last executing test programs: 3.69071857s ago: executing program 2 (id=1230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xffffff36) pidfd_send_signal(r1, 0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x3}}, @struct={0xf, 0x2, 0x0, 0x4, 0x1, 0x5ac6807, [{0x2, 0x0, 0x5}, {0x8, 0x5, 0x800}]}, @enum64={0x1, 0x6, 0x0, 0x13, 0x1, 0x4, [{0x6, 0x3, 0x4}, {0x7, 0x6, 0xffff}, {0x3, 0x3, 0x7}, {0x4, 0x10000, 0x8000}, {0xd, 0x0, 0x4}, {0x7, 0x2, 0x800}]}, @datasec={0xa, 0x7, 0x0, 0xf, 0x1, [{0x4, 0x9, 0x98}, {0x5, 0x0, 0x2}, {0x4, 0x0, 0x401}, {0x5, 0x6, 0xd}, {0x4, 0xb0d, 0x6}, {0x3, 0x80000000, 0x8}, {0x3, 0x1, 0xffff}], "eb"}]}, {0x0, [0x6f, 0x0, 0x30, 0x30, 0x30, 0x5f, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000240)=""/197, 0x117, 0xc5, 0x0, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r3}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x6, r3}, 0x38) 3.551105623s ago: executing program 2 (id=1234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e00000020000e0ff00000000000000000000000000000000000000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x154}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b01, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000040)) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xff05, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x8000000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0x1}) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x10000000) 1.390903134s ago: executing program 1 (id=1268): r0 = socket$inet6(0xa, 0x2, 0x3a) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x400000001, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2, r2, 0x28, r3}, 0x10) (async, rerun: 32) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x1, "d9298561bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdbf3bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) (async) listen(r6, 0x0) (async) ppoll(&(0x7f0000000100)=[{r6, 0xf10e}], 0x1, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000580)=ANY=[@ANYBLOB="382236a6dc4ff35e358a758082c957b75e5240b111006ea46f161d7ac89fc7d4829e93af2042d46f9c35926d455da3702332c3809dd19309a3a94c1cf4a3bb6dd8c3f5fac49bff078abea57e25203992fccbc2631034eb75292c64f05effdafa1eb1c726fa692e0356265d4785d8daffdc99806129e571001ef0ff5a3672b137efcd8625dacda8f57fec76309644cd9faa49ee833cfb47f7b1fc85b1a8dd6f262b51a64163f1168488d791eb91c3b6f2e5653a61615f", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async, rerun: 32) syz_fuse_handle_req(r5, &(0x7f0000009b40)="de98eeeefd02c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc301dbcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99372601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a00af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f7d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff297eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e04616f54f15b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea347b9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7ae66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1f69684ffb4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16e343ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d209708000000f0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca6197add1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c63f7871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) write$FUSE_NOTIFY_STORE(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) (async) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) 1.30114681s ago: executing program 1 (id=1270): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x388) r3 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r3, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8907, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000022c0)=""/4088, 0xff8}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) 999.575309ms ago: executing program 0 (id=1275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) 938.151949ms ago: executing program 0 (id=1276): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') pread64(r0, &(0x7f00000013c0)=""/15, 0xf, 0x404) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, 0x0) (async) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000000)={0x6, 0x5b631005}) 933.412454ms ago: executing program 0 (id=1278): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) (async) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x2e, 0x1}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r1) openat(0xffffffffffffffff, &(0x7f00000056c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc4042, 0x10) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 869.609507ms ago: executing program 0 (id=1280): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) creat(&(0x7f0000000280)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r5, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000540)={0x1, 0xfffffffb, {}, {0xee01}, 0xffff, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x7) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r7, 0x0) listen(r7, 0x0) 868.951398ms ago: executing program 0 (id=1281): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) 800.952739ms ago: executing program 0 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x29, 0x7, 0x5, 0xd5a, 0xa, @loopback, @empty, 0x20, 0x20, 0x378d2dfc, 0x4}}) (async, rerun: 64) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) (async) write$nci(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1f65c24b"], 0xe5ae) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newnexthop={0x60, 0x68, 0x800, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x1, 0x0, 0x20}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0x1b}}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_GROUP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r7}]}, 0x60}}, 0x0) 425.461914ms ago: executing program 2 (id=1285): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x52400, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000021000171b6201e00000000000a00000700000000000000000c001400", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x28}}, 0x81) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) (async) ppoll(&(0x7f0000001400)=[{r6, 0x2420}], 0x1, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x183100, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000380)={0x0, {0x39b14d69, 0xfffffffc, 0x5, 0x4, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00', 0x41}) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) (async) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) (async) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000100)={0x900}) (async) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000002c0)={0x2, 0x0, [{0xaf3}, {0x28b, 0x0, 0xbd3}]}) (async) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000480)={{0x189, 0x3}, 0x100, './file0\x00'}) sendmmsg$inet(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) (async, rerun: 32) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4a00, 0x0) (rerun: 32) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r10, 0x90009427, &(0x7f0000000180)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r12, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000540)="5aee41b19500f1a2f7da16a3df1ea71c", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 424.581654ms ago: executing program 1 (id=1286): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x1382, 0x1000, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) r6 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 304.187979ms ago: executing program 3 (id=1288): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1, 0x100, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001002ebd70000400000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01000000000000000000000000cf00000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}]}, 0x48}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xec, r8, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffff000}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x557}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9f}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000007600110a004000000008000003000000000000000800010000000000"], 0x20}}, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 181.035898ms ago: executing program 2 (id=1289): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000a0850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)=r5}, 0x20) r7 = socket$kcm(0x29, 0x0, 0x0) connect(r7, &(0x7f0000000500)=@ethernet={0x1, @broadcast}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) add_key(&(0x7f0000000140)='blacklist\x00', 0x0, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6, r1) 176.915803ms ago: executing program 3 (id=1290): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x48004) (async) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36b, 0xc000, 0x4, 0x3af}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r4, 0x0, 0xc, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82000, 0xa1) getdents64(r5, &(0x7f0000000240)=""/151, 0x97) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) fchdir(r6) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfffffffffffffcf6, 0x80800}) (async) ptrace$cont(0x7, r0, 0x2, 0xf8f) 176.605989ms ago: executing program 2 (id=1291): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0x6}, {0x3}}}, 0x24}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000008c403001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0x484c}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_disconnect(0xffffffffffffffff) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6}, 0x10) (async, rerun: 32) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000002c0)={0x580, 0x13, 0x4, 0x70bd28, 0x25dfdbff, {0x1e, 0x9, 0x3, 0x6, {0x4e22, 0x4e23, [0x3ff, 0xffffffff, 0x4, 0x21], [0x1, 0x5, 0x2], r5, [0x92c, 0xffffffff]}, 0x8, 0x1000}, [@INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "86ee5676ba0a9d558343af56a6f08158d32248baf8ac32bd3b99a2d344b7f5fc1bd1fd4332fcb4658eeab8bd56b4188404112f3190b78122ce7bbeb34f4542545ee317071e4e126433dddd7129c98dae0aff8edb32647074147e458df5e7aa5a45ca1b231893d06e25fef3b7c8ca8f5f10be637c127bf658395928333caa09cb949fd20ef41d620218f23987eee22f7d0b70721f7580721a19bccaf8ec3eceab16e80f490d2d6c26bc5e5df50e79f9d0c0c36c1e4542b077664514438b547dc14c09738c857adc89e41e8915f2de876193a055c56e6e5152538e43d0c19c705110bc85dab37d666313fe1b9c28116ac7"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "b0d0197edc8fe8c805c1e47fb3bd3ab1fb10ae7629d798d528bdf86030be4ba5295a73c8fbe5dbd03f148997ce9d5fced06ceeb5cfa4805db6bca299fe8c246e53d6db398600b9822b4ac3290710669ac1d79c51e7e389d4cfc832a29ad8b0b00872bd59b1970c1a236c1c404c0a8c33acc05aa3489bd7deecc80aef1ad2d99c87249109bd8fa7b87750db92cb19f20b50cc3af7f19749e1e78c6bd45cf22b037bc75ebad99fc2d95c4e98a697b26d1bae2d13c534cb41999731e6a14d177802264d15fd920c8416c2bad80cdd0089d36465ad4d9fc8dddcad0f99d0351604"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "cb81892c45cc23fcfebcefd12cd26539d96d39e61806ca741b000c75d70f7610f6c89e36e1b043409ca87a79ed8a85df1ef96bc9a0729ad94ad15f1efec26891c8e996f82573978ea62cc4ebab1ec497fae2f55546a0c21cfa404ed36c35b60975b2dbc2e18546d0bb3a77807f62d2acb8017d957d886b5d03e6036de2f48f8bff6fa2c555b7881855e34d068cb66daf58888d73f68f64fb45b7bff1e75afc768d52ccda089a07334cce8e02160f4ac71344bf3c7b620bc45bd0732d1f47f9aa41dc8b36456f82db7a403d67afa53b2b03695088664d2781c916dd8fc2ac58532ab2ebf4dcfb01c465aa48714c4b09b45bd61376d2793b88"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "d580dc72e6a742ae6bde2a3367f89d26c873e7aeb10638b63e42727e2e09eae99c5e25183be5fd00151381486d3331356d6c1e70c26ff7a41c6285df58f2e0339ec96b73772c16a9e6265ec5aee9031c4b7e83a670f88cc6c85cfd157e173e396295599752466602259cd078a7b2e76a505232861da2052c79e2e29beb4899fe3f629580073e79fc3c2897b4e1141b581d6724d4975fbdb6e74664fb0ca87a55b1538a28c8a1fd8e5d025a13882cdf9d29a1f7ea09897da2989457bb2164"}, @INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "7009ffa5691c2af5924bca702fdd3315ac5368e8095a8c2b48b0250856d3381e8cbda4a69a320efdc39eea66f4f32a089fb4fecc16d49e02326d035509985b144d64526444557afbcd4c6796b06cc9be597312160a5e0a2daf2f5657ff6735c10aff9fde4df1af8d2d5c1cb01d68a0beaf6ccc9e4e2d8b846fba482fc879f035327c4703821deb5944be9f2dd266a7472186c5e6dffc"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "1517000dd3b5c5afc2c619ece6abeaa3733b02937d6b4c3076409dddee7ec25d7b471bd0bdfe52496c168a5c14d8d21fdd5e5c004aa7b114d586faf7d3dfd683eae550bacdbcd355448d7329e6b7c73eecac357f7d0e42bfaa5843a9e7f46196a69f53d3adeb0ec37254cfcf3ba1c7b0fc4e4cfe2bed926b026c022e62743f5afb2e4cd6da010bf0005e3dda31d56693b7ae5bc591824c08a1dfeacdeeabf8e6dd8246f7e3a84e06ff63a22c04497c4e1d1cdc1b50c9c65d289f25ee29ec936040f14954f49fe394f2859e47955ed4928302d08649704dc76016088d1def087503481a8cb28c68ce63b4d7d4f6bb"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "ac04f5"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x580}, 0x1, 0x0, 0x0, 0x4000}, 0x20001805) (async, rerun: 32) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000940)={0x0, "95bc9233a0ffadb335984bb3280b7840ca360400f05cff8500bd160634843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) close_range(r0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 121.431166ms ago: executing program 1 (id=1292): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x9, 0x4, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x223, 0x8, 0x6, 0x38, 0x1, 0x74, 0x7, 0x104}, [{0x6474e551, 0xa68, 0x5, 0xffffffffffffffff, 0x100000001, 0xfffffffffffffffa, 0xa, 0xffffffffffffffff}]}, 0x78) (async) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x9, 0x4, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x223, 0x8, 0x6, 0x38, 0x1, 0x74, 0x7, 0x104}, [{0x6474e551, 0xa68, 0x5, 0xffffffffffffffff, 0x100000001, 0xfffffffffffffffa, 0xa, 0xffffffffffffffff}]}, 0x78) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x204, r0}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x204, r0}, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)='.:\x00', &(0x7f0000000180)='$*\x00']}, &(0x7f0000000240)={[&(0x7f0000000200)='@/]\x00']}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 120.7352ms ago: executing program 3 (id=1293): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000cf0000/0x10000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x12, 0x2}) 69.731837ms ago: executing program 3 (id=1294): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000480000032cbd7000fddbdf250a003800", @ANYRES32=r3, @ANYBLOB="03000000080002000c00000008000200010000006b6e2c2feeb152a2d1db5a6f080002000000000014000100ff010000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 69.368293ms ago: executing program 1 (id=1295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) (async) sendmmsg(r1, 0x0, 0x0, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x5, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x1fc, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(r2, 0x0, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 69.121785ms ago: executing program 3 (id=1296): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0x10, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdf9, {0x0}, 0xd90b}]}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x7fffffff, 0x5, 0x77, 0x7, 0xffff, 0xfffffffb}) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000b40)) 969.792µs ago: executing program 2 (id=1297): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\b\x00\t\x00', @ANYRESHEX, @ANYBLOB="000128bd7000fbdbdf253500000008000300", @ANYRESOCT=0x0, @ANYBLOB="05002001520000001400fe0092cad3cefe588d98e19b2221304c89c01400fe000929ff0100916981784a48a572463b23"], 0x4c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40001) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dvmrp1\x00', 0x0}) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x36) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newtclass={0x58, 0x28, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0x9, 