [ 110.824286][ T8632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.824298][ T8632] RSP: 002b:00007f613bfc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.824309][ T8632] RAX: ffffffffffffffda RBX: 00007f613b415fa0 RCX: 00007f613b19c799 [ 110.824318][ T8632] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 110.824325][ T8632] RBP: 00007f613bfc8090 R08: 0000000000000000 R09: 0000000000000000 [ 110.824331][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.824337][ T8632] R13: 00007f613b416038 R14: 00007f613b415fa0 R15: 00007ffe780e27a8 [ 110.824352][ T8632] [ 111.000466][ T5935] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 111.001279][ T5930] Bluetooth: hci4: command 0x1003 tx timeout [ 111.162704][ T8651] Invalid source name [ 111.164677][ T8651] UBIFS error (pid: 8651): cannot open "ubifs", error -22 [ 111.392026][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 111.399850][ T8668] can0: slcan on ttynull. [ 111.408324][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 111.413091][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 111.417572][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 111.422200][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 111.522156][ T8666] can0 (unregistered): slcan off ttynull. [ 111.707218][ T8685] FAULT_INJECTION: forcing a failure. [ 111.707218][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 111.716043][ T8685] CPU: 3 UID: 0 PID: 8685 Comm: syz.0.782 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.716070][ T8685] Tainted: [L]=SOFTLOCKUP [ 111.716076][ T8685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.716086][ T8685] Call Trace: [ 111.716091][ T8685] [ 111.716098][ T8685] dump_stack_lvl+0x100/0x190 [ 111.716129][ T8685] should_fail_ex.cold+0x5/0xa [ 111.716150][ T8685] should_failslab+0xc2/0x120 [ 111.716177][ T8685] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 111.716205][ T8685] ? skb_clone+0x190/0x400 [ 111.716225][ T8685] skb_clone+0x190/0x400 [ 111.716242][ T8685] netlink_deliver_tap+0xaed/0xcc0 [ 111.716266][ T8685] netlink_unicast+0x650/0x870 [ 111.716288][ T8685] ? __pfx_netlink_unicast+0x10/0x10 [ 111.716316][ T8685] netlink_sendmsg+0x8b0/0xda0 [ 111.716339][ T8685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.716377][ T8685] ? __might_fault+0xc0/0x140 [ 111.716408][ T8685] ____sys_sendmsg+0xa54/0xc30 [ 111.716432][ T8685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.716465][ T8685] ___sys_sendmsg+0x190/0x1e0 [ 111.716490][ T8685] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.716540][ T8685] __sys_sendmsg+0x170/0x220 [ 111.716557][ T8685] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.716589][ T8685] do_syscall_64+0x106/0xf80 [ 111.716607][ T8685] ? clear_bhb_loop+0x40/0x90 [ 111.716627][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.716643][ T8685] RIP: 0033:0x7feb2f19c799 [ 111.716658][ T8685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.716673][ T8685] RSP: 002b:00007feb3007b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.716690][ T8685] RAX: ffffffffffffffda RBX: 00007feb2f415fa0 RCX: 00007feb2f19c799 [ 111.716700][ T8685] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 111.716709][ T8685] RBP: 00007feb3007b090 R08: 0000000000000000 R09: 0000000000000000 [ 111.716720][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.716729][ T8685] R13: 00007feb2f416038 R14: 00007feb2f415fa0 R15: 00007ffd4ad86198 [ 111.716753][ T8685] [ 111.951393][ T8692] qnx4: no qnx4 filesystem (no root dir). [ 112.132878][ T8694] QAT: Device 2 not found [ 112.136072][ T8694] __nla_validate_parse: 60 callbacks suppressed [ 112.136085][ T8694] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.786'. [ 112.274816][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 112.274831][ T40] audit: type=1400 audit(1772365252.924:18528): avc: denied { unmount } for pid=5921 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 112.291626][ T6184] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 112.474427][ T6184] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.482405][ T6184] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 112.486736][ T6184] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.493230][ T6184] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 