last executing test programs: 3.589295807s ago: executing program 3 (id=1113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='fd', 0x0, r1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='fd', 0x0, r1) ioctl$BSG_IO(r1, 0x2285, &(0x7f00000006c0)={0x51, 0x0, 0x0, 0x8, &(0x7f0000000080)="a087e1564114d273", 0xfffffffffffffffb, 0x0, 0x2, 0x1, 0x60, &(0x7f00000002c0), 0x0, 0x68, 0x0, 0x74, &(0x7f0000000340)="999675df01767f9c1a58d81e7d6e9c09b50e9d2711848deaa19faaec7f34937f1f64ae2384de85f030e9a13d6546d561eb0f41ba4aa8df2ede14074fb13742fc52e253796f1d5a64470945662117f4c70a0498b0d61753be347194088605b0c9a895b1a4cd8f70ea", &(0x7f0000000540)=""/116, 0x7, 0x40, &(0x7f0000000600)="c8735cbf0a5ce22d3b4b74ad7c221897c45cee83804c0a91ab89b3c5c35bd092b91e921c2172bef88aa97d32953427cc2a0774b57104945a0f0b8f2f8ea599e8e377b99d0036fa549d4cfc2437c8d9505c68f79834eb83e741a0154ce6a2fec176901f35f069cd73128a1e63c89eac02431e712d35727e3533f18fe381e4b892d8d4e64577b660be74b5c8fb97444c61a6e2bbe2221409f122d75982cbd87a3311e995dac31d9ec7b1e327179d"}) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4", 0xc5}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.511125406s ago: executing program 3 (id=1114): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) poll(&(0x7f00000002c0)=[{r0, 0x20}, {r0}], 0x2, 0x9) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f2435f01000884b6", 0x8, 0x4008041, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r5, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x400, 0x30}, 0xc) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.231004351s ago: executing program 3 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030304000000fddbdf253d0000000e0001006e657464657673696d3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) r2 = inotify_init() creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r3, @ANYRESDEC=0x0]) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r6, 0x3, r5, 0x3ff}) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x6d) write$FUSE_INIT(r3, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x15) sendmmsg$inet(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacb", 0x62}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)="e6", 0x1}], 0x1}}], 0x4, 0x2090) 3.05118597s ago: executing program 0 (id=1118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x17}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x2, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x8, 0x1, 0xfb, 0x0, 0x8, 0x3c, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x1, 0x7, 0x20, 0x3, 0x2, 0x106c, 0x5, 0x8000000000000, 0x80000000, 0x7ab60de4, 0x8, 0x0, 0x0, 0x0, 0x29a], 0x1, 0x3c4210}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x27) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, 0x0, &(0x7f00000008c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008001400090000000500160001000000"], 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.301554879s ago: executing program 3 (id=1125): unshare(0x6a040000) unshare(0x880) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x24008080) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abb7000fddbdf250900020073797a30000000000800410073697600140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4400) unshare(0xa020000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x80, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)='tunl0\x00', 0x5, 0x7f, 0xfffb}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0xb, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @datasec={0x8, 0x5, 0x0, 0xf, 0x2, [{0x2, 0x22, 0x800}, {0x4, 0x8, 0x6}, {0x4, 0x1, 0x8}, {0x3, 0x5, 0xd6}, {0x3, 0x8, 0x6}], ')Y'}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x0, 0x61, 0x4f, 0x0, 0x30, 0x61]}}, &(0x7f0000000580)=""/248, 0x7b, 0xf8, 0x0, 0xffff, 0x7ee09c7e0ff38e6d}, 0x28) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r7, &(0x7f0000000140)=""/170, 0xaa, 0x20000000000004) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x20, 0x7, 0x6, 0x4, 0x38a00, 0x1, 0x8, '\x00', 0x0, r5, 0x4, 0x5, 0x0, 0x0, @value=r6, @void, @value=r7}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private=0xa010102, 0x9, 0x5}}) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.131370691s ago: executing program 3 (id=1126): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000000c80)="6fead4df3c124b3c2b55fed650f7804383c4e37a3018bbf00229f22933b04a64b054c1e468e3be56a0bb90a829d770c3af1f9cf41a40978615de9d651477d2e99e27f7c620319c056c423e4f41d6c381bdfb7a488f23e04316ab5a5d882de8155d4535f87782003746164d8509c8ed645319b03c1347ad509816199de1f2e92b9a5861c1f6b8ba02f6b435685d373ddd01452fbaa6541e6fd18ff6dbd54e18429bce1b7eafbd7866a0084c1a78c2d8", 0xaf}, {&(0x7f0000000d40)="6bcbbf5f8629fba7ff5074f33a6d3dedbc20eb50161bad0c1e627fbd2b0f1a9a4048782b7051d20ded92f6f6e9f3318392d4acec69bd49e863ebd528c880d2fe41584951e30af9fbd7cec49276480e005386021e9a27a41758b96acb57d723c717a08f708ca0f40fe9ed454fcf1d3d21329a0cdc1d63e1469d4d9190f4b2df7a820b8df0ffe496165fe9ad75df490005837f0aeec8de02258312ea0f0e21de586cb1764ed860c5b967e0d3d1aa429c92edebe562325c185c8c", 0xb9}, {&(0x7f0000000e00)="ff878ea1a92417767cebbb68e0329515cfcf896156853f8415bca2aaa9e410b1d8a129c5c9fac75820d8b0aa27543710a184b46d4bdbb6e1402812ac7c98899177b4", 0x42}], 0x3}}], 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000506180ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 2.054787371s ago: executing program 0 (id=1128): r0 = userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x2, 0x4, 0x4, 0xa, 0x500, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000019400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0xffffffff, r0, 'id1\x00'}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000340)=""/9) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1a008c8, &(0x7f0000000280)={'trans=virtio,', {[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = userfaultfd(0x801) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@random={'osx.', ',\\#\x00'}, &(0x7f00000001c0)=""/96, 0x60) truncate(&(0x7f0000000240)='./file0\x00', 0x3) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0) 2.05409632s ago: executing program 3 (id=1129): set_mempolicy(0x1, &(0x7f0000000000)=0x9, 0x4) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb7a4801a4c230f4a, 0x2, 0x3ff, 0x3, 0x3, 0x3}, {0x9, 0x5, 0x80, 0x2, 0x200, 0x80, 0x1, 0x9}, {0x9, 0x5, 0xd, 0x3, 0x40, 0x7, 0xe}}}}}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$midi(0x5, 0xd0, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8f, 0x582, 0x114, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x1, 0x1, 0xfa, 0xa0, 0xe5, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x20, 0x3, [@ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x6, 0x3, [{0x9, 0x6}, {0x6, 0x8}, {0x7, 0xf3}], 0xf}], [{{0x9, 0x5, 0x7, 0x8, 0x20, 0x1, 0x5, 0xf1, {0x8, 0x25, 0x1, 0x4, "6c3251b8"}}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xb8, 0x7, 0x3e, {0xa, 0x25, 0x1, 0x6, "42a0227d63ee"}}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0x6, 0x3, {0x14, 0x25, 0x1, 0x10, "f759f43f3276e53c8e17e103689b5705"}}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x1, 0xa, 0x4, {0x7, 0x25, 0x1, 0x3, "c3334f"}}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x6, 0x1, 0xe, {0x4}}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0xb, 0xf6, 0x8, {0x11, 0x25, 0x1, 0xd, "31afc3875aa733ce4a5bd48c57"}}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0xa, 0x42, 0x4, {0x10, 0x25, 0x1, 0xc, "36ee371a8fd0eb8c287757cc"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x6c, 0x2, 0xaf, 0xff, 0x81}, 0x40, &(0x7f0000000240)={0x5, 0xf, 0x40, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x4, 0x1, 0x8}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x46, 0x2, 0xb6, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "67d5fbacf00a5ac81e5a86dc49d24f5b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x3, 0x8, 0x1ff, 0x5}]}, 0x1, [{0x84, &(0x7f0000000280)=@string={0x84, 0x3, "27477da0065fc13e7e3a3084749f2f0a980f9e5727ab8646eb53ee1594c5d0ce812a5c87fd31a8c764221748dad2d688546d2524cde658724468f8a013e632e94ff7b47de0e3ed051f4ba3b62dc276a7390a20a8c638b365209ffa8ab94f93d164d4eb19c4c6402b723323795ae1f111ee02dcb00b62b614e7c24eeff78d5e9b225e"}}]}) unshare(0x48020200) 1.791515039s ago: executing program 0 (id=1132): socket$l2tp(0x2, 0x2, 0x73) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, &(0x7f0000000340)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2], [0x40000, 0x0, 0x0, 0x0, 0x4000]], '\x00', [{}, {}, {0x0, 0x80}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2a9e524, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80a41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x490, 0xd0, 0x2c0, 0x418, 0x0, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88}, 0x0, 0x70, 0x98}, @common=@SET={0x0, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x4, 0x1, 0x1, 0x2, 0x1], 0x6, 0x2}, {0x0, [0x1, 0x7, 0x0, 0x4, 0x3], 0x2, 0x5}}}}, {{@ip={@private=0xa010100, @private=0x8000, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0, 0x0, {}, [@common=@inet=@recent0={{}, {0xc, 0x1ff, 0x1, 0x1, 'syz1\x00'}}, @inet=@rpfilter={{}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {}, [@inet=@rpfilter={{}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xff, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xf8, 0x120}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x5, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffee9) 1.330432413s ago: executing program 2 (id=1138): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000000c80)="6fead4df3c124b3c2b55fed650f7804383c4e37a3018bbf00229f22933b04a64b054c1e468e3be56a0bb90a829d770c3af1f9cf41a40978615de9d651477d2e99e27f7c620319c056c423e4f41d6c381bdfb7a488f23e04316ab5a5d882de8155d4535f87782003746164d8509c8ed645319b03c1347ad509816199de1f2e92b9a5861c1f6b8ba02f6b435685d373ddd01452fbaa6541e6fd18ff6dbd54e18429bce1b7eafbd7866a0084c1a78c2d8", 0xaf}, {&(0x7f0000000d40)="6bcbbf5f8629fba7ff5074f33a6d3dedbc20eb50161bad0c1e627fbd2b0f1a9a4048782b7051d20ded92f6f6e9f3318392d4acec69bd49e863ebd528c880d2fe41584951e30af9fbd7cec49276480e005386021e9a27a41758b96acb57d723c717a08f708ca0f40fe9ed454fcf1d3d21329a0cdc1d63e1469d4d9190f4b2df7a820b8df0ffe496165fe9ad75df490005837f0aeec8de02258312ea0f0e21de586cb1764ed860c5b967e0d3d1aa429c92edebe562325c185c8c", 0xb9}, {&(0x7f0000000e00)="ff878ea1a92417767cebbb68e0329515cfcf896156853f8415bca2aaa9e410b1d8a129c5c9fac75820d8b0aa27543710a184b46d4bdbb6e1402812ac7c98899177b4", 0x42}], 0x3}}], 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000b5ffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1.32953238s ago: executing program 2 (id=1139): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0x0, 0x1000, 0x20, &(0x7f0000032000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x19, 0x0) 1.231116119s ago: executing program 2 (id=1141): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x4f, 0x86, 0xfffffffffffffffe, 0x5, 0x7, 0x40000000c, 0x651, 0x100000004, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0xc, 0x8000000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x5, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x5, 0x6}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2d, &(0x7f0000000140)={0x24, {{0x2, 0x1000, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) fallocate(r1, 0x27, 0xb, 0x6) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.171463117s ago: executing program 2 (id=1142): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000001000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680), 0x1050c0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'geneve1\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0x2, 0x1}}) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x2f, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) 526.208419ms ago: executing program 0 (id=1143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x55}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04032d20f4"], 0x7) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000000), 0x4) setresuid(0x0, 0xee00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000ab5000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x5ac) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) 378.080492ms ago: executing program 2 (id=1144): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = fanotify_init(0x1a, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r3, 0x441, 0x4800001a, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x2) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x9, &(0x7f0000000080)=[{0x5, 0x9, 0x9, 0x9}, {0x3, 0x8, 0x4, 0x354}, {0x4, 0x2, 0x6, 0x2}, {0x3d, 0x1, 0x6, 0x3}, {0x0, 0x9, 0x9, 0x76}, {0x0, 0xfb, 0x0, 0x5}, {0xd, 0x3, 0x81, 0x3}, {0xffff, 0x5, 0x5, 0x1}, {0x7, 0x1, 0xb, 0x10000}]}) setsockopt$inet6_int(r6, 0x29, 0x18, &(0x7f0000000040)=0x4000e, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x2, 0x9, @empty, 0x6}, 0x1c) 376.157241ms ago: executing program 1 (id=1145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_DIVISOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYBLOB="824e8036dcfd7be077e47681e7ef2a423f2996259a48ed325e830b23c5834f60bbb04b10ebccef3cf2c426e97d68a87d9e55edcae10c7ff9984a5f38b758f6f26c36c000c12bd0090e98b7ef30ad489e85c0d70ba4b693f449269cd2f12246d02ea96ea3b7ce9ca58ecdea789acbde365a70a8e473a8dde1fe0f3eecd8ce5408c24e03789f0ddb899647a94a", @ANYRES32=0x0, @ANYRES16=r4], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x1) 270.000583ms ago: executing program 0 (id=1146): modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f0000000080)='\x00', 0x801, &(0x7f0000000300)={@align=0xffffffff, {0xffff, 0x3, 0x6, 0x800}}, 0x80, &(0x7f0000000340), &(0x7f0000000400)=0xd}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000007c0), 0x756db34308eb42c6, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x1, 0x0, 0x9, 0x8b, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0xaaf, 0x6d, &(0x7f00000006c0)=""/109, 0x40f00, 0x10, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000740)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x9, 0xc, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, r3, r4], &(0x7f0000000880)=[{0x4, 0x1, 0x7, 0xb}], 0x10, 0x7f3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@struct={0x5, 0x0, 0x0, 0x4, 0x0, 0x2}, @enum64={0xc, 0x8, 0x0, 0x13, 0x1, 0x8, [{0x10, 0x6}, {0x1, 0x7f, 0x2}, {0x1, 0x1, 0x3}, {0x4, 0x62, 0x1}, {0xe, 0x87e}, {0x9, 0x800, 0x7}, {0x10, 0x8d2, 0x5}, {0x7, 0xffff, 0x1}]}]}}, 0x0, 0x92, 0x0, 0x1, 0xa}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={0xffffffffffffffff, r2}, 0xc) setsockopt$sock_attach_bpf(r5, 0x1, 0x2a, &(0x7f0000000100)=r7, 0x4) sendmsg$unix(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000"], 0x18, 0x48000}, 0x0) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r8, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x327, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@local, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x6, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 266.04442ms ago: executing program 0 (id=1147): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/133) lseek(r0, 0x7, 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)='G', 0x1}], 0x1}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) r9 = eventfd(0x20005f0) ioctl$KVM_IOEVENTFD(r8, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r9}) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="00cb98860060370dd9d5f4f5fedd77d9892ff7d21ee5fb8a858a64f6b0dafe6e9440196ef009844a3bebe97ae19dd4c0757863248d39e99501ddf199e0a27e70018be018b2a76d7bb2ec35ff734f465eabcc93ff24143b93f962afdf8e6ab7060000002819e2e897019911447ab4bacff01e1b8eb57432a364b4d6eb7e5180d7052c7b12f2f6e870bffdebe5d98de119c8083c7b69ad9dd80784ff", 0x9b}, {&(0x7f00000000c0)="4336fecc", 0x4}], 0x0) 219.707072ms ago: executing program 1 (id=1148): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000000c80)="6fead4df3c124b3c2b55fed650f7804383c4e37a3018bbf00229f22933b04a64b054c1e468e3be56a0bb90a829d770c3af1f9cf41a40978615de9d651477d2e99e27f7c620319c056c423e4f41d6c381bdfb7a488f23e04316ab5a5d882de8155d4535f87782003746164d8509c8ed645319b03c1347ad509816199de1f2e92b9a5861c1f6b8ba02f6b435685d373ddd01452fbaa6541e6fd18ff6dbd54e18429bce1b7eafbd7866a0084c1a78c2d8", 