0xfff1}, {0xfff2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0xb, 0x86}}, @TCA_RATE={0x6, 0x5, {0x33, 0x80}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c5}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000500), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@ethernet, 0x80, &(0x7f00000004c0)=[{&(0x7f00000008c0)="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", 0x183}, {&(0x7f0000000f00)="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", 0x260}, {&(0x7f0000000640)="acf7aad9756b3002270e3f3cdf07e0a9dcad290068bf1000b3309073f30c1069934c5b98a86e3604c0d4f77b81cc2987857f9fd00b26d274e9c951e5488546b29681964eebaf8275d1de", 0x4a}], 0x3}, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) ioctl$RTC_WIE_ON(r8, 0x700f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x23, 0x80000, 0x8019) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r11, 0xff}, &(0x7f0000000040)=0x8) socket$inet6(0xa, 0x2, 0x0) 279.934µs ago: executing program 1 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000003c0)="470f013064f32edb0b66baf80cb86cf7bb8cef66bafc0c66edb9fd0b00000f32b9f10200000f32440f01c448b800000100000000000f23d00f21f8351000000c0f23f866b86f000f00d0440f1709430f22d4", 0x52}], 0x1, 0x50, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1299): modify_ldt$write(0x1, &(0x7f0000000040)={0x9, 0x1000, 0x1000}, 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000380)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.2.106'. [ 73.557244][ T6250] tmpfs: Unknown parameter 'm' [ 73.963322][ T6258] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 73.967188][ T6258] Bluetooth: MGMT ver 1.23 [ 73.969469][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 73.973573][ T6258] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 74.166348][ T39] libceph: connect (1)[c::]:6789 error -101 [ 74.169173][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 74.209904][ T845] libceph: connect (1)[c::]:6789 error -101 [ 74.212215][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 74.428842][ T39] libceph: connect (1)[c::]:6789 error -101 [ 74.431545][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 74.468932][ T845] libceph: connect (1)[c::]:6789 error -101 [ 74.471770][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 74.649860][ T6287] netlink: 68 bytes leftover after parsing attributes in process `syz.3.116'. [ 74.937889][ T39] libceph: connect (1)[c::]:6789 error -101 [ 74.940136][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 74.979298][ T845] libceph: connect (1)[c::]:6789 error -101 [ 74.981987][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 74.989524][ T6278] ceph: No mds server is up or the cluster is laggy [ 74.989528][ T6269] ceph: No mds server is up or the cluster is laggy [ 75.056266][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 75.056282][ T40] audit: type=1400 audit(1781458350.738:348): avc: denied { unlink } for pid=6288 comm="syz.0.117" name="#1" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.068104][ T40] audit: type=1400 audit(1781458350.748:349): avc: denied { mount } for pid=6288 comm="syz.0.117" name="/" dev="overlay" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.077124][ T40] audit: type=1400 audit(1781458350.748:350): avc: denied { mounton } for pid=6290 comm="syz.2.118" path="/35/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 75.090838][ T40] audit: type=1400 audit(1781458350.778:351): avc: denied { unmount } for pid=5741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.126135][ T6293] ======================================================= [ 75.126135][ T6293] WARNING: The mand mount option has been deprecated and [ 75.126135][ T6293] and is ignored by this kernel. Remove the mand [ 75.126135][ T6293] option from the mount to silence this warning. [ 75.126135][ T6293] ======================================================= [ 75.126167][ T40] audit: type=1400 audit(1781458350.808:352): avc: denied { remount } for pid=6292 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.141663][ T6293] binder: Binderfs stats mode cannot be changed during a remount [ 75.162859][ T40] audit: type=1400 audit(1781458350.848:353): avc: denied { create } for pid=6292 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.170655][ T40] audit: type=1400 audit(1781458350.848:354): avc: denied { write } for pid=6292 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.178397][ T40] audit: type=1400 audit(1781458350.848:355): avc: denied { nlmsg_write } for pid=6292 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.374246][ T6315] netlink: 'syz.3.125': attribute type 11 has an invalid length. [ 75.378497][ T40] audit: type=1400 audit(1781458351.068:356): avc: denied { mounton } for pid=6314 comm="syz.3.125" path="/34/bus" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 75.378563][ T6315] /dev/nullb0: Can't lookup blockdev [ 75.426579][ T40] audit: type=1400 audit(1781458351.108:357): avc: denied { create } for pid=6322 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.611358][ T6342] syz.2.131 (6342): drop_caches: 0 [ 76.260335][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.263816][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.635926][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.139'. [ 76.643580][ T6375] macsec0: entered promiscuous mode [ 76.645960][ T6375] macsec0: entered allmulticast mode [ 76.648170][ T6375] veth1_macvtap: entered allmulticast mode [ 76.692475][ T6377] qrtr: Invalid version 0 [ 76.696926][ T6377] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 76.730671][ T845] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 76.797703][ T845] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 77.220949][ T6410] block nbd1: shutting down sockets [ 77.328614][ T6418] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 77.471987][ T6423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6423 comm=syz.2.153 [ 77.795053][ T170] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.804847][ T170] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.808953][ T170] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.816951][ T170] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.859774][ T6428] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 77.948445][ T6442] syzkaller0: entered promiscuous mode [ 77.950245][ T6442] syzkaller0: entered allmulticast mode [ 77.974880][ T6442] xt_nfacct: accounting object `syz0' does not exist [ 78.306292][ T6465] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 78.311702][ T6465] ALSA: mixer_oss: invalid index 1374389 [ 78.366593][ T6472] xt_socket: unknown flags 0x48 [ 78.690270][ T6495] sctp: [Deprecated]: syz.2.174 (pid 6495) Use of int in maxseg socket option. [ 78.690270][ T6495] Use struct sctp_assoc_value instead [ 78.809139][ T6507] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 78.814606][ T6507] batadv_slave_1: entered promiscuous mode [ 78.823562][ T6506] batadv_slave_1: left promiscuous mode [ 78.864524][ T6511] virtio-fs: tag not found [ 78.867209][ T6511] __nla_validate_parse: 5 callbacks suppressed [ 78.867219][ T6511] netlink: 76 bytes leftover after parsing attributes in process `syz.2.180'. [ 78.875837][ T6509] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 78.933393][ T6520] openvswitch: netlink: Key 26 has unexpected len 716 expected 16 [ 78.937008][ T6520] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 78.995532][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 79.060999][ T6533] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 79.063960][ T6533] UDF-fs: Scanning with blocksize 2048 failed [ 79.069880][ T6535] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.070647][ T6533] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 79.075135][ T6533] UDF-fs: Scanning with blocksize 4096 failed [ 79.366742][ T6550] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 79.379636][ T5744] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 79.385582][ T6550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.400003][ T6550] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 79.412163][ T6550] macvlan2: entered promiscuous mode [ 79.414485][ T6550] macvlan2: entered allmulticast mode [ 79.417169][ T6550] bond3: entered promiscuous mode [ 79.424352][ T6550] veth0_to_bond: entered promiscuous mode [ 79.429976][ T6550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.434955][ T6550] bond3: left promiscuous mode [ 79.436776][ T6550] veth0_to_bond: left promiscuous mode [ 79.541391][ T5744] usb 5-1: not running at top speed; connect to a high speed hub [ 79.544752][ T5744] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 79.548450][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 79.552789][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 79.557094][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 79.562037][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 79.576087][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 79.581934][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 79.589178][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 79.594933][ T5744] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 79.600231][ T5744] usb 5-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 79.603075][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=161 [ 79.605864][ T5744] usb 5-1: Product: syz [ 79.607136][ T5744] usb 5-1: Manufacturer: syz [ 79.608828][ T5744] usb 5-1: SerialNumber: syz [ 79.828056][ T5744] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.830649][ T5744] usb 5-1: MIDIStreaming interface descriptor not found [ 79.868528][ T5744] usb 5-1: USB disconnect, device number 2 [ 79.907245][ T6566] udevd[6566]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.091492][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 80.091505][ T40] audit: type=1400 audit(1781458355.778:407): avc: denied { connect } for pid=6572 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.202727][ T40] audit: type=1400 audit(1781458355.888:408): avc: denied { prog_run } for pid=6574 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.244606][ T40] audit: type=1400 audit(1781458355.928:409): avc: denied { getopt } for pid=6576 comm="syz.3.200" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.270777][ T6577] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 80.276466][ T6577] netlink: 27 bytes leftover after parsing attributes in process `syz.3.200'. [ 80.318001][ T40] audit: type=1400 audit(1781458356.008:410): avc: denied { write } for pid=6576 comm="syz.3.200" name="/" dev="9p" ino=76829767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.327108][ T40] audit: type=1400 audit(1781458356.008:411): avc: denied { add_name } for pid=6576 comm="syz.3.200" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.335857][ T40] audit: type=1400 audit(1781458356.008:412): avc: denied { create } for pid=6576 comm="syz.3.200" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.346972][ T40] audit: type=1400 audit(1781458356.008:413): avc: denied { associate } for pid=6576 comm="syz.3.200" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.357742][ T40] audit: type=1400 audit(1781458356.008:414): avc: denied { read append open } for pid=6576 comm="syz.3.200" path="/63/file0/cpuset.effective_cpus" dev="9p" ino=76831335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.372039][ T40] audit: type=1326 audit(1781458356.058:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.0.201" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d4399ce59 code=0x0 [ 80.683612][ T40] audit: type=1400 audit(1781458356.368:416): avc: denied { unlink } for pid=6585 comm="syz.3.204" name="#9" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.689958][ T6586] evm: overlay not supported [ 80.740034][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 80.846119][ T6591] capability: warning: `syz.2.187' uses deprecated v2 capabilities in a way that may be insecure [ 80.860469][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 80.921678][ T6594] xt_ipcomp: unknown flags 1D [ 81.022070][ T6599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6599 comm=syz.3.208 [ 81.026014][ T6599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6599 comm=syz.3.208 [ 81.070680][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.209'. [ 81.299767][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.213'. [ 81.367292][ T6634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.218'. [ 81.408448][ T6643] netlink: 4524 bytes leftover after parsing attributes in process `syz.0.221'. [ 81.475707][ T6649] tipc: Enabling of bearer rejected, already enabled [ 81.489625][ T6649] block device autoloading is deprecated and will be removed. [ 81.609941][ T6663] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.229'. [ 81.614788][ T6663] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.229'. [ 81.698659][ T6671] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 81.701809][ T6671] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 81.706333][ T6671] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 81.805574][ T6688] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 81.832119][ T6686] Invalid logical block size (-1) [ 81.872124][ T6693] input: syz1 as /devices/virtual/input/input5 [ 82.575282][ T6715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.834177][ T6734] netlink: 'syz.3.253': attribute type 10 has an invalid length. [ 82.855419][ T6734] team0: Port device veth0 added [ 82.939810][ T6750] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 83.232709][ T6769] : entered promiscuous mode [ 83.270934][ T6773] could not open pipe file descriptor [ 83.274612][ T6773] hsr_slave_0: left promiscuous mode [ 83.277922][ T6773] hsr_slave_1: left promiscuous mode [ 83.317909][ T5749] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 83.479980][ T5749] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 83.484522][ T5749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.489055][ T5749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.492950][ T5749] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 83.499183][ T5749] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 83.503861][ T5749] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 83.507278][ T5749] usb 7-1: Manufacturer: syz [ 83.511601][ T5749] usb 7-1: config 0 descriptor?? [ 83.739325][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.749066][ T6795] bridge_slave_1 (unregistering): left allmulticast mode [ 83.752726][ T6795] bridge_slave_1 (unregistering): left promiscuous mode [ 83.755747][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.780442][ T6797] sctp: [Deprecated]: syz.1.271 (pid 6797) Use of int in max_burst socket option deprecated. [ 83.780442][ T6797] Use struct sctp_assoc_value instead [ 83.791697][ T1198] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.794745][ T1198] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.798935][ T1198] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.801987][ T1198] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.877580][ T1480] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.900607][ T6805] __nla_validate_parse: 38 callbacks suppressed [ 83.900624][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'. [ 83.913479][ T6805] xfrm1: entered promiscuous mode [ 83.915309][ T6805] xfrm1: entered allmulticast mode [ 83.929160][ T6762] Cannot find del_set index 2 as target [ 83.931761][ T6806] Cannot find del_set index 2 as target [ 83.942487][ T5749] usbhid 7-1:0.0: can't add hid device: -71 [ 83.945601][ T5749] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 83.956231][ T5749] usb 7-1: USB disconnect, device number 2 [ 84.057512][ T1480] usb 5-1: Using ep0 maxpacket: 8 [ 84.061535][ T1480] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.066517][ T1480] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.070897][ T1480] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.073338][ T1480] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.076244][ T1480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.082521][ T1480] usb 5-1: config 0 descriptor?? [ 84.493790][ T1480] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.496049][ T1480] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.499941][ T1480] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.502488][ T1480] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.504640][ T1480] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 84.508323][ T1480] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 84.550193][ T6827] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 84.554876][ T6827] cramfs: wrong magic [ 84.590126][ T6827] bond1: option xmit_hash_policy: invalid value (6) [ 84.596385][ T6827] bond1 (unregistering): Released all slaves [ 84.606194][ T6840] ip6t_rpfilter: unknown options [ 84.610049][ T6840] netlink: 68 bytes leftover after parsing attributes in process `syz.3.284'. [ 84.614718][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 84.618889][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 84.694468][ T5848] usb 5-1: USB disconnect, device number 3 [ 84.913362][ T6851] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.139815][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 85.139828][ T40] audit: type=1400 audit(1781458360.828:464): avc: denied { write } for pid=6856 comm="syz.1.291" lport=27217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.155022][ T6860] atomic_op ffff88805764f998 conn xmit_atomic 0000000000000000 [ 85.189011][ T6864] gfs2: not a GFS2 filesystem [ 85.197619][ T40] audit: type=1400 audit(1781458360.878:465): avc: denied { setopt } for pid=6861 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.199008][ T6862] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.215681][ T40] audit: type=1400 audit(1781458360.898:466): avc: denied { write } for pid=6863 comm="syz.2.293" name="/" dev="9p" ino=76829767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.237065][ T40] audit: type=1400 audit(1781458360.898:467): avc: denied { write } for pid=6863 comm="syz.2.293" name="cpuset.effective_cpus" dev="9p" ino=76831335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.256448][ T6867] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 85.336751][ T6873] netlink: 6 bytes leftover after parsing attributes in process `syz.0.296'. [ 85.341924][ T6873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.404210][ T6879] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 85.412755][ T6881] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 85.514242][ T6887] fuse: Bad value for 'fd' [ 85.698212][ T40] audit: type=1400 audit(1781458361.378:468): avc: denied { ioctl } for pid=6896 comm="syz.2.305" path="socket:[13760]" dev="sockfs" ino=13760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.751373][ T6901] bridge2: entered allmulticast mode [ 85.766084][ T6903] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 85.779086][ T6903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 85.788590][ T6903] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 85.792424][ T6903] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 85.795568][ T6903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.308'. [ 85.800469][ T6903] dummy0: eqemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xc9000) ntered promiscuous mode [ 85.811694][ T6903] bond5: (slave dummy0): Releasing backup interface [ 85.858466][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 85.861981][ T40] audit: type=1400 audit(1781458361.548:469): avc: denied { mount } for pid=6906 comm="syz.3.309" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 85.862620][ T1134] ata1: failed to read log page 10h (errno=-5) [ 85.871082][ T40] audit: type=1400 audit(1781458361.548:470): avc: denied { unmount } for pid=6906 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 85.875659][ T1134] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 85.883546][ T1134] ata1.00: irq_stat 0x40000000 [ 85.883793][ T6907] netlink: 'syz.3.309': attribute type 2 has an invalid length. [ 85.885458][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.888697][ T6907] netlink: 46 bytes leftover after parsing attributes in process `syz.3.309'. [ 85.891064][ T1134] ata1.00: cmd 61/48:70:ee:23:08/06:00:00:00:00/40 tag 14 ncq dma 823296 out [ 85.891064][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.899831][ T1134] ata1.00: status: { DRDY } [ 85.901764][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 85.903690][ T1134] ata1.00: cmd 61/98:78:36:2a:08/03:00:00:00:00/40 tag 15 ncq dma 471040 out [ 85.903690][ T1134] res 50/00:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 85.910059][ T1134] ata1.00: status: { DRDY } [ 85.915222][ T1134] ata1.00: configured for UDMA/100 [ 85.918585][ T1134] ata1: EH complete [ 86.015354][ T40] audit: type=1400 audit(1781458361.698:471): avc: denied { setopt } for pid=6919 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.026560][ T40] audit: type=1400 audit(1781458361.708:472): avc: denied { read } for pid=6919 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.079872][ T40] audit: type=1400 audit(1781458361.768:473): avc: denied { bind } for pid=6913 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.262017][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 86.270348][ T6934] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 86.304626][ T6939] netdevsim netdevsim3: Direct firmware load for . [ 86.304626][ T6939] failed with error -2 [ 86.309797][ T6939] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 86.309797][ T6939] [ 86.351756][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 86.480043][ T6945] kvm: emulating exchange as write [ 86.509029][ T34] cfg80211: failed to load regulatory.db [ 86.684886][ T6961] cgroup: none used incorrectly [ 86.694047][ T6967] netlink: 76 bytes leftover after parsing attributes in process `syz.1.326'. [ 86.806126][ T6978] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 86.820745][ T6969] ip6erspan0: entered promiscuous mode [ 87.190143][ T6990] netlink: 'syz.2.332': attribute type 10 has an invalid length. [ 87.235441][ T6994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.653811][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.657367][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.661446][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.669455][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.089503][ T7074] IPVS: set_ctl: invalid protocol: 41 172.20.20.55:20004 [ 90.182894][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 90.182907][ T40] audit: type=1400 audit(1781458365.868:492): avc: denied { read } for pid=7080 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.290178][ T7086] sctp: [Deprecated]: syz.3.361 (pid 7086) Use of int in max_burst socket option deprecated. [ 90.290178][ T7086] Use struct sctp_assoc_value instead [ 90.879334][ T7036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.976023][ T7093] misc userio: No port type given on /dev/userio [ 90.980501][ T7089] misc userio: No port type given on /dev/userio [ 91.015019][ T40] audit: type=1400 audit(1781458366.698:493): avc: denied { map } for pid=7097 comm="syz.1.365" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 91.044548][ T40] audit: type=1400 audit(1781458366.728:494): avc: denied { sqpoll } for pid=7100 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.114754][ T7101] "syz.0.366" (7101) uses obsolete ecb(arc4) skcipher [ 91.224536][ T7121] syzkaller0: entered promiscuous mode [ 91.226843][ T7121] syzkaller0: entered allmulticast mode [ 91.329209][ T7125] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 91.338483][ T7129] warning: `syz.1.373' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.344514][ T7129] openvswitch: netlink: IP tunnel dst address not specified [ 91.410856][ T7134] __nla_validate_parse: 6 callbacks suppressed [ 91.410871][ T7134] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.374'. [ 91.414484][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.375'. [ 91.475386][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 91.481752][ T7141] netlink: 'syz.2.378': attribute type 3 has an invalid length. [ 91.485000][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 91.502142][ T40] audit: type=1400 audit(1781458367.188:495): avc: denied { write } for pid=7142 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.760745][ T40] audit: type=1400 audit(1781458367.448:496): avc: denied { map } for pid=7183 comm="syz.1.384" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.815110][ T40] audit: type=1400 audit(1781458367.498:497): avc: denied { bind } for pid=7189 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 91.903983][ T7204] syzkaller0: entered promiscuous mode [ 91.907020][ T7204] syzkaller0: entered allmulticast mode [ 91.929958][ T7144] cgroup: fork rejected by pids controller in /syz3 [ 91.943005][ T40] audit: type=1400 audit(1781458367.628:498): avc: denied { setopt } for pid=7210 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.093711][ T7220] pim6reg1: entered promiscuous mode [ 92.107511][ T7220] pim6reg1: entered allmulticast mode [ 92.256597][ T7231] gfs2: not a GFS2 filesystem [ 92.264869][ T40] audit: type=1400 audit(1781458367.948:499): avc: denied { write } for pid=7230 comm="syz.2.392" name="/" dev="9p" ino=76829767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.271582][ T40] audit: type=1400 audit(1781458367.948:500): avc: denied { read } for pid=7232 comm="syz.1.393" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.282633][ T40] audit: type=1400 audit(1781458367.948:501): avc: denied { open } for pid=7232 comm="syz.1.393" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.366246][ T7241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 92.406858][ T7247] bridge_slave_1: default FDB implementation only supports local addresses [ 92.470045][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 92.616250][ T7254] netlink: 148 bytes leftover after parsing attributes in process `syz.1.402'. [ 92.639860][ T7254] 9p: Bad value for 'rfdno' [ 92.642134][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 92.659799][ T7262] vfat: Unknown parameter '' [ 92.667292][ T7260] netlink: 'syz.2.404': attribute type 50 has an invalid length. [ 92.673539][ T7261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7261 comm=syz.2.404 [ 92.690858][ T7268] /dev/nullb0: Can't lookup blockdev [ 92.777012][ T7281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.824970][ T7284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7284 comm=syz.0.412 [ 92.983589][ T7299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.416'. [ 93.051620][ T7308] /dev/nullb0: Can't lookup blockdev [ 93.118653][ T7310] overlayfs: missing 'lowerdir' [ 93.124850][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7310 comm=syz.1.421 [ 93.129268][ T7310] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 93.131451][ T7310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.421'. [ 93.364884][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.428'. [ 93.394934][ T7334] x_tables: duplicate underflow at hook 1 [ 93.500227][ T7338] netlink: 'syz.1.431': attribute type 23 has an invalid length. [ 93.517511][ T7345] netlink: 'syz.1.431': attribute type 23 has an invalid length. [ 93.607747][ T7351] bridge0: port 2(syz_tun) entered blocking state [ 93.615080][ T7351] bridge0: port 2(syz_tun) entered disabled state [ 93.622342][ T7351] syz_tun: entered allmulticast mode [ 93.644712][ T7351] syz_tun: entered promiscuous mode [ 93.647670][ T7351] bridge0: port 2(syz_tun) entered blocking state [ 93.649811][ T7351] bridge0: port 2(syz_tun) entered forwarding state [ 93.742564][ T7359] netlink: 'syz.1.438': attribute type 15 has an invalid length. [ 93.805444][ T7361] program syz.1.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.830493][ T7363] ./bus: Can't lookup blockdev [ 93.942426][ T7372] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 93.965034][ T7372] bond2: (slave geneve2): making interface the new active one [ 93.968656][ T7372] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 93.971951][ T1206] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 93.974866][ T1206] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 93.978062][ T1206] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 93.980875][ T1206] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 94.081497][ T7379] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 94.136685][ T7386] xt_hashlimit: size too large, truncated to 1048576 [ 94.287019][ T7395] overlay: Unknown parameter 'pcr' [ 94.340555][ T7403] batadv_slave_1: entered promiscuous mode [ 94.344296][ T7401] batadv_slave_1: left promiscuous mode [ 94.380161][ T7407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.613406][ T7415] tmpfs: Unknown parameter 'usrquota [ 94.613406][ T7415] ' [ 94.620669][ T7416] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7416 comm=syz.0.456 [ 94.856887][ T7443] syz.3.464 (7443): /proc/7442/oom_adj is deprecated, please use /proc/7442/oom_score_adj instead. [ 94.864461][ T7443] fuse: Bad value for 'fd' [ 94.964674][ T7454] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 95.082991][ T7458] input: syz0 as /devices/virtual/input/input8 [ 95.135220][ T7462] libceph: secret too big 3051 [ 95.142733][ T7462] overlay: Unknown parameter 'fowner>00000000000000000000' [ 95.373747][ T7465] program syz.2.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.651315][ T7483] gfs2: not a GFS2 filesystem [ 95.665773][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 95.665787][ T40] audit: type=1400 audit(1781458371.348:529): avc: denied { write } for pid=7482 comm="syz.2.477" name="/" dev="9p" ino=76829767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.840288][ T7490] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 95.844153][ T7490] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 95.884503][ T40] audit: type=1400 audit(1781458371.568:530): avc: denied { name_connect } for pid=7496 comm="syz.1.483" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 96.004252][ T7515] Bluetooth: MGMT ver 1.23 [ 96.023132][ T40] audit: type=1400 audit(1781458371.708:531): avc: denied { mount } for pid=7514 comm="syz.3.488" name="/" dev="hugetlbfs" ino=17962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 96.028949][ T7518] team0: No ports can be present during mode change [ 96.040192][ T40] audit: type=1400 audit(1781458371.728:532): avc: denied { mounton } for pid=7514 comm="syz.3.488" path="/bus" dev="hugetlbfs" ino=17967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 96.044075][ T7518] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.053079][ T7518] overlayfs: failed to set xattr on upper [ 96.055426][ T7518] overlayfs: ...falling back to redirect_dir=nofollow. [ 96.059551][ T7518] overlayfs: ...falling back to index=off. [ 96.061906][ T7518] overlayfs: ...falling back to uuid=null. [ 96.064267][ T7518] overlayfs: ...falling back to xino=off. [ 96.066676][ T7518] overlayfs: maximum fs stacking depth exceeded [ 96.119491][ T7523] netlink: 'syz.3.489': attribute type 32 has an invalid length. [ 96.178382][ T40] audit: type=1400 audit(1781458371.858:533): avc: denied { firmware_load } for pid=7528 comm="syz.1.490" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 96.223721][ T7529] syz.1.490 (7529) used greatest stack depth: 18952 bytes left [ 96.286649][ T7540] xt_policy: neither incoming nor outgoing policy selected [ 96.292988][ T7541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7541 comm=syz.0.493 [ 96.296871][ T7542] xt_policy: neither incoming nor outgoing policy selected [ 96.348844][ T40] audit: type=1400 audit(1781458372.038:534): avc: denied { write } for pid=7544 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 96.357045][ T40] audit: type=1400 audit(1781458372.038:535): avc: denied { setopt } for pid=7543 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.404476][ T7553] block nbd1: Unsupported socket: should be TCP or UNIX. [ 96.490808][ T40] audit: type=1400 audit(1781458372.178:536): avc: denied { create } for pid=7558 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 96.561942][ T40] audit: type=1400 audit(1781458372.248:537): avc: denied { execute } for pid=7558 comm="syz.0.498" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 96.589609][ T40] audit: type=1400 audit(1781458372.268:538): avc: denied { write } for pid=7558 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 96.670304][ T7559] __nla_validate_parse: 14 callbacks suppressed [ 96.670323][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 96.750896][ T7559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.766536][ T7559] bond3 (unregistering): Released all slaves [ 96.885893][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 96.907805][ T7576] team0: Port device veth0 removed [ 97.024603][ T7585] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 97.064360][ T7587] /dev/nullb0: Can't lookup blockdev [ 97.101082][ T7589] syzkaller0: entered promiscuous mode [ 97.103381][ T7589] syzkaller0: entered allmulticast mode [ 97.296024][ T7597] fuse: Bad value for 'fd' [ 97.309344][ T7597] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 97.378310][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 97.502750][ T7621] fuse: Bad value for 'fd' [ 97.519220][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 97.577478][ T5893] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 97.728696][ T5893] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 97.733455][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 97.739859][ T5893] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.742741][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.747460][ T5893] usb 6-1: Product: syz [ 97.749990][ T5893] usb 6-1: Manufacturer: syz [ 97.751450][ T5893] usb 6-1: SerialNumber: syz [ 97.756424][ T5893] usb 6-1: config 0 descriptor?? [ 97.760768][ T5893] usb 6-1: selecting invalid altsetting 0 [ 97.772350][ T7636] batadv_slave_1: entered promiscuous mode [ 97.774638][ T7636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7636 comm=syz.3.524 [ 97.968740][ T5893] usb 6-1: USB disconnect, device number 6 [ 98.416598][ T7644] netlink: 172 bytes leftover after parsing attributes in process `syz.2.525'. [ 98.416592][ T7642] netlink: 172 bytes leftover after parsing attributes in process `syz.2.525'. [ 98.463851][ T7647] ip6t_srh: unknown srh invflags 51E8 [ 98.530269][ T7635] batadv_slave_1: left promiscuous mode [ 98.627465][ T7669] netlink: 'syz.2.535': attribute type 9 has an invalid length. [ 98.663838][ T7669] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 98.666274][ T7669] netlink: 224 bytes leftover after parsing attributes in process `syz.2.535'. [ 98.767896][ T57] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 98.801767][ T7687] netlink: 'syz.3.542': attribute type 7 has an invalid length. [ 98.804129][ T7688] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 98.805779][ T7687] netlink: 'syz.3.542': attribute type 7 has an invalid length. [ 98.816819][ T7688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.821793][ T7688] team0: Port device netdevsim1 added [ 98.897529][ T57] usb 6-1: device descriptor read/64, error -71 [ 98.904568][ T7701] netlink: 'syz.0.546': attribute type 21 has an invalid length. [ 98.908331][ T7701] netlink: 156 bytes leftover after parsing attributes in process `syz.0.546'. [ 98.912624][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 98.912810][ T7701] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 98.920416][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7700 comm=syz.3.547 [ 98.925830][ T7701] netlink: 348 bytes leftover after parsing attributes in process `syz.0.546'. [ 99.101129][ T5893] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 99.138001][ T57] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 99.247584][ T5893] usb 7-1: Using ep0 maxpacket: 32 [ 99.251231][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 99.255438][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 99.259896][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 99.266461][ T5893] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 99.270495][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.273936][ T5893] usb 7-1: Product: syz [ 99.275824][ T5893] usb 7-1: Manufacturer: syz [ 99.277591][ T57] usb 6-1: device descriptor read/64, error -71 [ 99.278170][ T5893] usb 7-1: SerialNumber: syz [ 99.286813][ T5893] usb 7-1: config 0 descriptor?? [ 99.297382][ T5893] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input9 [ 99.308318][ C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 99.320150][ C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 99.327551][ C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 99.331984][ C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 99.388075][ T57] usb usb6-port1: attempt power cycle [ 99.495636][ T7697] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 99.502431][ T7697] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.507111][ T7697] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.523209][ C1] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 99.526125][ T5893] usb 7-1: USB disconnect, device number 3 [ 99.737530][ T57] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 99.772112][ T57] usb 6-1: device descriptor read/8, error -71 [ 99.800745][ T7725] gtp0: entered allmulticast mode [ 99.847383][ T7727] netlink: 76 bytes leftover after parsing attributes in process `syz.3.555'. [ 99.960447][ T7734] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 100.027542][ T57] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 100.048112][ T57] usb 6-1: device descriptor read/8, error -71 [ 100.077851][ T7756] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.086326][ T7758] bridge5: entered promiscuous mode [ 100.088311][ T7758] bridge5: entered allmulticast mode [ 100.159567][ T7765] dlm: plock device version mismatch: kernel (1.2.0), user (769.8192.44) [ 100.168309][ T57] usb usb6-port1: unable to enumerate USB device [ 101.058748][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 101.058759][ T40] audit: type=1400 audit(1781458376.748:558): avc: denied { lock } for pid=7804 comm="syz.0.581" path="socket:[19013]" dev="sockfs" ino=19013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 101.134278][ T7816] binder: 7815:7816 ioctl c0306201 2000000004c0 returned -22 [ 101.145015][ T7818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.157977][ T40] audit: type=1400 audit(1781458376.848:559): avc: denied { create } for pid=7820 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 101.194499][ T7821] netlink: 'syz.0.586': attribute type 8 has an invalid length. [ 101.210113][ T7828] bond6: (slave bond_slave_1): Device is not our slave [ 101.212220][ T7828] bond6: option active_slave: invalid value (bond_slave_1) [ 101.215797][ T7828] bond6 (unregistering): Released all slaves [ 101.247082][ T7821] UHID_CREATE from different security context by process 398 (syz.0.586), this is not allowed. [ 101.254160][ T40] audit: type=1400 audit(1781458376.938:560): avc: denied { ioctl } for pid=7820 comm="syz.0.586" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.263932][ T40] audit: type=1400 audit(1781458376.938:561): avc: denied { associate } for pid=7820 comm="syz.0.586" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 101.326135][ T7845] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 101.366123][ T7847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7847 comm=syz.2.590 [ 101.374546][ T7855] gfs2: error -5 reading superblock [ 101.456583][ T7861] /dev/nullb0: Can't lookup blockdev [ 101.459410][ T40] audit: type=1400 audit(1781458377.138:562): avc: denied { mounton } for pid=7860 comm="syz.3.594" path="/201/bus" dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 101.467993][ T7862] 9pnet: Found fid 0 not clunked [ 101.502899][ T7864] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 101.520963][ T7651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.609863][ T40] audit: type=1400 audit(1781458377.298:563): avc: denied { ioctl } for pid=7873 comm="syz.2.600" path="ipc:[4026532870]" dev="nsfs" ino=4026532870 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.716881][ T7890] tmpfs: Unknown parameter 'gRpquota_inode_hardlimit' [ 101.748099][ T7897] gfs2: not a GFS2 filesystem [ 101.892789][ T40] audit: type=1400 audit(1781458377.578:564): avc: denied { mount } for pid=7904 comm="syz.2.607" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 101.907744][ T40] audit: type=1400 audit(1781458377.578:565): avc: denied { view } for pid=7904 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.910650][ T7905] overlay: Unknown parameter '/' [ 101.918340][ T40] audit: type=1400 audit(1781458377.598:566): avc: denied { mounton } for pid=7904 comm="syz.2.607" path="/160/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.939596][ T40] audit: type=1400 audit(1781458377.628:567): avc: denied { read } for pid=7904 comm="syz.2.607" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.005774][ T7917] __nla_validate_parse: 4 callbacks suppressed [ 102.005785][ T7917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 102.022516][ T7918] netlink: 'syz.1.605': attribute type 21 has an invalid length. [ 102.027727][ T7918] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.037733][ T7918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.041962][ T7918] IPv6: NLM_F_CREATE should be set when creating new route [ 102.045032][ T7918] IPv6: NLM_F_CREATE should be set when creating new route [ 102.048246][ T7918] IPv6: NLM_F_CREATE should be set when creating new route [ 102.055020][ T7918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.103653][ T7917] ip6gretap0: entered promiscuous mode [ 102.113720][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 102.136754][ T7926] gfs2: not a GFS2 filesystem [ 102.290371][ T7942] netlink: 11 bytes leftover after parsing attributes in process `syz.3.618'. [ 102.491570][ T7966] pimreg9: entered allmulticast mode [ 102.584665][ T7975] btrfs: Unknown parameter 'norecoveryommit_pending_bools' [ 102.621805][ T7979] netlink: 71 bytes leftover after parsing attributes in process `syz.3.626'. [ 102.758761][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 102.761660][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.627'. [ 102.771332][ T7986] geneve3: entered promiscuous mode [ 102.773353][ T7986] geneve3: entered allmulticast mode [ 102.877892][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.630'. [ 102.882529][ T7995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.630'. [ 102.886586][ T7995] Unknown options in mask b7f2 [ 103.147963][ T5756] Bluetooth: hci3: command 0x2016 tx timeout [ 103.997022][ T8014] tipc: MTU too low for tipc bearer [ 104.667551][ T5756] Bluetooth: hci0: command 0x2016 tx timeout [ 104.680466][ T7970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.683071][ T7970] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.695315][ T7970] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.706468][ T7970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.709622][ T7970] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.713796][ T7970] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.718749][ T7970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.720887][ T7970] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.723503][ T7970] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.734581][ T7970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.736438][ T7970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.740796][ T7970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.796268][ T8022] befs: (loop1): No write support. Marking filesystem read-only [ 104.799543][ T8022] befs: (loop1): unable to read superblock [ 104.896482][ T8036] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.644'. [ 104.901504][ T8036] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.644'. [ 104.963479][ T8037] tls_set_device_offload: netdev not found [ 105.338176][ T5893] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 105.508737][ T5893] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 105.512166][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.515297][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.518713][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 105.523441][ T5893] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 105.526387][ T5893] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 105.529055][ T5893] usb 6-1: Manufacturer: syz [ 105.531894][ T5893] usb 6-1: config 0 descriptor?? [ 105.713677][ T8051] bond0: (slave team0): Releasing backup interface [ 105.724678][ T8051] bridge_slave_0: left allmulticast mode [ 105.726780][ T8051] bridge_slave_0: left promiscuous mode [ 105.729468][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.736220][ T8051] bridge_slave_1: left allmulticast mode [ 105.740644][ T8051] bridge_slave_1: left promiscuous mode [ 105.744848][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.754091][ T8051] bond0: (slave bond_slave_0): Releasing backup interface [ 105.760784][ T8051] bond0: (slave bond_slave_1): Releasing backup interface [ 105.763149][ T8052] x_tables: duplicate underflow at hook 2 [ 105.774427][ T8051] team0: Port device team_slave_0 removed [ 105.780705][ T8051] team0: Port device team_slave_1 removed [ 105.783466][ T8051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.786157][ T8051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.793902][ T8051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.796587][ T8051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.801453][ T8051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.902732][ T8056] validate_nla: 1 callbacks suppressed [ 105.902748][ T8056] netlink: 'syz.2.652': attribute type 5 has an invalid length. [ 105.973641][ T8049] bond3: up delay (135) is not a multiple of miimon (2), value rounded to 134 ms [ 105.977935][ T8049] bond3 (unregistering): Released all slaves [ 106.069352][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 106.069362][ T40] audit: type=1400 audit(1781458381.758:582): avc: denied { append } for pid=8059 comm="syz.2.654" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.086951][ T5893] usbhid 6-1:0.0: can't add hid device: -71 [ 106.089667][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 106.098503][ T5893] usb 6-1: USB disconnect, device number 11 [ 106.747542][ T5095] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.747606][ T5756] Bluetooth: hci3: command 0x2016 tx timeout [ 106.747658][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.758909][ T8058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.761650][ T8058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 106.768055][ T8058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.770763][ T8058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.773394][ T8058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.820892][ T8074] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.831210][ T8074] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 106.834436][ T8074] binder: 8073:8074 ioctl 4018620d 200000000100 returned -1 [ 106.839775][ T40] audit: type=1400 audit(1781458382.518:583): avc: denied { mounton } for pid=8073 comm="syz.1.656" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 106.846663][ T8074] Can't find a SQUASHFS superblock on nullb0 [ 106.894371][ T8079] [U] v3f"S/4:XTzWtlW= [ 106.900129][ T8079] [U] J"e:" [ 106.956659][ T40] audit: type=1400 audit(1781458382.638:584): avc: denied { read } for pid=8075 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.085992][ T8100] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 