112.498097][ T6184] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 112.511172][ T6184] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.519500][ T6184] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.528676][ T6184] usb 6-1: Product: syz [ 112.530747][ T6184] usb 6-1: Manufacturer: syz [ 112.549871][ T6184] cdc_wdm 6-1:1.0: skipping garbage [ 112.554030][ T6184] cdc_wdm 6-1:1.0: skipping garbage [ 112.558174][ T6184] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 112.561217][ T6184] cdc_wdm 6-1:1.0: Unknown control protocol [ 112.568429][ T46] ------------[ cut here ]------------ [ 112.571470][ T46] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 112.577341][ T46] WARNING: net/mac80211/tx.c:753 at ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20, CPU#1: kworker/u32:2/46 [ 112.581983][ T46] Modules linked in: [ 112.584375][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u32:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.589138][ T46] Tainted: [L]=SOFTLOCKUP [ 112.590900][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.595302][ T46] Workqueue: events_unbound cfg80211_wiphy_work [ 112.597974][ T46] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20 [ 112.600740][ T46] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 e9 05 00 00 48 8d 3d d5 cc dc 05 48 8b 75 68 89 d9 4c 89 e2 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 2a f8 ff ff e8 b1 20 fb f6 e8 cc [ 112.608870][ T46] RSP: 0018:ffffc900007ef5d8 EFLAGS: 00010282 [ 112.611568][ T46] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 112.614905][ T46] RDX: ffff8880612cda44 RSI: ffff888039641808 RDI: ffffffff90ea4ac0 [ 112.618143][ T46] RBP: ffffc900007ef850 R08: 0000000000000005 R09: 0000000000000000 [ 112.621475][ T46] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880612cda44 [ 112.624764][ T46] R13: ffffc900007ef8c0 R14: 0000000000000000 R15: 0000000000000001 [ 112.628008][ T46] FS: 0000000000000000(0000) GS:ffff8880d6444000(0000) knlGS:0000000000000000 [ 112.631260][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.634123][ T46] CR2: 00007f165d1e9e80 CR3: 000000002b8ac000 CR4: 0000000000352ef0 [ 112.637512][ T46] Call Trace: [ 112.638948][ T46] [ 112.640334][ T46] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 112.642879][ T46] ? kmalloc_reserve+0x148/0x350 [ 112.645002][ T46] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 112.647614][ T46] ? sta_info_hash_lookup+0x259/0x660 [ 112.649933][ T46] invoke_tx_handlers_late+0xfb4/0x2750 [ 112.652445][ T46] ? ieee80211_queue_skb+0x3ae/0x1fc0 [ 112.654820][ T46] ? ieee80211_txq_may_transmit+0x730/0xfd0 [ 112.657570][ T46] ? invoke_tx_handlers_early+0x65d/0x27d0 [ 112.660220][ T46] ieee80211_tx+0x304/0x460 [ 112.662266][ T46] ? __pfx_ieee80211_tx+0x10/0x10 [ 112.664532][ T46] ? ieee80211_skb_resize+0x119/0x670 [ 112.666918][ T46] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 112.669355][ T46] ieee80211_xmit+0x30f/0x3e0 [ 112.671533][ T46] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 112.673946][ T46] ieee80211_scan_state_send_probe+0x33d/0xac0 [ 112.676578][ T46] ieee80211_scan_work+0x750/0x1ff0 [ 112.678806][ T46] ? __queue_work+0x445/0x1150 [ 112.681001][ T46] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 112.683538][ T46] ? rcu_is_watching+0x12/0xc0 [ 112.685608][ T46] cfg80211_wiphy_work+0x446/0x5c0 [ 112.687624][ T46] process_one_work+0x9d7/0x1920 [ 112.689665][ T46] ? __pfx_process_one_work+0x10/0x10 [ 112.692029][ T46] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 112.694251][ T46] worker_thread+0x5da/0xe40 [ 112.696102][ T46] ? kthread+0x13a/0x450 [ 112.697826][ T46] ? __pfx_worker_thread+0x10/0x10 [ 112.700106][ T46] kthread+0x370/0x450 [ 112.701866][ T46] ? __pfx_kthread+0x10/0x10 [ 112.703818][ T46] ret_from_fork+0x754/0xd80 [ 112.705833][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 112.708006][ T46] ? __switch_to+0x7b4/0x1120 [ 112.710121][ T46] ? __pfx_kthread+0x10/0x10 [ 112.712053][ T46] ret_from_fork_asm+0x1a/0x30 [ 112.714109][ T46] [ 112.715454][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.718447][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u32:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.722934][ T46] Tainted: [L]=SOFTLOCKUP [ 112.724677][ T46] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.728785][ T46] Workqueue: events_unbound cfg80211_wiphy_work [ 112.731601][ T46] Call Trace: [ 112.733260][ T46] [ 112.734774][ T46] dump_stack_lvl+0x100/0x190 [ 112.736905][ T46] vpanic+0x552/0x970 [ 112.738629][ T46] ? __pfx_vpanic+0x10/0x10 [ 112.740556][ T46] panic+0xd1/0xe0 [ 112.742157][ T46] ? __pfx_panic+0x10/0x10 [ 112.744117][ T46] ? check_panic_on_warn+0x1f/0x90 [ 112.746153][ T46] check_panic_on_warn.cold+0x19/0x34 [ 112.748160][ T46] ? ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20 [ 112.750693][ T46] __warn.cold+0x191/0x348 [ 112.752629][ T46] __report_bug+0x296/0x3d0 [ 112.754465][ T46] ? ieee80211_tx_h_rate_ctrl+0x12bb/0x1a20 [ 112.756792][ T46] ? __pfx___report_bug+0x10/0x10 [ 112.758745][ T46] ? kasan_save_stack+0x3f/0x50 [ 112.760660][ T46] ? kasan_save_stack+0x30/0x50 [ 112.762510][ T46] ? ieee80211_scan_work+0x750/0x1ff0 [ 112.764295][ T46] ? cfg80211_wiphy_work+0x446/0x5c0 [ 112.766066][ T46] ? process_one_work+0x9d7/0x1920 [ 112.767771][ T46] ? worker_thread+0x5da/0xe40 [ 112.769535][ T46] ? kthread+0x370/0x450 [ 112.771155][ T46] ? ret_from_fork+0x754/0xd80 [ 112.772839][ T46] ? ret_from_fork_asm+0x1a/0x30 [ 112.774614][ T46] report_bug_entry+0xe1/0x290 [ 112.776221][ T46] ? ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20 [ 112.778165][ T46] handle_bug+0x1c9/0x2a0 [ 112.779593][ T46] exc_invalid_op+0x17/0x50 [ 112.781138][ T46] asm_exc_invalid_op+0x1a/0x20 [ 112.782749][ T46] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x12cb/0x1a20 [ 112.784877][ T46] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 e9 05 00 00 48 8d 3d d5 cc dc 05 48 8b 75 68 89 d9 4c 89 e2 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 2a f8 ff ff e8 b1 20 fb f6 e8 cc [ 112.791089][ T46] RSP: 0018:ffffc900007ef5d8 EFLAGS: 00010282 [ 112.793028][ T46] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 112.795534][ T46] RDX: ffff8880612cda44 RSI: ffff888039641808 RDI: ffffffff90ea4ac0 [ 112.798086][ T46] RBP: ffffc900007ef850 R08: 0000000000000005 R09: 0000000000000000 [ 112.800672][ T46] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880612cda44 [ 112.803122][ T46] R13: ffffc900007ef8c0 R14: 0000000000000000 R15: 0000000000000001 [ 112.805756][ T46] ? ieee80211_tx_h_rate_ctrl+0x1297/0x1a20 [ 112.807696][ T46] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 112.809748][ T46] ? kmalloc_reserve+0x148/0x350 [ 112.811358][ T46] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 112.813288][ T46] ? sta_info_hash_lookup+0x259/0x660 [ 112.815010][ T46] invoke_tx_handlers_late+0xfb4/0x2750 [ 112.816800][ T46] ? ieee80211_queue_skb+0x3ae/0x1fc0 [ 112.818560][ T46] ? ieee80211_txq_may_transmit+0x730/0xfd0 [ 112.820507][ T46] ? invoke_tx_handlers_early+0x65d/0x27d0 [ 112.822442][ T46] ieee80211_tx+0x304/0x460 [ 112.823907][ T46] ? __pfx_ieee80211_tx+0x10/0x10 [ 112.825611][ T46] ? ieee80211_skb_resize+0x119/0x670 [ 112.827396][ T46] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 112.829213][ T46] ieee80211_xmit+0x30f/0x3e0 [ 112.830859][ T46] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 112.832806][ T46] ieee80211_scan_state_send_probe+0x33d/0xac0 [ 112.834829][ T46] ieee80211_scan_work+0x750/0x1ff0 [ 112.836602][ T46] ? __queue_work+0x445/0x1150 [ 112.838189][ T46] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 112.840026][ T46] ? rcu_is_watching+0x12/0xc0 [ 112.841620][ T46] cfg80211_wiphy_work+0x446/0x5c0 [ 112.843305][ T46] process_one_work+0x9d7/0x1920 [ 112.844954][ T46] ? __pfx_process_one_work+0x10/0x10 [ 112.846739][ T46] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 112.848629][ T46] worker_thread+0x5da/0xe40 [ 112.850234][ T46] ? kthread+0x13a/0x450 [ 112.851659][ T46] ? __pfx_worker_thread+0x10/0x10 [ 112.853356][ T46] kthread+0x370/0x450 [ 112.854717][ T46] ? __pfx_kthread+0x10/0x10 [ 112.856277][ T46] ret_from_fork+0x754/0xd80 [ 112.857822][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 112.859510][ T46] ? __switch_to+0x7b4/0x1120 [ 112.861070][ T46] ? __pfx_kthread+0x10/0x10 [ 112.862589][ T46] ret_from_fork_asm+0x1a/0x30 [ 112.864167][ T46] [ 112.865985][ T46] Kernel Offset: disabled [ 112.867456][ T46] Rebooting in 86400 seconds..