0xaf}, {&(0x7f0000000d40)="6bcbbf5f8629fba7ff5074f33a6d3dedbc20eb50161bad0c1e627fbd2b0f1a9a4048782b7051d20ded92f6f6e9f3318392d4acec69bd49e863ebd528c880d2fe41584951e30af9fbd7cec49276480e005386021e9a27a41758b96acb57d723c717a08f708ca0f40fe9ed454fcf1d3d21329a0cdc1d63e1469d4d9190f4b2df7a820b8df0ffe496165fe9ad75df490005837f0aeec8de02258312ea0f0e21de586cb1764ed860c5b967e0d3d1aa429c92edebe562325c185c8c", 0xb9}, {&(0x7f0000000e00)="ff878ea1a92417767cebbb68e0329515cfcf896156853f8415bca2aaa9e410b1d8a129c5c9fac75820d8b0aa27543710a184b46d4bdbb6e1402812ac7c98899177b4", 0x42}], 0x3}}], 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000f5ffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 150.993698ms ago: executing program 1 (id=1149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$get_persistent(0x16, 0x0, 0xffffffffffffffff) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r3, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) write$binfmt_format(r1, &(0x7f00000018c0)='-1\x00', 0x1e) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000a0a010400000000000000000500000a0900010073797a3000000000884a026e469bcff3d381a941cd6719ebe93d00f98c923fd6b7f660295b57c996906a1c6a7cbca73b9290fa7272c44c877e9e1800525e5c4bd9e9fcec1422517b0fff4e58b4b0fbfddfed90f721688a543a246b117eb714be8f7c94a4d9a2b72b20feb0554afe4fe00a1a211ce30278232c8a5e09c2cfa929b6d36b7a1cd265b7c87b91c842e35fd5e78f248f4e4c944d408ea99174715243e097f26f51"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x810) 101.099459ms ago: executing program 2 (id=1150): mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='fuseblk\x00', 0x200013, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x100018, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000008c00000000000000005f"], 0x0, 0x2a}, 0x20) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB], 0x18}, 0x41) recvmsg(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x20) shutdown(r1, 0x0) 100.650174ms ago: executing program 1 (id=1151): ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000002c0)={0x6, 0x80000, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000600)={{r0}, "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"}) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0xcc, 0x24, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0xb, 0x5}, {0x1, 0xd}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb5, 0x9, 0x8, 0x40000000, 0x1, 0x0, 0x8, 0x5}}, {0xe, 0x2, [0x640, 0x5f14, 0x4, 0xfff8, 0x7]}}, {{0x1c, 0x1, {0x56, 0xfc, 0x200, 0x10000, 0x2, 0x7, 0x9, 0x8}}, {0x14, 0x2, [0x6, 0xd, 0xa652, 0x4, 0x6, 0xffff, 0xf681, 0x6]}}, {{0x1c, 0x1, {0xde, 0x7, 0x74db, 0x10001, 0x1, 0xae1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x6, 0x5, 0x7ff, 0x2, 0x7, 0x40, 0x4}}, {0xc, 0x2, [0xfff0, 0x8, 0x4, 0x9]}}]}]}, 0xcc}}, 0x80c0) (async) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000000580)=[{0x21, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x0, @svalue=0xc32}, {0x1, @svalue=0x40000000000000}, {0x0, @svalue=0x1}]}, 0x5}]}) 257.468µs ago: executing program 1 (id=1152): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x2, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000001180)=""/124, 0x7c, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/274, 0x112, 0x0, 0x1, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) ioctl$CDROMRESET(r3, 0x5312) write$vhost_msg_v2(r0, &(0x7f0000000880)={0x2, 0x0, {&(0x7f00000005c0)=""/147, 0x93, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff0001}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000003b80)=[{'IMIX', @void}, {'PHONEIN', @val={' \'', 'Capture Volume'}}, {'VIDEO', @val={' \'', 'Synth Capture Switch'}}, {'MIC', @val={' \'', 'Synth Capture Switch'}}], 0x95) write$vhost_msg_v2(r0, &(0x7f0000005b80)={0x2, 0x0, {&(0x7f0000000180)=""/36, 0x24, &(0x7f0000005a80)=""/251, 0x2, 0x1}}, 0x48) r5 = syz_open_dev$video(&(0x7f0000000000), 0x10001, 0xa0000) ioctl$VIDIOC_S_FBUF(r5, 0x4030560b, &(0x7f00000000c0)={0xb1, 0x25, 0x0, {0x4, 0x6, 0x32314d59, 0x1, 0x5, 0x6, 0x8}}) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) recvmmsg(r6, &(0x7f0000005780)=[{{&(0x7f0000005940)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/57, 0x39}], 0x3, &(0x7f00000006c0)=""/179, 0xb3}, 0x200}, {{&(0x7f0000000780)=@un=@abs, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/92, 0x5c}, {&(0x7f0000000000)=""/2, 0x2}, {&(0x7f00000018c0)=""/99, 0x63}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/201, 0xc9}, {&(0x7f0000002a80)=""/54, 0x36}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x9}, 0x9}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f00000059c0)=""/188, 0xbc}, {&(0x7f0000003c40)=""/78, 0x4e}], 0x2, &(0x7f0000003d00)=""/81, 0x51}, 0x9}, {{&(0x7f0000003d80)=@nfc, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003e00)=""/150, 0x96}], 0x1}, 0x6}, {{&(0x7f0000003f00)=@qipcrtr, 0x80, &(0x7f00000052c0)=[{&(0x7f0000003f80)=""/193, 0xc1}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/216, 0xd8}, {&(0x7f0000005180)=""/132, 0x84}, {&(0x7f0000005240)=""/119, 0x77}], 0x5, &(0x7f0000005340)=""/236, 0xec}, 0x6}, {{&(0x7f0000005440)=@rc, 0x80, &(0x7f0000005700)=[{&(0x7f00000054c0)=""/110, 0x6e}, {&(0x7f0000005540)}, {&(0x7f0000005580)=""/128, 0x80}, {&(0x7f0000005600)=""/108, 0x6c}, {&(0x7f0000005680)=""/102, 0x66}], 0x5}, 0x19}], 0x6, 0x42, &(0x7f0000005900)) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001f79e40400030000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x8000) 0s ago: executing program 1 (id=1153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_io_uring_setup(0xa9d, &(0x7f00000005c0)={0x0, 0xfd7b, 0x40, 0x3, 0x24f}, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): S network, BSSID 50:50:50:50:50:50 [ 65.918560][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.925828][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.229592][ T62] Bluetooth: hci0: command tx timeout [ 66.230885][ T5945] Bluetooth: hci2: command tx timeout [ 66.234619][ T5942] Bluetooth: hci1: command tx timeout [ 66.237586][ T5945] Bluetooth: hci3: command tx timeout [ 66.451428][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.455624][ T6046] batadv_slave_0: entered promiscuous mode [ 66.682569][ T6068] loop5: detected capacity change from 0 to 7 [ 66.730473][ T6072] program syz.3.24 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.876200][ T6068] Dev loop5: unable to read RDB block 7 [ 66.878915][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 66.883506][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 66.887258][ T6068] loop5: unable to read partition table [ 66.887396][ T6068] loop5: partition table beyond EOD, truncated [ 66.893916][ T6068] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 67.329375][ T6097] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 67.615823][ T6108] batadv_slave_1: entered promiscuous mode [ 67.621721][ T6107] batadv_slave_1: left promiscuous mode [ 67.965180][ T6129] kvm: kvm [6128]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 67.972754][ T6129] kvm: kvm [6128]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 68.308163][ T5942] Bluetooth: hci1: command tx timeout [ 68.308318][ T62] Bluetooth: hci0: command tx timeout [ 68.308609][ T5945] Bluetooth: hci3: command tx timeout [ 68.308632][ T5945] Bluetooth: hci2: command tx timeout [ 68.493938][ T6162] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.699990][ T6168] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 68.703098][ T6168] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 68.825915][ T6171] xt_hashlimit: size too large, truncated to 1048576 [ 69.132572][ T6187] vlan2: entered allmulticast mode [ 69.134379][ T6187] veth0_to_bond: entered allmulticast mode [ 69.475886][ T6207] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 69.731460][ T40] kauditd_printk_skb: 189 callbacks suppressed [ 69.731476][ T40] audit: type=1400 audit(1776275681.375:290): avc: denied { read } for pid=6218 comm="syz.3.74" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 69.747310][ T40] audit: type=1400 audit(1776275681.375:291): avc: denied { open } for pid=6218 comm="syz.3.74" path="/24/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 69.760950][ T6223] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.775994][ T6223] block device autoloading is deprecated and will be removed. [ 69.790826][ T40] audit: type=1400 audit(1776275681.435:292): avc: denied { listen } for pid=6226 comm="syz.1.76" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.840449][ T40] audit: type=1400 audit(1776275681.475:293): avc: denied { accept } for pid=6228 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 69.854061][ T40] audit: type=1400 audit(1776275681.495:294): avc: denied { setopt } for pid=6226 comm="syz.1.76" laddr=::1 lport=50948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.023222][ T6243] netlink: 'syz.1.83': attribute type 24 has an invalid length. [ 70.027137][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 70.030212][ T6243] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 70.043564][ T40] audit: type=1400 audit(1776275681.685:295): avc: denied { create } for pid=6244 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.055185][ T40] audit: type=1400 audit(1776275681.685:296): avc: denied { create } for pid=6244 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 70.389590][ T62] Bluetooth: hci1: command tx timeout [ 70.389676][ T5942] Bluetooth: hci0: command tx timeout [ 70.389816][ T5945] Bluetooth: hci3: command tx timeout [ 70.389865][ T5929] Bluetooth: hci2: command tx timeout [ 70.449681][ T40] audit: type=1400 audit(1776275682.095:297): avc: denied { sys_admin } for pid=6268 comm="syz.0.94" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 70.541300][ T6277] syz.3.97 uses obsolete (PF_INET,SOCK_PACKET) [ 70.616156][ T40] audit: type=1400 audit(1776275682.255:298): avc: denied { mount } for pid=6280 comm="syz.3.99" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 70.660358][ T40] audit: type=1400 audit(1776275682.305:299): avc: denied { ioctl } for pid=6282 comm="syz.3.100" path="socket:[10068]" dev="sockfs" ino=10068 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.711469][ T6285] netlink: 'syz.3.101': attribute type 21 has an invalid length. [ 70.714033][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 70.716838][ T6285] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 70.841329][ T6291] syzkaller0: entered promiscuous mode [ 70.843899][ T6291] syzkaller0: entered allmulticast mode [ 70.966869][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 72.119785][ T6371] team0: Port device syz_tun added [ 73.306007][ T6425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.329357][ T6425] bond1: (slave ip6gretap1): making interface the new active one [ 73.334247][ T6425] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 73.409459][ T6428] kvm: pic: non byte write [ 73.508586][ T6431] kvm: pic: non byte write [ 74.037256][ T6472] kvm: kvm [6471]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 74.042918][ T6472] kvm: kvm [6471]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 74.594165][ T6521] loop2: detected capacity change from 0 to 7 [ 74.600351][ T6521] Dev loop2: unable to read RDB block 7 [ 74.602279][ T6521] loop2: unable to read partition table [ 74.604354][ T6521] loop2: partition table beyond EOD, truncated [ 74.608869][ T6521] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.771825][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 74.771902][ T40] audit: type=1400 audit(1776275686.415:340): avc: denied { read } for pid=6535 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.782858][ T40] audit: type=1400 audit(1776275686.425:341): avc: denied { block_suspend } for pid=6537 comm="syz.3.209" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.794346][ T40] audit: type=1400 audit(1776275686.435:342): avc: denied { unmount } for pid=6528 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.835400][ T6543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.212'. [ 74.861952][ T6549] netlink: 'syz.3.215': attribute type 9 has an invalid length. [ 74.878115][ T40] audit: type=1400 audit(1776275686.515:343): avc: denied { ioctl } for pid=6546 comm="syz.3.215" path="socket:[14455]" dev="sockfs" ino=14455 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.892977][ T6543] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 74.905140][ T6543] bond1 (unregistering): Released all slaves [ 74.920545][ T40] audit: type=1400 audit(1776275686.565:344): avc: denied { create } for pid=6546 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.927255][ T40] audit: type=1400 audit(1776275686.565:345): avc: denied { setopt } for pid=6546 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.941313][ T6556] Cannot find add_set index 0 as target [ 74.949435][ T40] audit: type=1400 audit(1776275686.595:346): avc: denied { ioctl } for pid=6546 comm="syz.3.215" path="socket:[12192]" dev="sockfs" ino=12192 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.067875][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.071934][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.090761][ T40] audit: type=1400 audit(1776275686.735:347): avc: denied { read } for pid=6578 comm="syz.0.222" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.098127][ T40] audit: type=1400 audit(1776275686.735:348): avc: denied { open } for pid=6578 comm="syz.0.222" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.187222][ T6564] batadv_slave_0: left promiscuous mode [ 75.202699][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.343900][ T1149] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.346919][ T1149] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.353547][ T1149] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.356651][ T1149] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.531017][ T40] audit: type=1400 audit(1776275687.175:349): avc: denied { write } for pid=6596 comm="syz.0.229" name="dev" dev="proc" ino=4026533059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.579406][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.234'. [ 75.701523][ T6618] ip6gre1: entered promiscuous mode [ 75.703345][ T6618] ip6gre1: entered allmulticast mode [ 75.754355][ T6621] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 75.808243][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 75.829136][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 75.852606][ T6626] Zero length message leads to an empty skb [ 76.023261][ T6638] loop5: detected capacity change from 0 to 7 [ 76.031426][ T6638] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 76.033818][ T6638] loop5: partition table partially beyond EOD, truncated [ 76.036306][ T6638] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 76.041124][ T6638] loop5: p2 start 832840281 is beyond EOD, truncated [ 76.118509][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 76.139992][ T6644] process 'syz.1.249' launched './file2' with NULL argv: empty string added [ 76.339183][ T6646] openvswitch: netlink: IP tunnel dst address not specified [ 76.422143][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 76.437143][ T6650] netlink: 'syz.0.252': attribute type 30 has an invalid length. [ 76.474479][ T1149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.478486][ T1149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.481756][ T1149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.484879][ T1149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.566494][ T6660] syzkaller0: entered promiscuous mode [ 76.568930][ T6660] syzkaller0: entered allmulticast mode [ 76.658159][ T6672] loop5: detected capacity change from 0 to 7 [ 76.664988][ T6672] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 76.669359][ T6672] loop5: partition table partially beyond EOD, truncated [ 76.672842][ T6672] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 76.682196][ T6672] loop5: p2 start 832840281 is beyond EOD, truncated [ 76.710801][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 76.745286][ T6679] program syz.1.261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.443256][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.452054][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.719554][ T6684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.262'. [ 77.743240][ T6686] binder: 6685:6686 ioctl c00c620f 200000000100 returned -22 [ 77.778687][ T6691] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.876964][ T6703] netlink: 76 bytes leftover after parsing attributes in process `syz.1.269'. [ 77.967815][ T6713] syzkaller0: entered promiscuous mode [ 77.969627][ T6713] syzkaller0: entered allmulticast mode [ 78.125953][ T6722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6722 comm=syz.1.274 [ 79.010852][ T6724] delete_channel: no stack [ 79.060078][ T6732] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 79.084898][ T6734] SELinux: Context system_u:object_r:load_policy_exec_t:s0 is not valid (left unmapped). [ 79.126257][ T5996] IPVS: starting estimator thread 0... [ 79.137426][ T6737] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 79.153609][ T6737] tmpfs: User quota block hardlimit too large. [ 79.158403][ T6737] IPVS: sed: FWM 3 0x00000003 - no destination available [ 79.186622][ T6747] sctp: [Deprecated]: syz.2.285 (pid 6747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.186622][ T6747] Use struct sctp_sack_info instead [ 79.226478][ T6757] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.237918][ T6740] IPVS: using max 42 ests per chain, 100800 per kthread [ 79.256079][ T6750] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.284'. [ 79.261175][ T6750] netlink: ct family unspecified [ 79.489128][ T6767] syzkaller0: entered promiscuous mode [ 79.491043][ T6767] syzkaller0: entered allmulticast mode [ 79.685710][ T6779] 9p: Could not find request transport: virti [ 79.704713][ T6779] overlay: ./bus is not a directory [ 79.787702][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 79.787718][ T40] audit: type=1400 audit(1776275691.435:407): avc: denied { write } for pid=6782 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.847168][ T40] audit: type=1400 audit(1776275691.485:408): avc: denied { read } for pid=6782 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.498310][ T40] audit: type=1400 audit(1776275692.145:409): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.550828][ T6791] tmpfs: Bad value for 'mpol' [ 80.551126][ T40] audit: type=1400 audit(1776275692.195:410): avc: denied { mounton } for pid=6789 comm="syz.0.296" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 80.701873][ T40] audit: type=1400 audit(1776275692.345:411): avc: denied { create } for pid=6808 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.750456][ T40] audit: type=1400 audit(1776275692.395:412): avc: denied { getopt } for pid=6808 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.764333][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.295'. [ 80.801461][ T5942] Bluetooth: hci0: unexpected subevent 0x18 length: 25 > 19 [ 80.801585][ T5942] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 80.860035][ T6826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.305'. [ 80.868841][ T40] audit: type=1400 audit(1776275692.515:413): avc: denied { create } for pid=6821 comm="syz.0.303" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.878954][ T40] audit: type=1400 audit(1776275692.515:414): avc: denied { ioctl } for pid=6821 comm="syz.0.303" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15518 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.905024][ T40] audit: type=1400 audit(1776275692.545:415): avc: denied { getopt } for pid=6829 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.927978][ T40] audit: type=1400 audit(1776275692.575:416): avc: denied { mounton } for pid=6821 comm="syz.0.303" path="/file0" dev="ramfs" ino=14116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 81.015403][ T6839] EXT4-fs: Conflicting test_dummy_encryption options [ 81.043383][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 81.049979][ T6844] netlink: 'syz.0.310': attribute type 18 has an invalid length. [ 81.053521][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 81.069207][ T6844] netlink: 104 bytes leftover after parsing attributes in process `syz.0.310'. [ 81.155178][ T6851] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 81.166969][ T6851] warning: `syz.0.312' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.240525][ T6855] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.248873][ T6855] CIFS mount error: No usable UNC path provided in device string! [ 81.248873][ T6855] [ 81.252090][ T6855] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.309836][ T6857] "syz.0.315" (6857) uses obsolete ecb(arc4) skcipher [ 81.438350][ T6885] netlink: 56 bytes leftover after parsing attributes in process `syz.3.321'. [ 81.647808][ T6906] netlink: 44 bytes leftover after parsing attributes in process `syz.3.326'. [ 81.679936][ T6906] QAT: Device 2 not found [ 81.752101][ T6915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.861354][ T6919] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.864259][ T6919] overlayfs: failed to set xattr on upper [ 81.866129][ T6919] overlayfs: ...falling back to redirect_dir=nofollow. [ 81.868577][ T6919] overlayfs: ...falling back to index=off. [ 81.870600][ T6919] overlayfs: ...falling back to uuid=null. [ 81.874470][ T6919] overlayfs: conflicting options: userxattr,metacopy=on [ 82.008425][ T6930] xt_hashlimit: size too large, truncated to 1048576 [ 82.008816][ T6929] xt_hashlimit: size too large, truncated to 1048576 [ 82.054485][ T6927] orangefs_devreq_write_iter: total:6: must be at least:8240: [ 82.109456][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.337'. [ 82.352936][ T6949] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 82.356814][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.362561][ T6949] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 82.442293][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.342'. [ 82.447322][ T6572] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.617129][ T6572] usb 5-1: Using ep0 maxpacket: 8 [ 82.622626][ T6572] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 82.627724][ T6572] usb 5-1: config 179 has no interface number 0 [ 82.630705][ T6572] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 82.634954][ T6572] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 82.640418][ T6572] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 82.650174][ T6572] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 82.657278][ T6572] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 82.661795][ T6572] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 82.664905][ T6572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.665000][ T6974] xt_hashlimit: size too large, truncated to 1048576 [ 82.687786][ T6944] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.696663][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'. [ 82.789024][ T6983] input: syz1 as /devices/virtual/input/input5 [ 82.910950][ T6572] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input6 [ 82.941170][ T6988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6988 comm=syz.2.353 [ 83.286783][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 83.286879][ T1028] usb 5-1: USB disconnect, device number 2 [ 83.790420][ T7028] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 83.985269][ T7045] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 83.995684][ T7045] bond1 (unregistering): Released all slaves [ 84.032776][ T7048] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 84.035604][ T7048] overlayfs: failed to set xattr on upper [ 84.040088][ T7048] overlayfs: ...falling back to redirect_dir=nofollow. [ 84.043203][ T7048] overlayfs: ...falling back to index=off. [ 84.045240][ T7048] overlayfs: ...falling back to uuid=null. [ 84.049478][ T7048] overlayfs: ...falling back to xino=off. [ 84.051438][ T7048] overlayfs: conflicting lowerdir path [ 84.184065][ T7069] xt_hashlimit: size too large, truncated to 1048576 [ 84.252928][ T7077] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 84.259588][ T7077] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 84.477159][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.494166][ T7086] SELinux: syz.1.386 (7086) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 84.562687][ T7095] syzkaller0: entered promiscuous mode [ 84.564469][ T7095] syzkaller0: entered allmulticast mode [ 84.627144][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 84.632039][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 84.634887][ T9] usb 5-1: config 179 has no interface number 0 [ 84.637152][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 84.640685][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 84.644226][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 84.647874][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 84.651720][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.656404][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 84.660368][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.668916][ T7073] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.882541][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 84.882560][ T40] audit: type=1400 audit(1776275696.525:491): avc: denied { create } for pid=7102 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.882651][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input7 [ 84.900217][ T40] audit: type=1400 audit(1776275696.545:492): avc: denied { ioctl } for pid=7102 comm="syz.3.392" path="socket:[12967]" dev="sockfs" ino=12967 ioctlcmd=0x6e8b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.919335][ T40] audit: type=1400 audit(1776275696.565:493): avc: denied { search } for pid=7105 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.938014][ T40] audit: type=1400 audit(1776275696.565:494): avc: denied { search } for pid=7105 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.951926][ T40] audit: type=1400 audit(1776275696.565:495): avc: denied { search } for pid=7105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.961345][ T40] audit: type=1400 audit(1776275696.565:496): avc: denied { search } for pid=7105 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.970970][ T40] audit: type=1400 audit(1776275696.575:497): avc: denied { read open } for pid=7106 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.981479][ T40] audit: type=1400 audit(1776275696.575:498): avc: denied { getattr } for pid=7106 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.990175][ T40] audit: type=1400 audit(1776275696.595:499): avc: denied { add_name } for pid=7105 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.997481][ T40] audit: type=1400 audit(1776275696.595:500): avc: denied { create } for pid=7105 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.094146][ T5935] usb 5-1: USB disconnect, device number 3 [ 85.094296][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 85.100052][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 85.167134][ T6017] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 85.321025][ T6017] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 85.324724][ T6017] usb 8-1: config 0 has no interface number 0 [ 85.334153][ T6017] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 85.338891][ T6017] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 85.342517][ T6017] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 85.346974][ T6017] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 85.350543][ T6017] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 85.353299][ T6017] usb 8-1: Product: syz [ 85.354742][ T6017] usb 8-1: SerialNumber: syz [ 85.358983][ T6017] usb 8-1: config 0 descriptor?? [ 85.365541][ T6017] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 85.369985][ T6017] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input8 [ 85.565354][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 85.778244][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 85.780487][ T6017] usb 8-1: USB disconnect, device number 2 [ 85.780558][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 85.804919][ T6017] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 86.212022][ T7200] __nla_validate_parse: 71 callbacks suppressed [ 86.212036][ T7200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.414'. [ 86.390439][ T7209] loop5: detected capacity change from 0 to 7 [ 86.397474][ T7209] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 86.399845][ T7209] loop5: partition table partially beyond EOD, truncated [ 86.403613][ T7209] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 86.407156][ T7209] loop5: p2 start 832840281 is beyond EOD, truncated [ 86.437364][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 86.554748][ T7227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.077890][ T39] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 87.227097][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 87.230225][ T39] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.233776][ T39] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.236969][ T39] usb 8-1: config 0 interface 0 has no altsetting 0 [ 87.239401][ T39] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 87.242271][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.247813][ T39] usb 8-1: config 0 descriptor?? qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xc4000) [ 87.511113][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 87.514095][ T1116] ata1: failed to read log page 10h (errno=-5) [ 87.517166][ T1116] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 87.520078][ T1116] ata1.00: irq_stat 0x40000000 [ 87.521761][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 87.523945][ T1116] ata1.00: cmd 61/20:70:ce:1a:08/06:00:00:00:00/40 tag 14 ncq dma 802816 out [ 87.523945][ T1116] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 87.529731][ T1116] ata1.00: status: { DRDY } [ 87.531287][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 87.533313][ T1116] ata1.00: cmd 61/d0:78:ee:20:08/02:00:00:00:00/40 tag 15 ncq dma 368640 out [ 87.533313][ T1116] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 87.539268][ T1116] ata1.00: status: { DRDY } [ 87.542540][ T1116] ata1.00: configured for UDMA/100 [ 87.545132][ T1116] ata1: EH complete [ 87.673742][ T29] cfg80211: failed to load regulatory.db [ 88.501674][ T7261] loop5: detected capacity change from 0 to 7 [ 88.506706][ T7261] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 88.510291][ T7261] loop5: partition table partially beyond EOD, truncated [ 88.513297][ T7261] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 88.518640][ T7261] loop5: p2 start 832840281 is beyond EOD, truncated [ 88.542868][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 88.727357][ T7271] ======================================================= [ 88.727357][ T7271] WARNING: The mand mount option has been deprecated and [ 88.727357][ T7271] and is ignored by this kernel. Remove the mand [ 88.727357][ T7271] option from the mount to silence this warning. [ 88.727357][ T7271] ======================================================= [ 88.790621][ T7277] erofs (device loop0): cannot find valid erofs superblock [ 88.868191][ T62] Bluetooth: hci3: command 0x0405 tx timeout [ 88.912623][ T7288] loop5: detected capacity change from 0 to 7 [ 88.916168][ T7288] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 88.919475][ T7288] loop5: partition table partially beyond EOD, truncated [ 88.923402][ T7288] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 88.926825][ T7288] loop5: p2 start 832840281 is beyond EOD, truncated [ 88.964701][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 89.198532][ T7319] nfs4: Unknown parameter 'rdmºªÜš Vh`¯Í' [ 89.201154][ T7319] openvswitch: netlink: Key type 51 is out of range max 32 [ 89.332521][ T7327] fuse: Bad value for 'fd' [ 89.333322][ T7328] fuse: Bad value for 'fd' [ 89.379308][ T5996] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.527143][ T5996] usb 5-1: Using ep0 maxpacket: 8 [ 89.534561][ T5996] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 89.538190][ T5996] usb 5-1: config 179 has no interface number 0 [ 89.541061][ T5996] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 89.546165][ T5996] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 89.550901][ T5996] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 70, changing to 10 [ 89.555603][ T5996] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 89.560846][ T5996] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.566528][ T5996] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 89.570899][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.582678][ T7310] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 89.595845][ T7337] syzkaller0: entered promiscuous mode [ 89.598187][ T7337] syzkaller0: entered allmulticast mode [ 89.796104][ T7342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7342 comm=syz.1.465 [ 89.803908][ T39] usbhid 8-1:0.0: can't add hid device: -71 [ 89.807468][ T39] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 89.814732][ T39] usb 8-1: USB disconnect, device number 3 [ 89.841107][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 89.861667][ T7346] loop5: detected capacity change from 0 to 7 [ 89.865136][ T7346] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 89.869383][ T7346] loop5: partition table partially beyond EOD, truncated [ 89.873089][ T7346] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 89.876881][ T7346] loop5: p2 start 832840281 is beyond EOD, truncated [ 89.912346][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 89.950991][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 89.951079][ T40] audit: type=1400 audit(1776275701.585:533): avc: denied { read } for pid=7350 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.995195][ T40] audit: type=1400 audit(1776275701.635:534): avc: denied { create } for pid=7309 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.014188][ T6017] usb 5-1: USB disconnect, device number 4 [ 90.014246][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 90.018891][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 90.026157][ T40] audit: type=1400 audit(1776275701.635:535): avc: denied { getopt } for pid=7309 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.035720][ T40] audit: type=1400 audit(1776275701.645:536): avc: denied { accept } for pid=7350 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.107332][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 90.316001][ T7372] syzkaller0: entered promiscuous mode [ 90.318886][ T7372] syzkaller0: entered allmulticast mode [ 90.559707][ T7380] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 90.593362][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.474'. [ 90.617731][ T7382] gretap1: entered promiscuous mode [ 90.621722][ T7382] batman_adv: batadv0: Adding interface: gretap1 [ 90.624332][ T7382] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 90.635700][ T7382] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 90.660076][ T7385] capability: warning: `syz.0.475' uses deprecated v2 capabilities in a way that may be insecure [ 90.783331][ T7397] netlink: 'syz.0.480': attribute type 64 has an invalid length. [ 90.784763][ T40] audit: type=1400 audit(1776275702.425:537): avc: denied { write } for pid=7395 comm="syz.0.480" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.786194][ T7397] netlink: 'syz.0.480': attribute type 4 has an invalid length. [ 90.799098][ T40] audit: type=1400 audit(1776275702.425:538): avc: denied { ioctl } for pid=7395 comm="syz.0.480" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.799908][ T7397] netlink: 152 bytes leftover after parsing attributes in process `syz.0.480'. [ 90.828232][ T7397] input: syz1 as /devices/virtual/input/input9 [ 90.838525][ T40] audit: type=1400 audit(1776275702.475:539): avc: denied { read } for pid=5322 comm="acpid" name="event4" dev="devtmpfs" ino=2920 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.848718][ T40] audit: type=1400 audit(1776275702.475:540): avc: denied { open } for pid=5322 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2920 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.857576][ T40] audit: type=1400 audit(1776275702.475:541): avc: denied { ioctl } for pid=5322 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2920 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.898576][ T7404] 9pnet_fd: p9_fd_create_unix (7404): problem connecting socket: ./file0: -111 [ 90.903476][ T40] audit: type=1400 audit(1776275702.545:542): avc: denied { getopt } for pid=7403 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 90.912430][ T7404] xt_CONNSECMARK: invalid mode: 0 [ 91.087161][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 91.217317][ T7435] netlink: 868 bytes leftover after parsing attributes in process `syz.2.494'. [ 91.247255][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 91.251132][ T7438] netlink: 52 bytes leftover after parsing attributes in process `syz.2.495'. [ 91.253390][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 91.257682][ T10] usb 6-1: config 179 has no interface number 0 [ 91.261498][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 91.266340][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 91.271972][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.276841][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 91.286029][ T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 91.292266][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 91.296769][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.318295][ T7402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.470180][ T7451] loop5: detected capacity change from 0 to 7 [ 91.490821][ T7451] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 91.493973][ T7451] loop5: partition table partially beyond EOD, truncated [ 91.497707][ T7451] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 91.499433][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.502'. [ 91.504020][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.502'. [ 91.505631][ T7451] loop5: p2 start 832840281 is beyond EOD, truncated [ 91.545900][ T7457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7457 comm=syz.2.505 [ 91.556933][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input10 [ 91.576792][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 91.664993][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'. [ 91.673534][ T7470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.508'. [ 91.695255][ T7470] ufs: You didn't specify the type of your ufs filesystem [ 91.695255][ T7470] [ 91.695255][ T7470] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 91.695255][ T7470] [ 91.695255][ T7470] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 91.705920][ T7470] ufs: failed to set blocksize [ 91.788248][ T1025] usb 6-1: USB disconnect, device number 2 [ 91.788285][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 91.794312][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 91.971724][ T7493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.975589][ T7493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.988608][ T7496] mac80211_hwsim hwsim2 ªªªªª;: renamed from wlan0 (while UP) [ 92.090844][ T7493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.094860][ T7493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.195168][ T7507] overlayfs: failed lookup in lower (newroot/136, name='bus', err=-40): overlapping layers [ 92.196026][ T7493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.214272][ T7493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.302372][ T7493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.306083][ T7493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.394365][ T7509] sp0: Synchronizing with TNC [ 92.475242][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.478518][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.490678][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.493619][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.521703][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.526180][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.530662][ T7508] [U] è [ 92.556801][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.560218][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.618872][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 92.620332][ T7515] syzkaller1: entered promiscuous mode [ 92.625769][ T7515] syzkaller1: entered allmulticast mode [ 92.927577][ T6017] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 93.067177][ T6017] usb 6-1: device descriptor read/64, error -71 [ 93.307192][ T6017] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 93.437408][ T6017] usb 6-1: device descriptor read/64, error -71 [ 93.547452][ T6017] usb usb6-port1: attempt power cycle [ 93.897160][ T6017] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 93.917711][ T6017] usb 6-1: device descriptor read/8, error -71 [ 94.187209][ T6017] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 94.209529][ T6017] usb 6-1: device descriptor read/8, error -71 [ 94.330860][ T6017] usb usb6-port1: unable to enumerate USB device [ 94.456541][ T7572] capability: warning: `syz.3.540' uses 32-bit capabilities (legacy support in use) [ 94.515942][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 94.673818][ T7585] netlink: 'syz.3.544': attribute type 7 has an invalid length. [ 94.684126][ T7585] syz.3.544: attempt to access beyond end of device [ 94.684126][ T7585] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 94.688497][ T7585] gfs2: error -5 reading superblock [ 94.744431][ T7587] syzkaller0: entered promiscuous mode [ 94.746794][ T7587] syzkaller0: entered allmulticast mode [ 94.999581][ T7599] overlayfs: failed to resolve 'ÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿò [ 95.429448][ T62] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 95.471824][ T62] Bluetooth: hci2: Injecting HCI hardware error event [ 95.475978][ T5942] Bluetooth: hci2: hardware error 0x00 [ 95.478999][ T7601] xt_hashlimit: size too large, truncated to 1048576 [ 95.556310][ T7613] xt_hashlimit: max too large, truncated to 1048576 [ 95.562807][ T7613] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 95.618210][ T7619] new mount options do not match the existing superblock, will be ignored [ 95.625879][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 95.630584][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 95.630599][ T40] audit: type=1400 audit(1776275707.275:572): avc: denied { read } for pid=7618 comm="syz.2.556" path="socket:[16920]" dev="sockfs" ino=16920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.776806][ T7631] tmpfs: Unknown parameter 'grpquotaªªª»' [ 95.785184][ T40] audit: type=1400 audit(1776275707.425:573): avc: denied { append } for pid=7632 comm="syz.1.559" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.795371][ T7633] fuse: Bad value for 'group_id' [ 95.797329][ T7633] fuse: Bad value for 'group_id' [ 95.914752][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 96.411206][ T7621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.489638][ T40] audit: type=1400 audit(1776275708.135:574): avc: denied { setopt } for pid=7654 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.495774][ T40] audit: type=1400 audit(1776275708.135:575): avc: denied { ioctl } for pid=7654 comm="syz.2.566" path="socket:[18656]" dev="sockfs" ino=18656 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.582721][ T7668] ALSA: seq fatal error: cannot create timer (-19) [ 96.625402][ T7678] 9pnet_fd: Insufficient options for proto=fd [ 96.670098][ T7683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.673390][ T7683] IPv6: NLM_F_CREATE should be set when creating new route [ 96.675665][ T7683] IPv6: NLM_F_CREATE should be set when creating new route [ 96.678254][ T7683] IPv6: NLM_F_CREATE should be set when creating new route [ 96.683726][ T7683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.923859][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 96.926696][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'. [ 96.933853][ T40] audit: type=1400 audit(1776275708.575:576): avc: denied { kexec_image_load } for pid=7705 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 96.946187][ T40] audit: type=1400 audit(1776275708.585:577): avc: denied { name_bind 0x1000000 } for pid=7705 comm="syz.2.579" path="socket:[16978]" dev="sockfs" ino=16978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.048183][ T7718] xt_TPROXY: Can be used only with -p tcp or -p udp [ 97.509640][ T5942] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 97.556163][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'. [ 97.561793][ T7726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.587'. [ 97.568105][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.587'. [ 97.613065][ T40] audit: type=1400 audit(1776275709.255:578): avc: denied { create } for pid=7728 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 97.617921][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.588'. [ 97.619608][ T40] audit: type=1400 audit(1776275709.265:579): avc: denied { write } for pid=7728 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 97.649469][ T7729] bond1: entered promiscuous mode [ 97.651835][ T7729] bond1: entered allmulticast mode [ 97.706421][ T7732] can0: slcan on ttyS3. [ 97.770221][ T7732] can0 (unregistered): slcan off ttyS3. [ 97.840926][ T40] audit: type=1400 audit(1776275709.485:580): avc: denied { setopt } for pid=7731 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 97.895707][ T7750] loop5: detected capacity change from 0 to 7 [ 97.907970][ T7750] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 97.917590][ T7750] loop5: partition table partially beyond EOD, truncated [ 97.929901][ T7750] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 97.939784][ T7750] loop5: p2 start 832840281 is beyond EOD, truncated [ 98.000718][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 98.033003][ T40] audit: type=1400 audit(1776275709.675:581): avc: denied { connect } for pid=7761 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.046005][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 98.050047][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 98.053719][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 98.107214][ T7770] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.599'. [ 98.112162][ T7770] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 98.224829][ T7770] binder: BINDER_SET_CONTEXT_MGR already set [ 98.227949][ T7770] binder: 7769:7770 ioctl 4018620d 200000004a80 returned -16 [ 98.383488][ T7798] loop5: detected capacity change from 0 to 7 [ 98.388650][ T7798] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 98.394858][ T7798] loop5: partition table partially beyond EOD, truncated [ 98.398210][ T7798] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 98.401805][ T7798] loop5: p2 start 832840281 is beyond EOD, truncated [ 98.433942][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 98.461140][ T7807] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 98.480451][ T7807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.563379][ T7815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.563842][ T7816] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.760826][ T7834] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.763996][ T7834] overlayfs: failed to set xattr on upper [ 98.769300][ T7834] overlayfs: ...falling back to redirect_dir=nofollow. [ 98.773103][ T7834] overlayfs: ...falling back to index=off. [ 98.788459][ T7834] overlayfs: ...falling back to uuid=null. [ 98.790676][ T7834] overlayfs: maximum fs stacking depth exceeded [ 98.974498][ T7850] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 98.978041][ T7850] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 98.980834][ T7850] netlink: 'syz.2.623': attribute type 8 has an invalid length. [ 98.983901][ T7850] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 99.284640][ T7866] overlayfs: failed to clone upperpath [ 99.401889][ T7876] [U] zÍ»´iœùÊý®Ò[27| [ 99.405518][ T7876] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 99.411174][ T7876] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 99.414155][ T7876] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 99.428306][ T7876] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 99.430912][ T7876] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 99.432978][ T7876] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 99.435060][ T7876] [U] ‰ϼcEv‹û @ý [ 99.436482][ T7876] [U] aÆ„% [ 99.438063][ T7876] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 99.450193][ T7876] [U] éf1Ïp±3 [ 99.451735][ T7876] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 99.454300][ T7876] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 99.461995][ T7875] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n [ 99.694663][ T7879] syzkaller0: entered promiscuous mode [ 99.696429][ T7879] syzkaller0: entered allmulticast mode [ 99.762423][ T7882] usb usb9: usbfs: process 7882 (syz.0.634) did not claim interface 10 before use [ 99.778767][ T7884] smc: net device bond0 applied user defined pnetid SYZ2 [ 99.791420][ T7884] smc: removing net device bond0 with user defined pnetid SYZ2 [ 99.809970][ T7884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.830370][ T7884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.844506][ T7884] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 99.855453][ T7884] bond0 (unregistering): Released all slaves [ 99.955544][ T7895] loop5: detected capacity change from 0 to 7 [ 99.958697][ T7895] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 99.961230][ T7895] loop5: partition table partially beyond EOD, truncated [ 99.964285][ T7895] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 99.968182][ T7895] loop5: p2 start 832840281 is beyond EOD, truncated [ 99.993833][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.097260][ T1025] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 100.213572][ T7906] bridge_slave_0: left allmulticast mode [ 100.215422][ T7906] bridge_slave_0: left promiscuous mode [ 100.219426][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.226418][ T7906] bridge_slave_1: left allmulticast mode [ 100.231797][ T7906] bridge_slave_1: left promiscuous mode [ 100.233790][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.241114][ T7906] bond0: (slave bond_slave_0): Releasing backup interface [ 100.252911][ T7906] bond0: (slave bond_slave_1): Releasing backup interface [ 100.258898][ T1025] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 100.262144][ T1025] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.265722][ T1025] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.269967][ T1025] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.271412][ T7906] team0: Port device team_slave_0 removed [ 100.274879][ T1025] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.280456][ T1025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.282967][ T7906] team0: Port device team_slave_1 removed [ 100.290541][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.293748][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.295128][ T1025] usb 8-1: config 0 descriptor?? [ 100.303685][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.307984][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.313428][ T7906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.321192][ T6017] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 100.404381][ T7914] syzkaller0: entered promiscuous mode [ 100.406225][ T7914] syzkaller0: entered allmulticast mode [ 100.477144][ T6017] usb 6-1: Using ep0 maxpacket: 16 [ 100.481545][ T6017] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 100.484232][ T6017] usb 6-1: config 0 has no interface number 0 [ 100.486216][ T6017] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.490539][ T6017] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 100.498344][ T6017] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 100.501482][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 100.503972][ T6017] usb 6-1: Product: syz [ 100.505278][ T6017] usb 6-1: SerialNumber: syz [ 100.517244][ T6017] usb 6-1: config 0 descriptor?? [ 100.530214][ T6017] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 100.536982][ T6017] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input11 [ 100.554719][ T7923] loop5: detected capacity change from 0 to 7 [ 100.558423][ T7923] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 100.560951][ T7923] loop5: partition table partially beyond EOD, truncated [ 100.564232][ T7923] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 100.569602][ T7923] loop5: p2 start 832840281 is beyond EOD, truncated [ 100.615613][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.645792][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 100.645805][ T40] audit: type=1400 audit(1776275712.285:593): avc: denied { execute } for pid=7929 comm="syz.0.654" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.656716][ T40] audit: type=1400 audit(1776275712.285:592): avc: denied { map } for pid=7929 comm="syz.0.654" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.668613][ T40] audit: type=1400 audit(1776275712.315:594): avc: denied { getopt } for pid=7926 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.759205][ T40] audit: type=1400 audit(1776275712.395:595): avc: denied { read } for pid=7896 comm="syz.1.641" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 100.769283][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.776210][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.777180][ T40] audit: type=1400 audit(1776275712.395:596): avc: denied { open } for pid=7896 comm="syz.1.641" path="/126/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 100.778686][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.788436][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.788449][ T1028] usb 6-1: USB disconnect, device number 7 [ 100.789734][ T1025] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 100.791068][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 100.804333][ T1028] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 100.851821][ T1025] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 100.879283][ T7943] overlayfs: missing 'lowerdir' qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa0000) [ 100.939451][ T7946] netlink: 'syz.0.656': attribute type 21 has an invalid length. [ 100.942772][ T7946] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.951460][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 100.953717][ T1116] ata1: failed to read log page 10h (errno=-5) [ 100.955797][ T1116] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 100.958321][ T1116] ata1.00: irq_stat 0x41000008 [ 100.959983][ T1116] ata1.00: failed command: READ FPDMA QUEUED [ 100.961932][ T1116] ata1.00: cmd 60/00:f0:9e:8b:03/05:00:00:00:00/40 tag 30 ncq dma 655360 in [ 100.961932][ T1116] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 100.967802][ T1116] ata1.00: status: { DRDY } [ 100.969437][ T1116] ata1.00: error: { ABRT } [ 100.981055][ T1116] ata1.00: configured for UDMA/100 [ 100.983072][ T1116] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 100.986261][ T1116] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 100.989104][ T1116] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 100.992452][ T1116] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 03 8b 9e 00 05 00 00 [ 100.995039][ T1116] I/O error, dev sda, sector 232350 op 0x0:(READ) flags 0x80700 phys_seg 156 prio class 2 [ 100.998760][ T1116] ata1: EH complete [ 101.012871][ T40] audit: type=1400 audit(1776275712.655:597): avc: denied { append } for pid=7889 comm="syz.3.639" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.021271][ T40] audit: type=1400 audit(1776275712.665:598): avc: denied { execute } for pid=7889 comm="syz.3.639" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.022498][ T10] usb 8-1: USB disconnect, device number 4 [ 101.079337][ T7953] syzkaller0: entered promiscuous mode [ 101.081221][ T7953] syzkaller0: entered allmulticast mode [ 101.330053][ T40] audit: type=1400 audit(1776275712.975:599): avc: denied { create } for pid=7958 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.337452][ T40] audit: type=1400 audit(1776275712.975:600): avc: denied { getopt } for pid=7958 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.343980][ T40] audit: type=1400 audit(1776275712.975:601): avc: denied { create } for pid=7958 comm="syz.1.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 101.354609][ T7962] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.412806][ T7964] loop5: detected capacity change from 0 to 7 [ 101.419998][ T7964] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 101.423476][ T7964] loop5: partition table partially beyond EOD, truncated [ 101.430672][ T7964] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 101.436963][ T7964] loop5: p2 start 832840281 is beyond EOD, truncated [ 101.463841][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 101.526083][ T7979] syzkaller0: entered promiscuous mode [ 101.527977][ T7979] syzkaller0: entered allmulticast mode [ 101.645578][ T7992] xt_l2tp: missing protocol rule (udp|l2tpip) [ 101.696187][ T7998] loop5: detected capacity change from 0 to 7 [ 101.707520][ T7998] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 101.714199][ T7998] loop5: partition table partially beyond EOD, truncated [ 101.717412][ T7998] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 101.721329][ T7998] loop5: p2 start 832840281 is beyond EOD, truncated [ 101.753452][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 101.880121][ T8015] syzkaller0: entered promiscuous mode [ 101.882096][ T8015] syzkaller0: entered allmulticast mode [ 102.207898][ T8038] kvm: kvm [8035]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4a56 [ 102.232894][ T8038] kvm: kvm [8035]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 102.236263][ T8038] kvm: kvm [8035]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 102.246852][ T8038] kvm: kvm [8035]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x40 [ 102.288703][ T8054] syzkaller0: entered promiscuous mode [ 102.290742][ T8054] syzkaller0: entered allmulticast mode [ 102.479915][ T8071] netlink: 'syz.3.697': attribute type 1 has an invalid length. [ 102.495159][ T8071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.511811][ T8071] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 102.519728][ T8071] bond4 (unregistering): Released all slaves [ 102.627276][ T5942] Bluetooth: hci1: command tx timeout [ 102.678714][ T8082] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 103.462443][ T8096] syzkaller0: entered promiscuous mode [ 103.464668][ T8096] syzkaller0: entered allmulticast mode [ 103.497828][ T8102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.579836][ T8114] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 103.584529][ T8114] Bluetooth: MGMT ver 1.23 [ 103.591144][ T8114] xt_recent: Unsupported userspace flags (000000b2) [ 103.596818][ T8118] __nla_validate_parse: 14 callbacks suppressed [ 103.596832][ T8118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.714'. [ 103.659513][ T8118] smc: adding net device bond0 with user defined pnetid SYZ2 [ 103.693717][ T8126] macvtap0: entered allmulticast mode [ 103.695517][ T8126] veth0_macvtap: entered allmulticast mode [ 103.700261][ T8126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.741730][ T8132] NILFS (nullb0): couldn't find nilfs on the device [ 103.754467][ T8132] veth0_to_team: entered promiscuous mode [ 103.761265][ T8132] veth0_to_team: left promiscuous mode [ 103.907412][ T8159] loop5: detected capacity change from 0 to 7 [ 103.910613][ T8159] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 103.914336][ T8159] loop5: partition table partially beyond EOD, truncated [ 103.916917][ T8159] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 103.920540][ T8159] loop5: p2 start 832840281 is beyond EOD, truncated [ 103.956726][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 104.515617][ T8207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8207 comm=syz.2.741 [ 104.521354][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 104.551310][ T8207] bond3 (unregistering): Released all slaves [ 104.855205][ T8210] bond1: option mode: unable to set because the bond device has slaves [ 104.867493][ T8210] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.871269][ T8210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.904680][ T8213] delete_channel: no stack [ 104.941998][ T8215] IPv6: syztnl0: Disabled Multicast RS [ 105.029670][ T8223] bond1: Unable to set down delay as MII monitoring is disabled [ 105.033276][ T8223] bond1 (unregistering): Released all slaves [ 105.058423][ T8230] syzkaller0: entered promiscuous mode [ 105.060608][ T8230] syzkaller0: entered allmulticast mode [ 105.114051][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 105.114051][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 105.114087][ T8233] netlink: 'syz.0.751': attribute type 3 has an invalid length. [ 105.116961][ T8234] netlink: 'syz.0.751': attribute type 3 has an invalid length. [ 105.120746][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 105.122217][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 105.125362][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 105.128136][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 105.131428][ T8233] netlink: 'syz.0.751': attribute type 3 has an invalid length. [ 105.134156][ T8234] netlink: 'syz.0.751': attribute type 3 has an invalid length. [ 105.142091][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 105.145513][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 105.207897][ T8239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8239 comm=syz.0.753 [ 105.327980][ T8253] overlayfs: failed to clone upperpath [ 105.437206][ T10] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 105.598511][ T10] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 47814, setting to 64 [ 105.602193][ T8268] wireguard0: entered allmulticast mode [ 105.602236][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 105.610989][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.613984][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.616745][ T10] usb 8-1: Product: syz [ 105.618259][ T10] usb 8-1: Manufacturer: syz [ 105.619851][ T10] usb 8-1: SerialNumber: syz [ 105.628796][ T10] usb 8-1: config 0 descriptor?? [ 105.637692][ T10] usb 8-1: selecting invalid altsetting 0 [ 105.846597][ T10] usb 8-1: USB disconnect, device number 5 [ 105.870645][ T8281] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 106.009972][ T8277] sctp: [Deprecated]: syz.0.767 (pid 8277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.009972][ T8277] Use struct sctp_sack_info instead [ 106.056850][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 106.056869][ T40] audit: type=1400 audit(1776275717.695:688): avc: denied { connect } for pid=8294 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.059058][ T8295] bond0: entered promiscuous mode [ 106.070246][ T8295] batadv0: entered promiscuous mode [ 106.089354][ T8295] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 106.093535][ T8295] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 106.097813][ T8295] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 106.101936][ T8295] bond0: left promiscuous mode [ 106.108541][ T8295] batadv0: left promiscuous mode [ 106.143334][ T40] audit: type=1400 audit(1776275717.785:689): avc: denied { load_policy } for pid=8302 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 106.144695][ T8303] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 106.155434][ T8303] SELinux: failed to load policy [ 106.183558][ T8308] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 106.349196][ T40] audit: type=1400 audit(1776275717.995:690): avc: denied { write } for pid=8317 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.363123][ T8316] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.416014][ T8323] batadv_slave_1: entered promiscuous mode [ 106.426393][ T208] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.431696][ T208] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.436241][ T208] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.439286][ T208] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.480255][ T8320] batadv_slave_1: left promiscuous mode [ 106.522396][ T8336] UHID_CREATE from different security context by process 388 (syz.1.781), this is not allowed. [ 106.830005][ T8352] loop5: detected capacity change from 0 to 7 [ 106.835748][ T8352] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 106.839952][ T8352] loop5: partition table partially beyond EOD, truncated [ 106.859606][ T8352] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 106.874330][ T8352] loop5: p2 start 832840281 is beyond