107.086027][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 107.100294][ T8100] 8021q: adding VLAN 0 to HW filter on device bond6 [ 107.104502][ T8101] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 107.106952][ T8101] __nla_validate_parse: 37 callbacks suppressed [ 107.106960][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.113720][ T8101] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 107.116988][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.121151][ T8101] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 107.124375][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.128354][ T8101] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 107.130803][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.133839][ T8101] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 107.136227][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.139495][ T8101] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 107.141949][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.144674][ T8101] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 107.147015][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.150417][ T8101] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 107.152805][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.156579][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.160640][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 107.189288][ T8096] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 107.196315][ T40] audit: type=1400 audit(1781458382.878:585): avc: denied { create } for pid=8108 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.215990][ T8114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8114 comm=syz.2.668 [ 107.220690][ T8115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8115 comm=syz.2.668 [ 107.317728][ T8118] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.319744][ T8118] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.321724][ T8118] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.323694][ T8118] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.448994][ T8128] Bluetooth: hci0: load_link_keys: too big key_count value 12137 [ 107.487157][ T40] audit: type=1400 audit(1781458383.168:586): avc: denied { getopt } for pid=8131 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.507541][ T40] audit: type=1400 audit(1781458383.188:587): avc: denied { nlmsg_write } for pid=8134 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 107.517230][ T40] audit: type=1400 audit(1781458383.198:588): avc: denied { connect } for pid=8131 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.526741][ T40] audit: type=1400 audit(1781458383.208:589): avc: denied { read } for pid=8131 comm="syz.3.675" path="socket:[22663]" dev="sockfs" ino=22663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.582865][ T8138] bridge5: entered allmulticast mode [ 107.586221][ T8138] futex_wake_op: syz.3.677 tries to shift op by -1; fix this program [ 107.604588][ T5893] IPVS: starting estimator thread 0... [ 107.699037][ T8145] IPVS: using max 25 ests per chain, 60000 per kthread [ 107.704418][ T8154] mmap: syz.2.682 (8154) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.740369][ T8156] erofs (device loop2): cannot find valid erofs superblock [ 108.149499][ T40] audit: type=1400 audit(1781458383.838:590): avc: denied { mounton } for pid=8171 comm="syz.0.689" path="/146/file0" dev="9p" ino=76829767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.149546][ T8173] 9pnet_virtio: no channels available for device syz [ 108.161438][ T8173] 9pnet_virtio: no channels available for device syz [ 108.164355][ T8173] 9pnet_virtio: no channels available for device syz [ 108.167529][ T8173] 9pnet_virtio: no channels available for device syz [ 108.170151][ T8173] 9pnet_virtio: no channels available for device syz [ 108.172904][ T8173] 9pnet_virtio: no channels available for device syz [ 108.175987][ T8173] 9pnet_virtio: no channels available for device syz [ 108.181125][ T8173] 9pnet_virtio: no channels available for device syz [ 108.184224][ T8173] 9pnet_virtio: no channels available for device syz [ 108.187583][ T8173] 9pnet_virtio: no channels available for device syz [ 108.190973][ T8173] 9pnet_virtio: no channels available for device syz [ 108.199731][ T8173] 9pnet_virtio: no channels available for device syz [ 108.200040][ T40] audit: type=1400 audit(1781458383.888:591): avc: denied { mounton } for pid=8171 comm="syz.0.689" path="/146/file0/file0" dev="9p" ino=76829847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.210751][ T8177] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 108.335640][ T8187] loop6: detected capacity change from 0 to 8 [ 109.066508][ T8224] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 109.377620][ T5750] Bluetooth: hci3: command 0x2016 tx timeout [ 109.377692][ T5748] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.377731][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.377763][ T5095] Bluetooth: hci0: command 0x2016 tx timeout [ 109.399063][ T8267] fuse: Bad value for 'fd' [ 109.400780][ T8267] fuse: Bad value for 'fd' [ 109.542733][ T8270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=8270 comm=syz.0.715 [ 109.554941][ T8270] binder: 8269:8270 ioctl c0109428 200000000700 returned -22 [ 109.941549][ T8294] IPVS: length: 120 != 24 [ 109.982645][ T8302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=8302 comm=syz.3.726 [ 109.982767][ T8300] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 109.991871][ T8302] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 109.992352][ T8300] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 110.033633][ T8300] erspan1: entered promiscuous mode [ 110.041142][ T8312] xt_l2tp: v2 tid > 0xffff: 2031748 [ 110.087570][ T8302] IPv6: sit1: Disabled Multicast RS [ 110.098121][ T8302] sit1: entered allmulticast mode [ 110.198311][ T8335] pim6reg1: entered promiscuous mode [ 110.200654][ T8335] pim6reg1: entered allmulticast mode [ 110.276318][ T8340] /dev/nbd3: Can't lookup blockdev [ 110.328130][ T8342] tipc: Invalid UDP bearer configuration [ 110.328176][ T8342] tipc: Enabling of bearer rejected, failed to enable media [ 110.561531][ T8352] pim6reg1: entered promiscuous mode [ 110.563982][ T8352] pim6reg1: entered allmulticast mode [ 110.883263][ T8362] tipc: Disabling bearer [ 110.895853][ T5757] udevd[5757]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 110.998855][ T8370] gfs2: not a GFS2 filesystem [ 111.042167][ T8376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8376 comm=syz.0.748 [ 111.089405][ T5748] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 111.136408][ T5748] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 111.142055][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 111.142070][ T40] audit: type=1400 audit(1781458386.828:614): avc: denied { setattr } for pid=8385 comm="syz.3.751" name="SMC" dev="sockfs" ino=21952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.143132][ T5748] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 111.154595][ T5748] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 111.154624][ T5748] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 111.349953][ T8406] /dev/nullb0: Can't lookup blockdev [ 111.394563][ T40] audit: type=1400 audit(1781458387.078:615): avc: denied { ioctl } for pid=8407 comm="syz.3.758" path="socket:[23055]" dev="sockfs" ino=23055 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.438155][ T8413] validate_nla: 26 callbacks suppressed [ 111.438166][ T8413] netlink: 'syz.3.759': attribute type 16 has an invalid length. [ 111.442416][ T8413] netlink: 'syz.3.759': attribute type 17 has an invalid length. [ 111.444844][ T40] audit: type=1400 audit(1781458387.128:616): avc: denied { write } for pid=8414 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.458460][ T8413] bridge0: port 2(syz_tun) entered disabled state [ 111.459797][ T5748] Bluetooth: hci3: command 0x2016 tx timeout [ 111.467799][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.468482][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.476171][ T8413] dummy0: left promiscuous mode [ 111.490241][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.528809][ T8413] bond0: entered promiscuous mode [ 111.530551][ T8413] bond_slave_0: entered promiscuous mode [ 111.532444][ T8413] bond_slave_1: entered promiscuous mode [ 111.535109][ T8413] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.541726][ T8413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 111.549777][ T8413] ip6erspan0: left promiscuous mode [ 111.558968][ T8413] geneve3: left promiscuous mode [ 111.561116][ T8413] geneve3: left allmulticast mode [ 111.565123][ T8413] bridge5: left allmulticast mode [ 111.570922][ T8413] sit1: left allmulticast mode [ 111.639860][ T8423] ubi2: attaching mtd0 [ 111.640874][ T40] audit: type=1400 audit(1781458387.328:617): avc: denied { write } for pid=8418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.641771][ T8423] ubi2 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72) [ 111.712616][ T40] audit: type=1400 audit(1781458387.398:618): avc: denied { write } for pid=8426 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.826355][ T8436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8436 comm=syz.3.765 [ 111.831142][ T8436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8436 comm=syz.3.765 [ 111.835077][ T8436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8436 comm=syz.3.765 [ 111.879313][ T8440] /dev/nullb0: Can't lookup blockdev [ 112.135046][ T40] audit: type=1400 audit(1781458387.818:619): avc: denied { append } for pid=8453 comm="syz.1.772" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.408791][ T8471] gfs2: not a GFS2 filesystem [ 112.416259][ T40] audit: type=1400 audit(1781458388.098:620): avc: denied { write } for pid=8470 comm="syz.2.777" name="/" dev="9p" ino=76829767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.580973][ T40] audit: type=1400 audit(1781458388.268:621): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.614287][ T40] audit: type=1400 audit(1781458388.298:622): avc: denied { write } for pid=8479 comm="syz.0.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.680200][ T8482] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.683613][ T8483] gtp1: entered allmulticast mode [ 112.687492][ T8483] __nla_validate_parse: 41 callbacks suppressed [ 112.687502][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 112.799722][ T8492] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 112.801175][ T40] audit: type=1400 audit(1781458388.488:623): avc: denied { bpf } for pid=8490 comm="syz.2.784" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.872883][ T8500] /dev/sr0: Can't lookup blockdev [ 112.905315][ T8501] Mount JFS Failure: -5 [ 112.909361][ T8501] jfs_mount failed w/return code = -5 [ 113.088691][ T8515] netlink: 'syz.3.789': attribute type 29 has an invalid length. [ 113.094595][ T8515] netlink: 'syz.3.789': attribute type 29 has an invalid length. [ 113.151689][ T8520] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.789'. [ 113.155701][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.789'. [ 113.165408][ T8520] netlink: 'syz.3.789': attribute type 21 has an invalid length. [ 113.169192][ T8520] netlink: 128 bytes leftover after parsing attributes in process `syz.3.789'. [ 113.172931][ T8520] netlink: 'syz.3.789': attribute type 4 has an invalid length. [ 113.176088][ T8520] netlink: 'syz.3.789': attribute type 5 has an invalid length. [ 113.180062][ T8520] netlink: 3 bytes leftover after parsing attributes in process `syz.3.789'. [ 113.241224][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 113.448721][ T8534] binder: 8532:8534 ioctl c0306201 200000000640 returned -22 [ 113.451396][ T8533] binder: 8532:8533 ioctl 8004f50c 200000000040 returned -22 [ 113.456897][ T8536] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 113.843976][ T8558] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 113.845948][ T8558] PKCS7: Only support pkcs7_signedData type [ 114.339345][ T8577] xfs: Unknown parameter 'd5rd' [ 114.402503][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 114.596146][ T8603] ata1.00: invalid cdb length 6 [ 114.647103][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.818'. [ 114.653984][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.818'. [ 114.790147][ T8624] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 115.982852][ T8642] Invalid source name [ 115.984645][ T8642] UBIFS error (pid: 8642): cannot open "ubifs", error -22 [ 116.040094][ T5750] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 116.203639][ T8654] netlink: 256 bytes leftover after parsing attributes in process `syz.3.829'. [ 116.348608][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 116.348625][ T40] audit: type=1400 audit(1781458392.038:638): avc: denied { mount } for pid=8666 comm="syz.3.833" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 116.453487][ T40] audit: type=1400 audit(1781458392.138:639): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 116.749785][ T8682] xt_hashlimit: size too large, truncated to 1048576 [ 116.952734][ T8687] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 116.960119][ T8687] xfrm0 speed is unknown, defaulting to 1000 [ 116.962880][ T8687] xfrm0 speed is unknown, defaulting to 1000 [ 116.966796][ T8687] xfrm0 speed is unknown, defaulting to 1000 [ 116.969657][ T8687] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.974403][ T8687] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.980062][ T8687] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.988663][ T8687] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.001390][ T8687] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.031054][ T8687] xfrm0 speed is unknown, defaulting to 1000 [ 117.033834][ T8687] xfrm0 speed is unknown, defaulting to 1000 [ 117.037284][ T8687] xfrm0 speed is unknown, defaulting to 1000 [ 117.042611][ T8687] xfrm0 speed is unknown, defaulting to 1000 [ 117.139423][ T40] audit: type=1400 audit(1781458392.828:640): avc: denied { write } for pid=8689 comm="syz.1.840" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.244165][ T8705] gtp2: entered allmulticast mode [ 117.318932][ T8715] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 117.322643][ T40] audit: type=1400 audit(1781458393.008:641): avc: denied { setattr } for pid=8713 comm="syz.1.844" name="NETLINK" dev="sockfs" ino=23760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.325013][ T5847] hid (null): global environment stack underflow [ 117.346950][ T5847] hid-generic 616F:20C2607D:F72986D9.0003: global environment stack underflow [ 117.351966][ T5847] hid-generic 616F:20C2607D:F72986D9.0003: item 0 1 1 11 parsing failed [ 117.356684][ T5847] hid-generic 616F:20C2607D:F72986D9.0003: probe with driver hid-generic failed with error -22 [ 117.391874][ T8719] vcan0: tx address claim with different name [ 117.705669][ T8731] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 117.720707][ T8731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.791139][ T8731] bond3: (slave veth3): Enslaving as an active interface with a down link [ 117.813949][ T8731] bond3: (slave dummy0): making interface the new active one [ 117.821197][ T8731] dummy0: entered promiscuous mode [ 117.823796][ T8731] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 117.829158][ T8731] __nla_validate_parse: 11 callbacks suppressed [ 117.829171][ T8731] netlink: 14 bytes leftover after parsing attributes in process `syz.1.849'. [ 117.841971][ T8731] bond3: (slave dummy0): Releasing active interface [ 117.844695][ T8731] dummy0 (unregistering): left promiscuous mode [ 117.949565][ T40] audit: type=1400 audit(1781458393.638:642): avc: denied { read write } for pid=8745 comm="syz.2.852" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 117.957165][ T40] audit: type=1400 audit(1781458393.638:643): avc: denied { open } for pid=8745 comm="syz.2.852" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 118.061305][ T8759] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 118.341470][ T8780] netlink: 14 bytes leftover after parsing attributes in process `syz.1.860'. [ 118.444243][ T8792] syz_tun: left allmulticast mode [ 118.451092][ T8792] syz_tun: left promiscuous mode [ 118.453564][ T8792] bridge0: port 2(syz_tun) entered disabled state [ 118.470563][ T8792] bridge_slave_0: left allmulticast mode [ 118.473014][ T8792] bridge_slave_0: left promiscuous mode [ 118.476036][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.478355][ T8804] Cannot find del_set index 1 as target [ 118.513679][ T8792] bond3: (slave veth0_to_bond): Releasing backup interface [ 118.543700][ T8792] bond0: (slave bond_slave_0): Releasing backup interface [ 118.554363][ T8792] bond_slave_0: left promiscuous mode [ 118.581703][ T8792] bond0: (slave bond_slave_1): Releasing backup interface [ 118.589156][ T40] audit: type=1326 audit(1781458394.278:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8808 comm="syz.0.866" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d4399ce59 code=0x0 [ 118.589901][ T8792] bond_slave_1: left promiscuous mode [ 118.613820][ T8792] team0: Port device team_slave_0 removed [ 118.620143][ T8792] team0: Port device team_slave_1 removed [ 118.625475][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.630436][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.637286][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.642500][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.658110][ T8792] bond2: (slave geneve2): Releasing active interface [ 118.722932][ T5847] xfrm0 speed is unknown, defaulting to 1000 [ 119.044107][ T40] audit: type=1400 audit(1781982682.721:645): avc: denied { bind } for pid=8832 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.116510][ T8840] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 119.194747][ T8846] sit2: entered promiscuous mode [ 119.219344][ T40] audit: type=1400 audit(1781982682.901:646): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53902 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 119.231339][ T40] audit: type=1400 audit(1781982682.901:647): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=53902 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 119.276218][ T8857] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 119.302443][ T8857] 8021q: adding VLAN 0 to HW filter on device bond4 [ 119.350169][ T8857] bond4: (slave veth5): Enslaving as an active interface with a down link [ 119.365301][ T8857] netlink: 14 bytes leftover after parsing attributes in process `syz.1.879'. [ 119.515678][ T8877] MTD: Couldn't look up '/dev/loop3': -13 [ 119.518029][ T8877] /dev/loop3: Can't lookup blockdev [ 119.694063][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 120.431158][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 120.487360][ T8910] fuse: Bad value for 'fd' [ 121.136436][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'. [ 121.141124][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 121.154378][ T8935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 121.165608][ T8936] macvlan3: entered allmulticast mode [ 121.167330][ T8936] dummy0: entered allmulticast mode [ 121.169156][ T8936] dummy0: entered promiscuous mode [ 121.311182][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 121.357864][ T8969] x_tables: duplicate underflow at hook 1 [ 121.361338][ T8969] bridge_slave_0: invalid flags given to default FDB implementation [ 121.415771][ T5750] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 121.422235][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'. [ 121.425658][ T8979] Bluetooth: MGMT ver 1.23 [ 121.426057][ T8981] Unknown options in mask b7f2 [ 121.474867][ T8975] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 121.499522][ T8985] netlink: 'syz.3.920': attribute type 21 has an invalid length. [ 121.502773][ T8985] netlink: 156 bytes leftover after parsing attributes in process `syz.3.920'. [ 121.526607][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 121.526617][ T40] audit: type=1400 audit(1781982685.145:658): avc: denied { read } for pid=8986 comm="syz.0.921" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 121.541313][ T40] audit: type=1400 audit(1781982685.145:659): avc: denied { open } for pid=8986 comm="syz.0.921" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 121.551008][ T40] audit: type=1400 audit(1781982685.145:660): avc: denied { ioctl } for pid=8986 comm="syz.0.921" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 121.838681][ T9023] syzkaller0: entered promiscuous mode [ 121.840433][ T9023] syzkaller0: entered allmulticast mode [ 121.996396][ T40] audit: type=1400 audit(1781982685.592:661): avc: denied { checkpoint_restore } for pid=9041 comm="syz.2.936" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.130036][ T9055] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.132514][ T40] audit: type=1400 audit(1781982685.728:662): avc: denied { mounton } for pid=9054 comm="syz.2.941" path="/242/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 122.145185][ T40] audit: type=1400 audit(1781982685.748:663): avc: denied { write } for pid=9054 comm="syz.2.941" name="/" dev="9p" ino=76829767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.155029][ T9055] overlay: ./file0 is not a directory [ 122.381660][ T9061] syzkaller1: entered promiscuous mode [ 122.383923][ T9061] syzkaller1: entered allmulticast mode [ 122.409972][ T9061] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 122.862983][ T9105] /dev/nbd3: Can't lookup blockdev [ 122.995286][ T40] audit: type=1400 audit(1781982686.575:664): avc: denied { bind } for pid=9122 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.001580][ T40] audit: type=1400 audit(1781982686.575:665): avc: denied { listen } for pid=9122 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.009708][ T40] audit: type=1400 audit(1781982686.585:666): avc: denied { mount } for pid=9122 comm="syz.2.963" name="/" dev="configfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.013447][ T9125] __nla_validate_parse: 6 callbacks suppressed [ 123.013462][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.964'. [ 123.033147][ T40] audit: type=1400 audit(1781982686.605:667): avc: denied { accept } for pid=9122 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.099625][ T9128] binder: 9127:9128 ioctl c0306201 2000000001c0 returned -22 [ 123.151250][ T9135] nbd: must specify a device to reconfigure [ 123.634492][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.972'. [ 123.658715][ T9155] xt_policy: neither incoming nor outgoing policy selected [ 123.721233][ T9163] overlayfs: upper fs does not support file handles, falling back to index=off. [ 124.012504][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 124.015787][ T9194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.985'. [ 124.018803][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 124.253796][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 124.258021][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.989'. [ 124.360658][ T9212] vlan0: entered allmulticast mode [ 124.362347][ T9212] macsec0: entered allmulticast mode [ 124.363972][ T9212] veth1_macvtap: entered allmulticast mode [ 124.545240][ T9233] bond0: Device is already in use. [ 124.569570][ T9235] SELinux: failed to load policy [ 124.630068][ T9244] macsec2: entered promiscuous mode [ 124.631759][ T9244] macsec2: entered allmulticast mode [ 124.719462][ T9250] EXT4-fs (nbd1): unable to read superblock [ 125.397880][ T9282] fuse: Bad value for 'fd' [ 126.224675][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1017'. [ 126.228053][ T9285] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.231012][ T9285] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.351730][ T9285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.364802][ T9285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.442945][ T5748] Bluetooth: hci4: command 0x1003 tx timeout [ 126.445890][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 126.469293][ T9285] veth1_macvtap: left allmulticast mode [ 126.472637][ T9285] macsec0: left promiscuous mode [ 126.474568][ T9285] macsec0: left allmulticast mode [ 126.556499][ T9285] xfrm1: left promiscuous mode [ 126.559260][ T9285] xfrm1: left allmulticast mode [ 126.568322][ T9285] erspan1: left promiscuous mode [ 126.582285][ T9285] macsec2: left promiscuous mode [ 126.583901][ T9285] macsec2: left allmulticast mode [ 126.608462][ T578] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.612040][ T578] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.616449][ T578] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 126.620381][ T578] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.624682][ T578] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.628697][ T578] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 126.636791][ T578] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.637666][ T9289] xfrm0 speed is unknown, defaulting to 1000 [ 126.639532][ T578] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.639549][ T578] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 126.639570][ T578] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.639585][ T578] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.642738][ T9302] SELinux: syz.3.1019 (9302) wrote to checkreqprot. This is no longer supported. [ 126.644983][ T578] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 126.669387][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 126.669398][ T40] audit: type=1400 audit(1781982690.161:681): avc: denied { setattr } for pid=9301 comm="syz.3.1019" name="RXRPC" dev="sockfs" ino=27688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.769582][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.885142][ T9313] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 126.891783][ T9314] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 126.924990][ T39] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.928767][ T39] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.933282][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.937236][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 126.941825][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 126.947504][ T39] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.951023][ T39] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.954430][ T39] usb 5-1: Product: syz [ 126.955737][ T39] usb 5-1: Manufacturer: syz [ 126.964147][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 126.966518][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 126.976738][ T39] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 126.979269][ T39] cdc_wdm 5-1:1.0: Unknown control protocol [ 127.164494][ T9327] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 127.230177][ T40] audit: type=1400 audit(1781982690.710:682): avc: denied { create } for pid=9331 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.245332][ T40] audit: type=1400 audit(1781982690.710:683): avc: denied { bind } for pid=9331 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.251328][ T40] audit: type=1400 audit(1781982690.710:684): avc: denied { setopt } for pid=9331 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.259175][ T40] audit: type=1400 audit(1781982690.710:685): avc: denied { accept } for pid=9331 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.265386][ T40] audit: type=1400 audit(1781982690.720:686): avc: denied { ioctl } for pid=9331 comm="syz.2.1030" path="socket:[25280]" dev="sockfs" ino=25280 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.273134][ T40] audit: type=1400 audit(1781982690.730:687): avc: denied { write } for pid=9331 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.280732][ T40] audit: type=1400 audit(1781982690.730:688): avc: denied { read } for pid=9331 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 127.362958][ T9348] xt_hashlimit: overflow, rate too high: 0 [ 127.384974][ T9348] tc action pedit 'at' offset 46 out of bounds [ 127.418207][ T9355] netem: change failed [ 127.431323][ T9355] xfrm0 speed is unknown, defaulting to 1000 [ 127.617122][ T9370] openvswitch: netlink: Flow key attribute not present in set flow. [ 127.677965][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 127.737275][ T40] audit: type=1400 audit(1781982691.200:689): avc: denied { read write } for pid=9299 comm="syz.0.1018" name="cdc-wdm0" dev="devtmpfs" ino=2942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 127.748644][ T40] audit: type=1400 audit(1781982691.200:690): avc: denied { open } for pid=9299 comm="syz.0.1018" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 127.773608][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 127.880043][ T9391] bond8: entered promiscuous mode [ 127.882107][ T9391] 8021q: adding VLAN 0 to HW filter on device bond8 [ 127.909391][ T9394] sit1: entered promiscuous mode [ 127.949008][ T5744] usb 5-1: USB disconnect, device number 4 [ 128.032237][ T9403] netlink: 'syz.2.1055': attribute type 15 has an invalid length. [ 128.295302][ T9408] __nla_validate_parse: 1 callbacks suppressed [ 128.295320][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1056'. [ 128.304043][ T9408] fuse: Bad value for 'fd' [ 128.375111][ T9412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1057'. [ 128.381919][ T9412] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1057'. [ 128.504024][ T9417] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1059'. [ 128.508483][ T9417] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1059'. [ 129.255672][ T9449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1072'. [ 129.259592][ T9449] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1072'. [ 129.264885][ T9449] netlink: 'syz.3.1072': attribute type 6 has an invalid length. [ 129.269078][ T9449] netlink: 'syz.3.1072': attribute type 5 has an invalid length. [ 129.273085][ T9449] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1072'. [ 129.282042][ T9450] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 129.285556][ T9449] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 129.289089][ T9450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.291002][ T9449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.336409][ T5750] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 129.417168][ T9467] xfrm0 speed is unknown, defaulting to 1000 [ 129.442193][ T9426] overlayfs: statfs failed on './file0' [ 129.463261][ T9473] openvswitch: netlink: EtherType 50a is less than min 600 [ 129.535358][ T9484] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 129.632113][ T9500] tmpfs: Bad value for 'mpol' [ 129.709979][ T9502] kvm: pic: level sensitive irq not supported [ 129.877916][ T9526] netlink: 'syz.1.1095': attribute type 10 has an invalid length. [ 129.882348][ T9526] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1095'. [ 129.981847][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 129.985763][ T9528] netem: unknown loss type 13 [ 129.987967][ T9528] netem: change failed [ 130.030906][ T5750] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 130.212818][ T9558] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 130.226825][ T9558] syzkaller1: entered promiscuous mode [ 130.228666][ T9558] syzkaller1: entered allmulticast mode [ 130.481579][ T9579] x_tables: duplicate underflow at hook 1 [ 130.928714][ T9605] xfrm0 speed is unknown, defaulting to 1000 [ 130.930352][ T9607] No buffer was provided with the request [ 131.026435][ T9613] CUSE: unknown device info "" [ 131.028013][ T9613] CUSE: zero length info key specified [ 131.036430][ T9620] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 