EOD, truncated [ 106.942084][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 106.974660][ T40] audit: type=1400 audit(1776275718.615:691): avc: denied { add_name } for pid=8357 comm="syz.0.789" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.981996][ T40] audit: type=1400 audit(1776275718.615:692): avc: denied { create } for pid=8357 comm="syz.0.789" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.990166][ T40] audit: type=1400 audit(1776275718.615:693): avc: denied { associate } for pid=8357 comm="syz.0.789" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.999931][ T40] audit: type=1400 audit(1776275718.645:694): avc: denied { read append open } for pid=8357 comm="syz.0.789" path="/164/file0/cpuset.effective_cpus" dev="9p" ino=80478437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.062444][ T8369] ISOFS: Unable to identify CD-ROM format. [ 107.072109][ T40] audit: type=1400 audit(1776275718.715:695): avc: denied { ioctl } for pid=8373 comm="syz.3.794" path="socket:[21706]" dev="sockfs" ino=21706 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.277407][ T5942] Bluetooth: hci0: command tx timeout [ 107.396735][ T40] audit: type=1400 audit(1776275719.035:696): avc: denied { create } for pid=8394 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.495065][ T40] audit: type=1400 audit(1776275719.135:697): avc: denied { getattr } for pid=8401 comm="syz.1.801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.697726][ T8417] overlay: Unknown parameter 'dont_measure' [ 107.818535][ T29] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 107.910468][ T8435] trusted_key: syz.2.810 sent an empty control message without MSG_MORE. [ 107.932124][ T8431] syz.0.811 (8431) used greatest stack depth: 19336 bytes left [ 107.941047][ T8430] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 107.945275][ T8430] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 107.949912][ T8430] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 107.999086][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.007108][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.011721][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.014805][ T8438] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 108.017921][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.021787][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.026310][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.032207][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.034825][ T29] usb 6-1: Product: syz [ 108.036415][ T29] usb 6-1: Manufacturer: syz [ 108.046779][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 108.050281][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 108.059741][ T29] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 108.061741][ T29] cdc_wdm 6-1:1.0: Unknown control protocol [ 108.247903][ T8410] cdc_wdm 6-1:1.0: Error submitting int urb - -90 [ 108.748923][ T8456] syz.3.817 uses old SIOCAX25GETINFO [ 109.085469][ T8469] netlink: 'syz.3.819': attribute type 2 has an invalid length. [ 109.243589][ T8484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23736 sclass=netlink_route_socket pid=8484 comm=syz.0.822 [ 109.513338][ T8492] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.716399][ T8518] __nla_validate_parse: 8 callbacks suppressed [ 109.716413][ T8518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.829'. [ 109.844070][ T8523] netlink: 'syz.3.829': attribute type 1 has an invalid length. [ 109.853718][ T8523] netlink: 'syz.3.829': attribute type 1 has an invalid length. [ 110.540741][ T8553] tipc: Invalid UDP bearer configuration [ 110.540771][ T8553] tipc: Enabling of bearer rejected, failed to enable media [ 110.566133][ T8555] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.571714][ T8557] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 110.583336][ T8555] netlink: 68 bytes leftover after parsing attributes in process `syz.0.844'. [ 110.688988][ T8566] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 110.691515][ T8566] netlink: 224 bytes leftover after parsing attributes in process `syz.0.848'. [ 110.697385][ T39] usb 6-1: USB disconnect, device number 8 [ 110.750726][ T8575] random: crng reseeded on system resumption [ 110.787839][ T1149] bond0: (slave bond_slave_0): interface is now down [ 110.791523][ T1149] bond0: (slave bond_slave_1): interface is now down [ 110.796935][ T1149] bond0: now running without any active interface! [ 110.808346][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 110.811271][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 110.814228][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 110.819489][ T41] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 110.826854][ T41] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 110.831903][ T41] bond0: active interface up! [ 110.897783][ T8580] xt_hashlimit: size too large, truncated to 1048576 [ 110.905392][ T8587] openvswitch: netlink: Message has 4 unknown bytes. [ 110.909911][ T8587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.111813][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 111.111833][ T40] audit: type=1400 audit(1776275722.755:725): avc: denied { read } for pid=8614 comm="syz.2.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.120825][ T40] audit: type=1400 audit(1776275722.755:726): avc: denied { write } for pid=8614 comm="syz.2.861" path="socket:[21805]" dev="sockfs" ino=21805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.149915][ T8621] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 111.167964][ T8621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 111.172830][ T8620] IPVS: Error connecting to the multicast addr [ 111.180476][ T8611] bond4: entered allmulticast mode [ 111.184775][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 111.187255][ T39] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 111.191642][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 111.199462][ T8620] use of bytesused == 0 is deprecated and will be removed in the future, [ 111.204070][ T8620] use the actual size instead. [ 111.235500][ T40] audit: type=1400 audit(1776275722.875:727): avc: denied { ioctl } for pid=8626 comm="syz.1.864" path="socket:[21166]" dev="sockfs" ino=21166 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.274141][ T40] audit: type=1400 audit(1776275722.915:728): avc: denied { write } for pid=8629 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.317158][ T39] usb 5-1: device descriptor read/64, error -71 [ 111.364263][ T40] audit: type=1400 audit(1776275723.005:729): avc: denied { remove_name } for pid=8635 comm="syz.1.867" name="file0" dev="9p" ino=80478331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.373187][ T40] audit: type=1400 audit(1776275723.015:730): avc: denied { unlink } for pid=8635 comm="syz.1.867" name="file0" dev="9p" ino=80478331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.382875][ T40] audit: type=1400 audit(1776275723.025:731): avc: denied { mount } for pid=8635 comm="syz.1.867" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 111.397801][ T40] audit: type=1400 audit(1776275723.045:732): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 111.413944][ T40] audit: type=1400 audit(1776275723.055:733): avc: denied { connect } for pid=8642 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.422041][ T40] audit: type=1400 audit(1776275723.065:734): avc: denied { setopt } for pid=8642 comm="syz.3.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.510223][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.873'. [ 111.557128][ T39] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 111.687410][ T39] usb 5-1: device descriptor read/64, error -71 [ 111.797393][ T39] usb usb5-port1: attempt power cycle [ 111.979536][ T8659] kAFS: unable to lookup cell 'syz1' [ 112.137387][ T39] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 112.157559][ T39] usb 5-1: device descriptor read/8, error -71 [ 112.372188][ T8667] loop5: detected capacity change from 0 to 7 [ 112.380244][ T8667] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 112.382876][ T8667] loop5: partition table partially beyond EOD, truncated [ 112.385643][ T8667] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 112.389329][ T8667] loop5: p2 start 832840281 is beyond EOD, truncated [ 112.407403][ T39] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 112.422802][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 112.438732][ T39] usb 5-1: device descriptor read/8, error -71 [ 112.557371][ T39] usb usb5-port1: unable to enumerate USB device [ 112.696246][ T8690] netlink: 'syz.2.886': attribute type 2 has an invalid length. [ 112.700479][ T8690] tipc: Started in network mode [ 112.702642][ T8690] tipc: Node identity 1340008, cluster identity 4711 [ 112.705297][ T8690] tipc: Node number set to 20185096 [ 112.712951][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 112.728761][ T8692] loop5: detected capacity change from 0 to 7 [ 112.732751][ T8692] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 112.735140][ T8692] loop5: partition table partially beyond EOD, truncated [ 112.738250][ T8692] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 112.742089][ T8692] loop5: p2 start 832840281 is beyond EOD, truncated [ 112.768001][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 112.820602][ T8694] kernel profiling enabled (shift: 63) [ 112.825303][ T8694] profiling shift: 63 too large [ 112.830045][ T8694] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 112.845480][ T8694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.858161][ T8694] bond1: (slave geneve2): making interface the new active one [ 112.861448][ T8694] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 112.865232][ T789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 112.868640][ T789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 112.871534][ T789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 112.874702][ T789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 113.189734][ T8708] gfs2: not a GFS2 filesystem [ 113.232676][ T8710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.690090][ T8721] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 113.694092][ T8721] bond3 (unregistering): Released all slaves [ 113.979566][ T8746] block device autoloading is deprecated and will be removed. [ 113.987931][ T8744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.039249][ T8756] bond3 (unregistering): Released all slaves [ 114.187687][ T8773] batadv_slave_0: entered promiscuous mode [ 114.190944][ T8773] batadv_slave_0: entered allmulticast mode [ 114.255898][ T8782] loop5: detected capacity change from 0 to 7 [ 114.259125][ T8782] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 114.261727][ T8782] loop5: partition table partially beyond EOD, truncated [ 114.264178][ T8782] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 114.277493][ T8782] loop5: p2 start 832840281 is beyond EOD, truncated [ 114.328489][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 114.491881][ T8810] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 114.522705][ T8810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8810 comm=syz.2.925 [ 114.528149][ T8810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8810 comm=syz.2.925 [ 114.608843][ T8821] 8021q: VLANs not supported on gre0 [ 114.830791][ T8832] __nla_validate_parse: 7 callbacks suppressed [ 114.830805][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.931'. [ 114.901237][ T8840] overlayfs: missing 'lowerdir' [ 114.903454][ T8839] overlayfs: missing 'lowerdir' [ 114.987549][ T8842] delete_channel: no stack [ 115.090348][ T8861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.942'. [ 115.099718][ T8858] mmap: syz.2.940 (8858) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.134624][ T8867] netlink: 'syz.2.944': attribute type 11 has an invalid length. [ 115.138913][ T8867] netlink: 'syz.2.944': attribute type 27 has an invalid length. [ 115.165067][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.167570][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.228085][ T8867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.235382][ T8867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.281805][ T8867] ip6gre1: left promiscuous mode [ 115.283727][ T8867] ip6gre1: left allmulticast mode [ 115.286989][ T8867] gretap1: left promiscuous mode [ 115.291428][ T8867] wireguard0: left allmulticast mode [ 115.314826][ T8868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.317987][ T8868] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.322666][ T8868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.332351][ T8870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.337572][ T41] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.349505][ T41] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.356266][ T41] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.364407][ T41] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.386099][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 115.389890][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 115.469722][ T8886] syzkaller0: entered promiscuous mode [ 115.473705][ T8886] syzkaller0: entered allmulticast mode [ 115.680875][ T8913] cgroup: Name too long [ 115.712279][ T8917] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20000 [ 115.770878][ T8931] tipc: Enabling of bearer rejected, failed to enable media [ 115.838475][ T8940] fuse: Unknown parameter 'r—”!#|hoƒ' [ 115.963570][ T8950] misc userio: The device must be registered before sending interrupts [ 115.979577][ T8952] xt_TPROXY: Can be used only with -p tcp or -p udp [ 115.982801][ T8952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.970'. [ 115.997857][ T8952] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 116.072453][ T8965] sp0: Synchronizing with TNC [ 116.086546][ T8965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 116.117550][ T8967] xt_CT: No such helper "snmp_trap" [ 116.230158][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 116.230176][ T40] audit: type=1400 audit(1776275727.875:761): avc: denied { write } for pid=8985 comm="syz.1.979" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.240285][ T5942] Bluetooth: hci3: unexpected event 0x09 length: 4 > 3 [ 116.246284][ T40] audit: type=1400 audit(1776275727.875:762): avc: denied { ioctl } for pid=8985 comm="syz.1.979" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.338096][ T9007] netlink: 830 bytes leftover after parsing attributes in process `syz.2.985'. [ 116.617207][ T6017] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 116.797683][ T6017] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 116.801138][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.804022][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.807506][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.810396][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.813155][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.816430][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.819405][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.822287][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.825670][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.828552][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.831369][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.834701][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.839013][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.841814][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.845175][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.848212][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.851052][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.854622][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.857738][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.860658][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.864094][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.867324][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.870309][ T6017] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.873705][ T6017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.877620][ T6017] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.880555][ T6017] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.883165][ T6017] usb 5-1: Product: syz [ 116.884532][ T6017] usb 5-1: Manufacturer: syz [ 116.886059][ T6017] usb 5-1: SerialNumber: syz [ 116.890546][ T6017] usb 5-1: config 0 descriptor?? [ 116.899733][ T9015] xt_TPROXY: Can be used only with -p tcp or -p udp [ 116.904832][ T6017] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 117.001050][ T9023] overlayfs: failed to clone upperpath [ 117.004528][ T9023] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.007852][ T9023] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 117.010695][ T9023] sctp: [Deprecated]: syz.2.989 (pid 9023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.010695][ T9023] Use struct sctp_sack_info instead [ 117.042001][ T9025] loop5: detected capacity change from 0 to 7 [ 117.049483][ T9027] x_tables: ip_tables: osf match: only valid for protocol 6 [ 117.062188][ T9025] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 117.064769][ T9025] loop5: partition table partially beyond EOD, truncated [ 117.069885][ T9025] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 117.074101][ T9025] loop5: p2 start 832840281 is beyond EOD, truncated [ 117.109713][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 117.138820][ T40] audit: type=1400 audit(1776275728.775:763): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.146623][ T9013] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 117.154491][ T40] audit: type=1400 audit(1776275728.785:764): avc: denied { mac_admin } for pid=9010 comm="syz.0.986" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.164575][ T40] audit: type=1400 audit(1776275728.795:765): avc: denied { relabelto } for pid=9010 comm="syz.0.986" name="cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 117.168239][ T9036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9036 comm=syz.2.994 [ 117.180814][ T40] audit: type=1400 audit(1776275728.795:766): avc: denied { associate } for pid=9010 comm="syz.0.986" name="cgroup.procs" dev="cgroup" ino=120 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 117.197440][ T5935] usb 5-1: USB disconnect, device number 9 [ 117.201851][ T5935] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 117.274877][ T9040] xt_hashlimit: overflow, rate too high: 0 [ 117.387171][ T39] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 117.538585][ T39] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 117.542337][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 117.545913][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 117.551134][ T39] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.553989][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.556683][ T39] usb 6-1: Product: syz [ 117.558580][ T39] usb 6-1: Manufacturer: syz [ 117.560178][ T39] usb 6-1: SerialNumber: syz [ 117.563263][ T39] usb 6-1: config 0 descriptor?? [ 117.567658][ T9035] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.775269][ T9035] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.791984][ T9069] loop5: detected capacity change from 0 to 7 [ 117.794735][ T9069] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 117.797754][ T9069] loop5: partition table partially beyond EOD, truncated [ 117.800487][ T9069] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 117.804016][ T9069] loop5: p2 start 832840281 is beyond EOD, truncated [ 117.843451][ T40] audit: type=1400 audit(1776275729.485:767): avc: denied { getopt } for pid=9070 comm="syz.3.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.871004][ T9072] udevd[9072]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 117.981801][ T6017] usb 6-1: USB disconnect, device number 9 [ 118.029945][ T40] audit: type=1400 audit(1776275729.675:768): avc: denied { bind } for pid=9079 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.101660][ T9080] kvm: MONITOR instruction emulated as NOP! [ 118.422689][ T9083] tmpfs: Bad value for 'mpol' [ 118.463121][ T40] audit: type=1400 audit(1776275730.105:769): avc: denied { read } for pid=9084 comm="syz.0.1008" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.464639][ T9085] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1008'. [ 118.482663][ T40] audit: type=1804 audit(1776275730.125:770): pid=9085 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1008" name="/newroot/215/file1" dev="tmpfs" ino=1145 res=1 errno=0 [ 118.541085][ T9092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.550846][ T9092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.579131][ T9096] x_tables: duplicate underflow at hook 2 [ 118.649984][ T9104] loop5: detected capacity change from 0 to 7 [ 118.655781][ T9104] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 118.658434][ T9104] loop5: partition table partially beyond EOD, truncated [ 118.660876][ T9104] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 118.666900][ T9104] loop5: p2 start 832840281 is beyond EOD, truncated [ 118.725948][ T9117] QAT: Stopping all acceleration devices. [ 118.741333][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 118.745280][ T9116] netlink: 'syz.0.1015': attribute type 39 has an invalid length. [ 118.823619][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 118.863151][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 118.929994][ T9136] bridge_slave_1: left allmulticast mode [ 118.931848][ T9136] bridge_slave_1: left promiscuous mode [ 118.934224][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.941789][ T9136] bridge_slave_0: left allmulticast mode [ 118.943568][ T9136] bridge_slave_0: left promiscuous mode [ 118.945556][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.996292][ T9121] uprobe: syz.1.1019:9121 failed to unregister, leaking uprobe [ 119.551671][ T9164] bpf: Bad value for 'mode' [ 119.689568][ T9174] loop5: detected capacity change from 0 to 7 [ 119.692501][ T9174] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 119.694947][ T9174] loop5: partition table partially beyond EOD, truncated [ 119.697678][ T9174] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 119.704023][ T9174] loop5: p2 start 832840281 is beyond EOD, truncated [ 119.727635][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 119.755146][ T9179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.953048][ T9192] overlay: Unknown parameter 'func' [ 120.120410][ T9200] raw_sendmsg: syz.3.1044 forgot to set AF_INET. Fix it! [ 120.124244][ T9200] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 120.188371][ T9203] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 120.188371][ T9203] The task syz.3.1044 (9203) triggered the difference, watch for misbehavior. [ 120.197413][ T9203] fuse: Bad value for 'user_id' [ 120.199664][ T9203] fuse: Bad value for 'user_id' [ 120.285045][ T9209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.321128][ T9214] __nla_validate_parse: 3 callbacks suppressed [ 120.321143][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 120.394753][ T9220] overlayfs: failed to clone upperpath [ 120.498459][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1056'. [ 120.520184][ T9237] xt_policy: too many policy elements [ 120.669370][ T9246] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 120.671594][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.676589][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.678714][ T9249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.703513][ T9246] ªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 120.981633][ T9259] loop5: detected capacity change from 0 to 7 [ 120.984738][ T9259] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 120.986992][ T9259] loop5: partition table partially beyond EOD, truncated [ 120.990184][ T9259] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 120.994921][ T9259] loop5: p2 start 832840281 is beyond EOD, truncated [ 121.033334][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 121.058407][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'. [ 121.280314][ T9290] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 121.284871][ T9290] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 121.288717][ T9293] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 121.291360][ T9293] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1075'. [ 121.296131][ T9293] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1075'. [ 121.301802][ T9293] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1075'. [ 121.356768][ T9293] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 121.360096][ T9293] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.370302][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 121.370317][ T40] audit: type=1400 audit(1776275733.015:781): avc: denied { write } for pid=9301 comm="syz.3.1076" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 121.374430][ T9293] vhci_hcd vhci_hcd.0: Device attached [ 121.437546][ T9309] netlink: 'syz.3.1079': attribute type 21 has an invalid length. [ 121.447954][ T9309] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1079'. [ 121.452665][ T9309] netlink: 'syz.3.1079': attribute type 4 has an invalid length. [ 121.455134][ T9309] netlink: 'syz.3.1079': attribute type 5 has an invalid length. [ 121.468071][ T40] audit: type=1400 audit(1776275733.115:782): avc: denied { accept } for pid=9312 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 121.477181][ T9309] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1079'. [ 121.492269][ T9317] 9pnet_virtio: no channels available for device syz [ 121.521279][ T9297] vhci_hcd: connection closed [ 121.530862][ T1149] vhci_hcd vhci_hcd.0: stop threads [ 121.536604][ T1149] vhci_hcd vhci_hcd.0: release socket [ 121.549273][ T1149] vhci_hcd vhci_hcd.0: disconnect device [ 121.575239][ T9320] vlan3: entered promiscuous mode [ 121.577392][ T9320] vlan3: entered allmulticast mode [ 121.581453][ T9320] hsr_slave_1: entered allmulticast mode [ 121.591686][ T9320] nfs4: Unknown parameter 'wlan1' [ 121.722288][ T9325] loop5: detected capacity change from 0 to 7 [ 121.729624][ T9325] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 121.732748][ T9325] loop5: partition table partially beyond EOD, truncated [ 121.736136][ T9325] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 121.740688][ T9325] loop5: p2 start 832840281 is beyond EOD, truncated [ 121.777901][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 121.805832][ T9327] netlink: set zone limit has 4 unknown bytes [ 121.818712][ T9327] syz.2.1086(9327): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 121.890030][ T9331] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1688227217 (3376454434 ns) > initial count (1786943000 ns). Using initial count to start timer. [ 122.113177][ T9338] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 122.118287][ T9338] netlink: 'syz.0.1088': attribute type 27 has an invalid length. [ 122.140264][ T9340] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 122.142693][ T9340] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1089'. [ 122.170834][ T9341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9341 comm=syz.0.1088 [ 122.190225][ T40] audit: type=1400 audit(1776275733.835:783): avc: denied { ioctl } for pid=9339 comm="syz.3.1089" path="/253/file0/memory.events.local" dev="9p" ino=80478331 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.226468][ T40] audit: type=1400 audit(1776275733.865:784): avc: denied { map } for pid=9339 comm="syz.3.1089" path="/253/file0/memory.events.local" dev="9p" ino=80478331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.241972][ T40] audit: type=1400 audit(1776275733.875:785): avc: denied { write } for pid=9339 comm="syz.3.1089" path="/253/file0/memory.events.local" dev="9p" ino=80478331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.315093][ T9338] batadv_slave_0: left promiscuous mode [ 122.320315][ T9338] batadv_slave_0: left allmulticast mode [ 122.410536][ T9338] veth0_macvtap: left allmulticast mode [ 122.412605][ T9338] macvtap0: left allmulticast mode [ 122.468911][ T9349] ip6gre2: entered promiscuous mode [ 122.474564][ T9349] ip6gre2: entered allmulticast mode [ 122.482032][ T208] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.485919][ T208] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.486127][ T39] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 122.489115][ T208] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.495335][ T208] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.501680][ T208] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.505138][ T208] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.508560][ T208] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.512422][ T208] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.566251][ T9354] loop5: detected capacity change from 0 to 7 [ 122.569012][ T9354] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 122.571517][ T9354] loop5: partition table partially beyond EOD, truncated [ 122.574405][ T9354] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 122.582483][ T9354] loop5: p2 start 832840281 is beyond EOD, truncated [ 122.620820][ T40] audit: type=1400 audit(1776275734.265:786): avc: denied { map } for pid=9355 comm="syz.0.1095" path="/proc/685/net/pfkey" dev="proc" ino=4026533333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 122.621784][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 122.622610][ T9356] netlink: 'syz.0.1095': attribute type 9 has an invalid length. [ 122.637141][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 122.646829][ T39] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.660056][ T39] usb 6-1: config 179 has no interface number 0 [ 122.665266][ T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.670457][ T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.675115][ T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.680832][ T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 122.697197][ T39] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.702387][ T39] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.705877][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.711953][ T9365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=9365 comm=syz.0.1097 [ 122.727332][ T9345] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.811804][ T9380] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1103'. [ 122.846662][ T9385] team0: Mode changed to "loadbalance" [ 122.862349][ T9388] overlayfs: failed to clone upperpath [ 122.894679][ T9385] vlan2: entered allmulticast mode [ 122.896434][ T9385] macsec0: entered allmulticast mode [ 122.939582][ T39] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input15 [ 123.018977][ T9400] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 123.146504][ T40] audit: type=1400 audit(1776275734.785:787): avc: denied { connect } for pid=9403 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.198584][ T40] audit: type=1400 audit(1776275734.845:788): avc: denied { write } for pid=9403 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.267145][ T5977] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.363389][ T9404] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 123.406658][ T9411] program syz.3.1110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.410169][ T9411] ata1.00: non-matching transfer count (32/0) [ 123.420585][ T5977] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 123.428320][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.432857][ T5977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 123.439036][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.443824][ T5977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 123.449585][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.458570][ T5977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 123.467920][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.472712][ T5977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 123.480050][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.485648][ T5977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 123.493826][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.494831][ T9411] bridge2: entered promiscuous mode [ 123.498279][ T5977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 123.500925][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.508134][ T5977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 123.512222][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.515522][ T5977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 123.521301][ T5977] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.524655][ T5977] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.528610][ T5977] usb 5-1: Product: syz [ 123.530137][ T5977] usb 5-1: Manufacturer: syz [ 123.531719][ T5977] usb 5-1: SerialNumber: syz [ 123.535299][ T5977] usb 5-1: config 0 descriptor?? [ 123.545589][ T9411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.750569][ T9402] bond0: (slave vlan2): Opening slave failed [ 123.802206][ T5935] usb 5-1: USB disconnect, device number 10 [ 123.896240][ T40] audit: type=1400 audit(1776275735.535:789): avc: denied { connect } for pid=9422 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 124.042414][ T9423] kvm: kvm [9422]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 124.208690][ T9435] fuse: Bad value for 'user_id' [ 124.210507][ T9435] fuse: Bad value for 'user_id' [ 124.866607][ T40] audit: type=1800 audit(1776275736.505:790): pid=9444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1119" name="bus" dev="tmpfs" ino=2077 res=0 errno=0 [ 124.984601][ T9452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9452 comm=syz.2.1122 [ 124.990583][ T9452] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 125.066477][ T9460] 9pnet_virtio: no channels available for device syz [ 125.185077][ T9462] netlink: 'syz.3.1125': attribute type 6 has an invalid length. [ 125.189176][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 125.190612][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.194410][ T9462] netlink: 'syz.3.1125': attribute type 6 has an invalid length. [ 125.248274][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 125.250955][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.253623][ T39] usb 6-1: USB disconnect, device number 10 [ 125.280191][ T9467] loop5: detected capacity change from 0 to 7 [ 125.286916][ T9467] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 125.297289][ T9467] loop5: partition table partially beyond EOD, truncated [ 125.300102][ T9467] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 125.303687][ T9467] loop5: p2 start 832840281 is beyond EOD, truncated [ 125.485980][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 125.496954][ T9473] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 125.697378][ T1028] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 125.842173][ T9496] netlink: 'syz.2.1135': attribute type 63 has an invalid length. [ 125.844796][ T9496] __nla_validate_parse: 6 callbacks suppressed [ 125.844806][ T9496] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1135'. [ 125.848998][ T1028] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 125.849038][ T5999] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.849821][ T9496] gretap0: entered allmulticast mode [ 125.852868][ T1028] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.855976][ T9496] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 125.857581][ T1028] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.872137][ T1028] usb 8-1: config 0 interface 0 has no altsetting 0 [ 125.876710][ T1028] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.880573][ T1028] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 125.883874][ T1028] usb 8-1: Product: syz [ 125.885559][ T1028] usb 8-1: Manufacturer: syz [ 125.887559][ T1028] usb 8-1: SerialNumber: syz [ 125.894249][ T1028] usb 8-1: config 0 descriptor?? [ 125.898527][ T1028] hub 8-1:0.0: bad descriptor, ignoring hub [ 125.900933][ T1028] hub 8-1:0.0: probe with driver hub failed with error -5 [ 125.936967][ T1028] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 125.960806][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.999364][ T5999] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 126.010835][ T5999] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 126.013925][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.016587][ T5999] usb 5-1: Product: syz [ 126.018459][ T5999] usb 5-1: Manufacturer: syz [ 126.020022][ T5999] usb 5-1: SerialNumber: syz [ 126.027266][ T5999] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 126.061979][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 126.207521][ T1028] usb 8-1: USB disconnect, device number 6 [ 126.267460][ T9485] random: crng reseeded on system resumption [ 126.302011][ T5999] usb 5-1: USB disconnect, device number 11 [ 126.577202][ T5977] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 126.768889][ T5977] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 126.771859][ T5977] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.778624][ T5977] usb 8-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.782897][ T5977] usb 8-1: config 0 interface 0 has no altsetting 0 [ 126.787396][ T5977] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.790807][ T5977] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.793662][ T5977] usb 8-1: Product: syz [ 126.795087][ T5977] usb 8-1: Manufacturer: syz [ 126.796776][ T5977] usb 8-1: SerialNumber: syz [ 126.807519][ T5977] usb 8-1: config 0 descriptor?? [ 126.811152][ T5977] hub 8-1:0.0: bad descriptor, ignoring hub [ 126.813111][ T5977] hub 8-1:0.0: probe with driver hub failed with error -5 [ 126.868310][ T5977] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 126.873678][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.881032][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 126.881050][ T40] audit: type=1400 audit(1776275738.525:794): avc: denied { setopt } for pid=9551 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 127.012492][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.017868][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.063621][ T9560] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1145'. [ 127.066950][ T9552] Falling back ldisc for ttyS3. [ 127.117247][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 127.121174][ T9] ath9k_htc: Failed to initialize the device [ 127.129641][ T5999] usb 5-1: ath9k_htc: USB layer deinitialized [ 127.139385][ T40] audit: type=1400 audit(1776275738.785:795): avc: denied { getopt } for pid=9562 comm="syz.0.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.182131][ T9568] loop5: detected capacity change from 0 to 7 [ 127.185733][ T9568] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 127.189618][ T9568] loop5: partition table partially beyond EOD, truncated [ 127.193375][ T9568] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 127.201384][ T9568] loop5: p2 start 832840281 is beyond EOD, truncated [ 127.217568][ T5935] usb 8-1: USB disconnect, device number 7 [ 127.235191][ T9569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1147'. [ 127.247838][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 127.249759][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 127.258613][ T9572] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 127.293978][ T40] audit: type=1400 audit(1776275738.935:796): avc: denied { bpf } for pid=9573 comm="syz.2.1150" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.301145][ T40] audit: type=1400 audit(1776275738.935:797): avc: denied { write } for pid=9570 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.309141][ T40] audit: type=1400 audit(1776275738.935:798): avc: denied { create } for pid=9573 comm="syz.2.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.316813][ T40] audit: type=1400 audit(1776275738.955:799): avc: denied { read write } for pid=5939 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.328066][ T40] audit: type=1400 audit(1776275738.955:800): avc: denied { open } for pid=5939 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.338093][ T40] audit: type=1400 audit(1776275738.955:801): avc: denied { ioctl } for pid=5939 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.349700][ T40] audit: type=1400 audit(1776275738.985:802): avc: denied { read write } for pid=9575 comm="syz.1.1151" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 127.361057][ T40] audit: type=1400 audit(1776275738.985:803): avc: denied { open } for pid=9575 comm="syz.1.1151" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 127.558956][ T9585] ------------[ cut here ]------------ [ 127.560841][ T9585] enable_ept && !allow_smaller_maxphyaddr [ 127.560854][ T9585] WARNING: arch/x86/kvm/vmx/vmx.c:5444 at handle_exception_nmi+0xa6e/0x1bb0, CPU#0: syz.1.1153/9585 [ 127.567202][ T9585] Modules linked in: [ 127.569285][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.1.1153 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.572969][ T9585] Tainted: [L]=SOFTLOCKUP [ 127.574382][ T9585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.577837][ T9585] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 127.580038][ T9585] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 36 d8 3a 0f 31 ff 44 89 ee e8 81 4b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 23 51 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 c5 4b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 127.586835][ T9585] RSP: 0018:ffffc900054e79d8 EFLAGS: 00010283 [ 127.589455][ T9585] RAX: 000000000001ec23 RBX: ffff888057db5300 RCX: ffffc900071c3000 [ 127.592197][ T9585] RDX: 0000000000080000 RSI: ffffffff819fa85d RDI: ffff888038e20000 [ 127.594895][ T9585] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 127.598192][ T9585] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 127.601306][ T9585] R13: 0000000000000000 R14: ffff888027569000 R15: ffff888057db53d0 [ 127.604079][ T9585] FS: 00007f62a35226c0(0000) GS:ffff8880d630d000(0000) knlGS:0000000000000000 [ 127.607279][ T9585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.609594][ T9585] CR2: 000000000f6632eb CR3: 000000004032d000 CR4: 0000000000352ef0 [ 127.612410][ T9585] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009120 [ 127.615147][ T9585] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 127.618023][ T9585] Call Trace: [ 127.619221][ T9585] [ 127.620335][ T9585] ? __pfx_handle_exception_nmi+0x10/0x10 [ 127.622552][ T9585] vmx_handle_exit+0x84d/0x1f40 [ 127.624607][ T9585] vcpu_run+0x34cf/0x5ca0 [ 127.626605][ T9585] ? __pfx_vcpu_run+0x10/0x10 [ 127.628625][ T9585] ? rcu_is_watching+0x12/0xc0 [ 127.630321][ T9585] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 127.632351][ T9585] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 127.634290][ T9585] kvm_vcpu_ioctl+0x730/0x1720 [ 127.635999][ T9585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 127.637858][ T9585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.639849][ T9585] ? do_vfs_ioctl+0x226/0x13e0 [ 127.641689][ T9585] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 127.643727][ T9585] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 127.646466][ T9585] ? __fget_files+0x215/0x3d0 [ 127.648197][ T9585] ? hook_file_ioctl_common+0x149/0x410 [ 127.650104][ T9585] ? selinux_file_ioctl+0x13b/0x290 [ 127.651930][ T9585] ? selinux_file_ioctl+0xb6/0x290 [ 127.653762][ T9585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 127.655590][ T9585] __x64_sys_ioctl+0x18e/0x210 [ 127.657577][ T9585] do_syscall_64+0x10b/0xf80 [ 127.659297][ T9585] ? clear_bhb_loop+0x40/0x90 [ 127.661119][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.663528][ T9585] RIP: 0033:0x7f62a259c819 [ 127.665389][ T9585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.673099][ T9585] RSP: 002b:00007f62a3522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.676049][ T9585] RAX: ffffffffffffffda RBX: 00007f62a2815fa0 RCX: 00007f62a259c819 [ 127.679115][ T9585] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 127.682443][ T9585] RBP: 00007f62a2632c91 R08: 0000000000000000 R09: 0000000000000000 [ 127.685611][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.688446][ T9585] R13: 00007f62a2816038 R14: 00007f62a2815fa0 R15: 00007ffff3843f68 [ 127.691543][ T9585] [ 127.692686][ T9585] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.695214][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.1.1153 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.699030][ T9585] Tainted: [L]=SOFTLOCKUP [ 127.700811][ T9585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.704748][ T9585] Call Trace: [ 127.706077][ T9585] [ 127.707183][ T9585] dump_stack_lvl+0x100/0x190 [ 127.708886][ T9585] vpanic+0x552/0x970 [ 127.710293][ T9585] ? __pfx_vpanic+0x10/0x10 [ 127.711935][ T9585] panic+0xd1/0xe0 [ 127.713286][ T9585] ? __pfx_panic+0x10/0x10 [ 127.714871][ T9585] check_panic_on_warn.cold+0x19/0x34 [ 127.716820][ T9585] ? handle_exception_nmi+0xa6e/0x1bb0 [ 127.718779][ T9585] __warn.cold+0x191/0x328 [ 127.720471][ T9585] __report_bug+0x296/0x3d0 [ 127.722434][ T9585] ? handle_exception_nmi+0xa6e/0x1bb0 [ 127.724870][ T9585] ? __pfx___report_bug+0x10/0x10 [ 127.726894][ T9585] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 127.729151][ T9585] ? kvm_pmu_trigger_event.isra.0+0x789/0xc00 [ 127.731369][ T9585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.733531][ T9585] ? handle_exception_nmi+0xa6e/0x1bb0 [ 127.735493][ T9585] report_bug+0xb2/0x220 [ 127.737126][ T9585] ? handle_exception_nmi+0xa6e/0x1bb0 [ 127.739134][ T9585] handle_bug+0x16a/0x2a0 [ 127.740763][ T9585] exc_invalid_op+0x17/0x50 [ 127.742675][ T9585] asm_exc_invalid_op+0x1a/0x20 [ 127.744692][ T9585] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 127.747164][ T9585] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 36 d8 3a 0f 31 ff 44 89 ee e8 81 4b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 23 51 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 c5 4b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 127.754051][ T9585] RSP: 0018:ffffc900054e79d8 EFLAGS: 00010283 [ 127.756301][ T9585] RAX: 000000000001ec23 RBX: ffff888057db5300 RCX: ffffc900071c3000 [ 127.759451][ T9585] RDX: 0000000000080000 RSI: ffffffff819fa85d RDI: ffff888038e20000 [ 127.762782][ T9585] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 127.765816][ T9585] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 127.768737][ T9585] R13: 0000000000000000 R14: ffff888027569000 R15: ffff888057db53d0 [ 127.771480][ T9585] ? handle_exception_nmi+0xa6d/0x1bb0 [ 127.773371][ T9585] ? handle_exception_nmi+0xa6d/0x1bb0 [ 127.775187][ T9585] ? __pfx_handle_exception_nmi+0x10/0x10 [ 127.777284][ T9585] vmx_handle_exit+0x84d/0x1f40 [ 127.779149][ T9585] vcpu_run+0x34cf/0x5ca0 [ 127.780945][ T9585] ? __pfx_vcpu_run+0x10/0x10 [ 127.782873][ T9585] ? rcu_is_watching+0x12/0xc0 [ 127.784615][ T9585] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 127.786642][ T9585] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 127.788587][ T9585] kvm_vcpu_ioctl+0x730/0x1720 [ 127.790263][ T9585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 127.792111][ T9585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.794129][ T9585] ? do_vfs_ioctl+0x226/0x13e0 [ 127.795803][ T9585] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 127.797779][ T9585] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 127.800391][ T9585] ? __fget_files+0x215/0x3d0 [ 127.802234][ T9585] ? hook_file_ioctl_common+0x149/0x410 [ 127.804118][ T9585] ? selinux_file_ioctl+0x13b/0x290 [ 127.805953][ T9585] ? selinux_file_ioctl+0xb6/0x290 [ 127.807741][ T9585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 127.809516][ T9585] __x64_sys_ioctl+0x18e/0x210 [ 127.811161][ T9585] do_syscall_64+0x10b/0xf80 [ 127.813057][ T9585] ? clear_bhb_loop+0x40/0x90 [ 127.815073][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.817552][ T9585] RIP: 0033:0x7f62a259c819 [ 127.819157][ T9585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.825670][ T9585] RSP: 002b:00007f62a3522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.828540][ T9585] RAX: ffffffffffffffda RBX: 00007f62a2815fa0 RCX: 00007f62a259c819 [ 127.831252][ T9585] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 127.834067][ T9585] RBP: 00007f62a2632c91 R08: 0000000000000000 R09: 0000000000000000 [ 127.836927][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.840378][ T9585] R13: 00007f62a2816038 R14: 00007f62a2815fa0 R15: 00007ffff3843f68 [ 127.843925][ T9585] [ 127.846016][ T9585] Kernel Offset: disabled [ 127.847527][ T9585] Rebooting in 86400 seconds..