131.128806][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.164819][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.174200][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.176677][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.179790][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.182522][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.185126][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.187977][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.190653][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.193378][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.196533][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.200253][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.202940][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.205649][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.208474][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.211219][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.213886][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.216113][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.219330][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.222045][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.224362][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.227056][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.230252][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.232954][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.235599][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.239379][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.242684][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.245395][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.248298][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.250913][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.253024][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.255050][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.257092][ T9637] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 131.407222][ T9662] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 131.609404][ T9684] 9pnet_fd: Insufficient options for proto=fd [ 131.636213][ T9687] openvswitch: netlink: IP tunnel TTL not specified. [ 132.139385][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 132.139395][ T40] audit: type=1400 audit(1781982695.537:714): avc: denied { name_bind } for pid=9737 comm="syz.1.1146" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 132.541008][ T9745] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.549161][ T5748] Bluetooth: hci4: command 0x1003 tx timeout [ 132.551293][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 132.583409][ T9745] xfrm0 speed is unknown, defaulting to 1000 [ 132.604488][ T9747] syzkaller0: entered promiscuous mode [ 132.606213][ T9747] syzkaller0: entered allmulticast mode [ 132.712621][ T9745] program syz.1.1149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.768515][ T9766] xt_TPROXY: Can be used only with -p tcp or -p udp [ 132.815003][ T1480] libceph: connect (1)[c::]:6789 error -101 [ 132.816992][ T1480] libceph: mon0 (1)[c::]:6789 connect error [ 132.845845][ T40] audit: type=1400 audit(1781982696.237:715): avc: denied { listen } for pid=9780 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.878292][ T9783] bond2: Unable to set up delay as MII monitoring is disabled [ 132.882953][ T9783] bond2 (unregistering): Released all slaves [ 133.023779][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.074734][ T1480] libceph: connect (1)[c::]:6789 error -101 [ 133.076723][ T1480] libceph: mon0 (1)[c::]:6789 connect error [ 133.197714][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.202294][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.206334][ T34] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 133.210039][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.217349][ T34] usb 5-1: config 0 descriptor?? [ 133.592114][ T1480] libceph: connect (1)[c::]:6789 error -101 [ 133.594858][ T1480] libceph: mon0 (1)[c::]:6789 connect error [ 133.615467][ T9774] ceph: No mds server is up or the cluster is laggy [ 133.630820][ T34] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 133.633107][ T34] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 133.646795][ T34] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0004/input/input12 [ 133.680904][ T34] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 133.698868][ T9791] bond9: entered promiscuous mode [ 133.714001][ T9791] bond10: entered promiscuous mode [ 133.716464][ T9791] __nla_validate_parse: 3 callbacks suppressed [ 133.716478][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 133.722111][ T9791] netlink: 'syz.3.1163': attribute type 30 has an invalid length. [ 133.724848][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1163'. [ 133.729923][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 133.840130][ T9775] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.887498][ T9810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.892150][ T9810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.909454][ T34] usb 5-1: USB disconnect, device number 5 [ 133.946486][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 133.970276][ T40] audit: type=1400 audit(1781982697.342:716): avc: denied { create } for pid=9818 comm="syz.0.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 133.996375][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1168'. [ 134.001418][ T9820] xt_recent: Unsupported userspace flags (000000b2) [ 134.104056][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1173'. [ 134.107052][ T9832] Unknown options in mask b7f2 [ 134.145135][ T9840] : entered promiscuous mode [ 134.165440][ T9842] xfrm0 speed is unknown, defaulting to 1000 [ 134.257829][ T40] audit: type=1400 audit(1781982697.629:717): avc: denied { bind } for pid=9843 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.307571][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 134.311776][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 134.569561][ T40] audit: type=1400 audit(1781982697.935:718): avc: denied { write } for pid=9863 comm="syz.1.1183" name="/" dev="9p" ino=76829767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.846546][ T9871] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 134.857839][ T9871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.865026][ T40] audit: type=1400 audit(1781982698.221:719): avc: denied { listen } for pid=9872 comm="syz.1.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.866499][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 134.871340][ T40] audit: type=1400 audit(1781982698.221:720): avc: denied { lock } for pid=9870 comm="syz.0.1185" path="socket:[29865]" dev="sockfs" ino=29865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.875286][ T9871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1185'. [ 134.882030][ T40] audit: type=1400 audit(1781982698.221:721): avc: denied { accept } for pid=9872 comm="syz.1.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.928589][ T9877] xfrm0 speed is unknown, defaulting to 1000 [ 135.192018][ T40] audit: type=1400 audit(1781982698.557:722): avc: denied { create } for pid=9894 comm="syz.3.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.203513][ T40] audit: type=1400 audit(1781982698.567:723): avc: denied { setopt } for pid=9894 comm="syz.3.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.264432][ T9895] dummy0 (unregistering): left allmulticast mode [ 135.265678][ T9] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 135.393723][ T9] usb 5-1: device descriptor read/64, error -71 [ 135.636899][ T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 135.769669][ T9] usb 5-1: device descriptor read/64, error -71 [ 135.780422][ T1198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.787191][ T1198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.880102][ T9] usb usb5-port1: attempt power cycle [ 135.894473][ T1198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.898335][ T1198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.991962][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.006706][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.006823][ T1198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.011724][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.013443][ T1198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.026748][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.029422][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.074245][ T1198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.077467][ T1198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.174033][ T5893] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 136.223157][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 136.244016][ T9] usb 5-1: device descriptor read/8, error -71 [ 136.299149][T10001] xfrm0 speed is unknown, defaulting to 1000 [ 136.344545][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 136.351445][ T5893] usb 6-1: config 3 has an invalid interface number: 20 but max is 0 [ 136.354998][ T5893] usb 6-1: config 3 has no interface number 0 [ 136.357577][ T5893] usb 6-1: config 3 interface 20 has no altsetting 0 [ 136.363378][ T5893] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 136.368055][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.370618][ T5893] usb 6-1: Product: syz [ 136.371994][ T5893] usb 6-1: Manufacturer: syz [ 136.373443][ T5893] usb 6-1: SerialNumber: syz [ 136.489234][ T9] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 136.506949][ T9] usb 5-1: device descriptor read/8, error -71 [ 136.571110][ T578] smbdirect: ib_dev[syz1] removed [ 136.593424][T10000] loop5: detected capacity change from 0 to 7 [ 136.598690][T10000] Dev loop5: unable to read RDB block 7 [ 136.601542][T10000] loop5: AHDI p1 p3 p4 [ 136.603158][T10000] loop5: partition table partially beyond EOD, truncated [ 136.605939][T10000] loop5: p1 start 1818582900 is beyond EOD, truncated [ 136.608420][T10000] loop5: p3 start 719360596 is beyond EOD, truncated [ 136.617743][ T9] usb usb5-port1: unable to enumerate USB device [ 136.663516][ T5893] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:3.20/input/input14 [ 136.685383][ T5130] bcm5974 6-1:3.20: could not read from device [ 136.696851][ T5130] bcm5974 6-1:3.20: could not read from device [ 136.696869][ T5893] usb 6-1: USB disconnect, device number 13 [ 137.136582][ T1198] bond0 (unregistering): left promiscuous mode [ 137.146763][ T1198] bond0 (unregistering): Released all slaves [ 137.151491][ T1198] bond1 (unregistering): Released all slaves [ 137.159338][ T1198] bond2 (unregistering): Released all slaves [ 137.169928][ T1198] bond3 (unregistering): Released all slaves [ 137.181309][ T1198] bond4 (unregistering): Released all slaves [ 137.190574][ T1198] bond5 (unregistering): Released all slaves [ 137.201157][ T1198] bond6 (unregistering): Released all slaves [ 137.214408][ T1198] bond7 (unregistering): Released all slaves [ 137.222149][ T1198] bond8 (unregistering): Released all slaves [ 137.230090][ T1198] bond9 (unregistering): Released all slaves [ 137.238982][ T1198] bond10 (unregistering): Released all slaves [ 137.270957][ T5820] xfrm0 speed is unknown, defaulting to 1000 [ 137.271986][T10031] syzkaller0: entered promiscuous mode [ 137.273581][ T5820] infiniband syz1: ib_query_port failed (-19) [ 137.275962][T10031] syzkaller0: entered allmulticast mode [ 137.301838][T10040] dvmrp0: entered allmulticast mode [ 137.312322][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 137.312337][ T40] audit: type=1400 audit(1781982700.644:729): avc: denied { getopt } for pid=10045 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.386144][ T40] audit: type=1400 audit(1781982700.723:730): avc: denied { write } for pid=10049 comm="syz.1.1202" name="/" dev="9p" ino=76829767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.425236][ T40] audit: type=1400 audit(1781982700.753:731): avc: denied { write } for pid=10051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.447940][ T1198] : left promiscuous mode [ 137.514966][ T40] audit: type=1400 audit(1781982700.842:732): avc: denied { write } for pid=10055 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.576519][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 137.617725][ T1198] : left promiscuous mode [ 137.680206][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.683298][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.687532][T10001] bridge_slave_0: entered allmulticast mode [ 137.693040][T10001] bridge_slave_0: entered promiscuous mode [ 137.697867][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.701367][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.704570][T10001] bridge_slave_1: entered allmulticast mode [ 137.711633][T10001] bridge_slave_1: entered promiscuous mode [ 137.718047][ T1198] tipc: Disabling bearer [ 137.725054][ T1198] tipc: Left network mode [ 137.755174][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.764223][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.782657][ T40] audit: type=1400 audit(1781982701.119:733): avc: denied { write } for pid=10079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.808798][T10082] program syz.1.1207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.820037][T10001] team0: Port device team_slave_0 added [ 137.834901][ T1134] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 137.836635][T10001] team0: Port device team_slave_1 added [ 137.839738][ T1134] ata1.00: irq_stat 0x40000000 [ 137.842493][ T1134] ata1.00: failed command: ZAC MANAGEMENT OUT [ 137.845035][ T1134] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 0 [ 137.845035][ T1134] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 137.851382][ T1134] ata1.00: status: { DRDY ERR } [ 137.853426][ T1134] ata1.00: error: { ABRT } [ 137.855293][ T1134] ata1.00: device reported invalid CHS sector 0 [ 137.859707][ T40] audit: type=1400 audit(1781982701.188:734): avc: denied { write } for pid=10085 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.904902][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.907977][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.919955][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.927307][T10001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.930285][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.940756][T10001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.948613][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 137.975315][ T40] audit: type=1400 audit(1781982957.303:735): avc: denied { create } for pid=10087 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.982454][ T40] audit: type=1400 audit(1781982957.303:736): avc: denied { ioctl } for pid=10087 comm="syz.1.1208" path="socket:[29290]" dev="sockfs" ino=29290 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.015069][T10001] hsr_slave_0: entered promiscuous mode [ 138.017386][T10001] hsr_slave_1: entered promiscuous mode [ 138.019468][T10001] debugfs: 'hsr0' already exists in 'hsr' [ 138.021377][T10001] Cannot create hsr debugfs directory [ 138.063277][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.065903][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.075578][ T40] audit: type=1400 audit(1781982957.403:737): avc: denied { ioctl } for pid=10090 comm="syz.1.1209" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 138.130030][T10096] netlink: 'syz.0.1210': attribute type 1 has an invalid length. [ 138.131566][ T5750] Bluetooth: hci3: command tx timeout [ 138.132722][T10096] netlink: 'syz.0.1210': attribute type 2 has an invalid length. [ 138.132736][T10096] netlink: 'syz.0.1210': attribute type 1 has an invalid length. [ 138.133355][T10096] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 138.136107][ T40] audit: type=1400 audit(1781982957.463:738): avc: denied { write } for pid=10093 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.230692][T10107] netlink: 'syz.0.1214': attribute type 2 has an invalid length. [ 138.287254][ T1198] veth1_macvtap: left allmulticast mode [ 138.288994][ T1198] veth1_macvtap: left promiscuous mode [ 138.292253][ T1198] veth0_macvtap: left promiscuous mode [ 138.294261][ T1198] veth1_vlan: left promiscuous mode [ 138.500890][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 139.055272][ T1198] IPVS: stop unused estimator thread 0... [ 139.217786][T10001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.225252][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.227234][T10132] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 139.230103][T10001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.244218][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.252336][T10001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.260148][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.265532][T10001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.273807][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.350923][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.383419][T10001] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.392613][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.395746][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.404866][ T8706] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.407209][ T8706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.754783][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.782013][T10001] veth0_vlan: entered promiscuous mode [ 139.791044][T10001] veth1_vlan: entered promiscuous mode [ 139.823734][T10001] veth0_macvtap: entered promiscuous mode [ 139.830222][T10180] kvm: pic: non byte write [ 139.836009][T10001] veth1_macvtap: entered promiscuous mode [ 139.854514][T10001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.863676][T10001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.873102][ T8694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.876204][ T8694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.880613][ T8694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.888225][ T8694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.929020][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 139.983153][ T8706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.991390][ T8706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.016732][ T8706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.019902][ T8706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.101362][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 140.104940][ T9] usb 6-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.110540][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 140.117242][ T9] usb 6-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.40 [ 140.120942][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.123609][ T9] usb 6-1: Product: 䂲崰꥕续狋梜≇懮槰汢⍽렓ຫ菣弓恈ʧ椋怌矙凣ﭪ魯펡臫#▎鮿ｙᦱ湞親꾘眈쑱曳輾䑍謾鸻⃈⭊₎訟⇉㼟ኋꁤ䞲ධ鱣ᓇ钇횳緒⻶ꛨ썃뭸㤪閜瓆ꋍͩ蟇 [ 140.130199][ T9] usb 6-1: Manufacturer: 링躖싳譳Üタ噰꣑Ⰺ赬映諷璁䛘梈낞봟㯅拓﹬洕⇷轸쩧곰꜓骽㢁䚐୛葔㴀吋帵㦳☋썵磈ሻ贵띵英項똗葫虄㮣⻺麁黉⯄僷﹠䠙騅❃ [ 140.136805][ T9] usb 6-1: SerialNumber: 揍ኘ묓챬늘펞㤗Ọᷲᗕ꡾軦㟖䗰諔쯂⳸찊뢉ᥭ瘻칾푯㪓묃淛碆䇞빒ᗬᔀ䑯돜夂ৃؤ걚鍷ᘑ鋾榔闐獺傫៨광賜쫗롦퐑는﫸붚⯋ꚞ뎯뵗瞙긔ꉥ㹨請๢㥮魅漿挻眲⾕濪鴬ꍃ쟁뮠ࢽଳ [ 140.222143][ T5750] Bluetooth: hci3: command tx timeout [ 140.512802][ T5848] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 140.562951][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 140.564906][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 140.570952][ T9] usb 6-1: USB disconnect, device number 14 [ 140.662948][ T5848] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.666947][ T5848] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.670943][ T5848] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.680581][ T5848] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 140.685709][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 140.689317][ T5848] usb 8-1: Product: syz [ 140.691093][ T5848] usb 8-1: Manufacturer: syz [ 140.693475][ T5848] usb 8-1: SerialNumber: syz [ 140.742364][T10235] netlink: 'syz.0.1228': attribute type 12 has an invalid length. [ 140.854027][T10241] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 140.909338][ T5848] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 141.040091][T10252] __nla_validate_parse: 3 callbacks suppressed [ 141.040103][T10252] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1234'. [ 141.111968][T10209] SELinux: security policydb version 18 (MLS) not backwards compatible [ 141.114777][T10209] SELinux: failed to load policy [ 141.115172][T10257] overlayfs: failed to resolve './bus': -2 [ 141.130737][ T9] usb 8-1: USB disconnect, device number 2 [ 141.144506][ T9] usblp0: removed [ 141.168079][T10262] 9pnet_virtio: no channels available for device syz [ 141.178130][T10256] bond4 (unregistering): Released all slaves [ 141.238207][T10267] program syz.1.1239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.256969][T10268] program syz.1.1239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.349301][T10273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57754 sclass=netlink_route_socket pid=10273 comm=syz.1.1241 [ 141.414284][T10274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10274 comm=syz.1.1241 [ 141.481024][T10278] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 141.536485][T10279] tmpfs: Bad value for 'mpol' [ 141.935350][T10296] binder: BINDER_SET_CONTEXT_MGR already set [ 141.937807][T10296] binder: 10295:10296 ioctl 4018620d 200000004a80 returned -16 [ 142.202642][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 142.205317][ T1134] ata1: failed to read log page 10h (errno=-5) [ 142.207953][ T1134] ata1.00: exception Emask 0x1 SAct 0x2 SErr 0x0 action 0x0 [ 142.211082][ T1134] ata1.00: irq_stat 0x40000000 [ 142.213339][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 142.215922][ T1134] ata1.00: cmd 61/50:08:ee:08:10/00:00:00:00:00/40 tag 1 ncq dma 40960 out [ 142.215922][ T1134] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 142.221722][ T1134] ata1.00: status: { DRDY } [ 142.228819][ T1134] ata1.00: configured for UDMA/100 [ 142.231155][ T1134] ata1: EH complete [ 142.247377][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1248'. [ 142.251148][T10299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1248'. [ 142.256749][T10299] comedi comedi0: dac02: I/O base address not correctly aligned [ 142.345631][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 142.345643][ T40] audit: type=1400 audit(1781983217.677:769): avc: denied { create } for pid=10301 comm="syz.0.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.355109][ T40] audit: type=1400 audit(1781983217.677:770): avc: denied { write } for pid=10301 comm="syz.0.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.355987][T10302] tmpfs: Bad value for 'mpol' [ 142.541739][T10316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1256'. [ 142.545427][ T40] audit: type=1400 audit(1781983217.877:771): avc: denied { append } for pid=10315 comm="syz.0.1256" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.656232][ T40] audit: type=1400 audit(1781983217.987:772): avc: denied { setattr } for pid=10326 comm="syz.1.1260" name="vcsa1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 142.668965][ T40] audit: type=1400 audit(1781983217.987:773): avc: denied { getopt } for pid=10326 comm="syz.1.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.099300][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1264'. [ 143.121676][T10341] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1264'. [ 143.211709][T10356] FAT-fs (nullb0): bogus number of reserved sectors [ 143.214068][T10356] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 143.255114][T10360] fuse: Unknown parameter '8"6O^5uW^R@' [ 143.309859][T10362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.325533][T10362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.333348][T10362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.348547][T10362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.360886][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.728693][ T40] audit: type=1400 audit(1781983219.057:774): avc: denied { bind } for pid=10394 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.735068][ T40] audit: type=1400 audit(1781983219.057:775): avc: denied { listen } for pid=10394 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.971449][ T5750] Bluetooth: hci3: command tx timeout [ 143.972741][T10426] netlink: 'syz.3.1284': attribute type 4 has an invalid length. [ 144.236899][T10555] overlayfs: failed to resolve './file2': -2 [ 144.310699][T10548] erofs (device loop2): cannot find valid erofs superblock [ 144.312381][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1288'. [ 144.326522][T10596] input: syz1 as /devices/virtual/input/input15 [ 144.346113][T10583] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1288'. [ 144.349047][T10583] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1288'. [ 144.355083][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 144.368356][ T40] audit: type=1326 audit(1781983219.697:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.1.1286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec859ce59 code=0x7ffc0000 [ 144.383333][ T40] audit: type=1326 audit(1781983219.697:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.1.1286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec859ce59 code=0x7ffc0000 [ 144.405463][ T40] audit: type=1326 audit(1781983219.707:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.1.1286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec859ce59 code=0x7ffc0000 [ 144.496093][T10633] Invalid argument reading file caps for ./file0 [ 144.500170][T10633] Invalid argument reading file caps for ./file0 [ 144.523089][T10628] veth1_to_batadv: entered promiscuous mode [ 144.536761][T10636] binder: 10634:10636 ioctl 40046205 0 returned -22 [ 144.540933][T10628] veth1_to_batadv: left promiscuous mode [ 144.654060][ C2] [ 144.655108][ C2] ============================= [ 144.657124][ C2] [ BUG: Invalid wait context ] [ 144.659180][ C2] syzkaller #0 Tainted: G L SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 144.661670][ C2] ----------------------------- [ 144.663749][ C2] modprobe/10649 is trying to lock: [ 144.665948][ C2] ffff88803b565330 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x253/0xe80 [ 144.669725][ C2] other info that might help us debug this: [ 144.672158][ C2] context-{2:2} [ 144.673626][ C2] 3 locks held by modprobe/10649: [ 144.675715][ C2] #0: ffff88802bd0a7f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa10 [ 144.679391][ C2] #1: ffff88803ea57300 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0xe1/0x8e0 [ 144.683566][ C2] #2: ffff88803b565890 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x245/0xe80 [ 144.687437][ C2] stack backtrace: [ 144.689006][ C2] CPU: 2 UID: 0 PID: 10649 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 144.689027][ C2] Tainted: [L]=SOFTLOCKUP [ 144.689032][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.689041][ C2] Call Trace: [ 144.689047][ C2] [ 144.689054][ C2] dump_stack_lvl+0x100/0x190 [ 144.689075][ C2] __lock_acquire+0xfa4/0x2630 [ 144.689095][ C2] ? __lock_acquire+0x4a5/0x2630 [ 144.689111][ C2] ? xa_load+0x149/0x2c0 [ 144.689151][ C2] ? xa_load+0x149/0x2c0 [ 144.689173][ C2] lock_acquire+0x1b1/0x370 [ 144.689189][ C2] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 144.689207][ C2] _raw_read_lock_irqsave+0x46/0x90 [ 144.689223][ C2] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 144.689238][ C2] kvm_xen_set_evtchn_fast+0x253/0xe80 [ 144.689255][ C2] ? kvm_xen_set_evtchn_fast+0x245/0xe80 [ 144.689274][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 144.689297][ C2] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 144.689313][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 144.689332][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 144.689349][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 144.689369][ C2] xen_timer_callback+0x1db/0x2a0 [ 144.689385][ C2] ? __pfx_xen_timer_callback+0x10/0x10 [ 144.689402][ C2] ? __hrtimer_run_queues+0x383/0xa00 [ 144.689426][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 144.689448][ C2] ? __pfx_xen_timer_callback+0x10/0x10 [ 144.689467][ C2] __hrtimer_run_queues+0x142/0xa00 [ 144.689494][ C2] hrtimer_interrupt+0x3e5/0x940 [ 144.689521][ C2] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 144.689544][ C2] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 144.689564][ C2] [ 144.689570][ C2] [ 144.689576][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.689594][ C2] RIP: 0010:unwind_next_frame+0x36/0x2090 [ 144.689617][ C2] Code: ff df 41 57 48 89 fa 41 56 48 c1 ea 03 41 55 49 89 fd 41 54 55 53 48 83 ec 38 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 42 0b 00 00 <41> 8b 5d 00 31 ed 85 db 75 15 48 83 c4 38 89 e8 5b 5d 41 5c 41 5d [ 144.689633][ C2] RSP: 0018:ffffc90006507540 EFLAGS: 00000246 [ 144.689647][ C2] RAX: 0000000000000000 RBX: ffffc900065075b0 RCX: ffffc90006507504 [ 144.689657][ C2] RDX: 1ffff92000ca0eb6 RSI: ffffffff8276940b RDI: ffffc900065075b0 [ 144.689666][ C2] RBP: ffffc90006507640 R08: 0000000000000001 R09: 0000000000000007 [ 144.689675][ C2] R10: 0000000000000200 R11: 0000000000017666 R12: ffffffff81f2f5b0 [ 144.689683][ C2] R13: ffffc900065075b0 R14: 0000000000000000 R15: ffff888030c52540 [ 144.689694][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 144.689719][ C2] ? kasan_save_free_info+0x3b/0x70 [ 144.689759][ C2] ? kasan_save_track+0x14/0x30 [ 144.689777][ C2] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 144.689794][ C2] arch_stack_walk+0x94/0xf0 [ 144.689818][ C2] ? kasan_save_free_info+0x3b/0x70 [ 144.689838][ C2] ? unlink_anon_vmas+0x228/0x8e0 [ 144.689860][ C2] stack_trace_save+0x8e/0xc0 [ 144.689872][ C2] ? __pfx_stack_trace_save+0x10/0x10 [ 144.689887][ C2] ? __lock_acquire+0x4a5/0x2630 [ 144.689906][ C2] kasan_save_stack+0x30/0x50 [ 144.689921][ C2] ? kasan_save_stack+0x30/0x50 [ 144.689935][ C2] ? kasan_save_track+0x14/0x30 [ 144.689950][ C2] ? kasan_save_free_info+0x3b/0x70 [ 144.689984][ C2] kasan_save_track+0x14/0x30 [ 144.690000][ C2] kasan_save_free_info+0x3b/0x70 [ 144.690021][ C2] __kasan_slab_free+0x5f/0x80 [ 144.690036][ C2] kmem_cache_free+0x127/0x6c0 [ 144.690059][ C2] unlink_anon_vmas+0x228/0x8e0 [ 144.690083][ C2] free_pgtables+0x2e7/0xd80 [ 144.690103][ C2] ? __pfx_free_pgtables+0x10/0x10 [ 144.690123][ C2] exit_mmap+0x44c/0xa10 [ 144.690140][ C2] ? __pfx_exit_mmap+0x10/0x10 [ 144.690159][ C2] ? trace_contention_end+0x122/0x170 [ 144.690181][ C2] ? uprobe_clear_state+0x5f/0x260 [ 144.690202][ C2] ? uprobe_clear_state+0x5f/0x260 [ 144.690223][ C2] ? __lock_acquire+0x4a5/0x2630 [ 144.690243][ C2] ? arch_uprobe_clear_state+0x107/0x150 [ 144.690263][ C2] __mmput+0x12a/0x410 [ 144.690285][ C2] mmput+0x67/0x80 [ 144.690305][ C2] do_exit+0x8b2/0x2af0 [ 144.690323][ C2] ? do_raw_spin_lock+0x128/0x260 [ 144.690341][ C2] ? __pfx_do_exit+0x10/0x10 [ 144.690354][ C2] ? do_group_exit+0x1bd/0x2a0 [ 144.690367][ C2] ? rcu_is_watching+0x12/0xc0 [ 144.690388][ C2] do_group_exit+0xd5/0x2a0 [ 144.690403][ C2] __x64_sys_exit_group+0x3e/0x50 [ 144.690417][ C2] x64_sys_call+0x102c/0x1530 [ 144.690440][ C2] do_syscall_64+0x115/0x870 [ 144.690461][ C2] ? clear_bhb_loop+0x40/0x90 [ 144.690479][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.690496][ C2] RIP: 0033:0x7f6fc0b536c5 [ 144.690510][ C2] Code: Unable to access opcode bytes at 0x7f6fc0b5369b. [ 144.690516][ C2] RSP: 002b:00007fff797685d8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 144.690528][ C2] RAX: ffffffffffffffda RBX: 00007f6fc0c54fe8 RCX: 00007f6fc0b536c5 [ 144.690535][ C2] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 144.690543][ C2] RBP: 0000000000000001 R08: 00007fff79768568 R09: 0000000000000000 [ 144.690550][ C2] R10: 00007fff79768400 R11: 0000000000000202 R12: 0000000000000000 [ 144.690560][ C2] R13: 0000000000000001 R14: 00007f6fc0c53680 R15: 00007f6fc0c55000 [ 144.690576][ C2] [ 145.652747][ T8694] bridge_slave_1: left allmulticast mode [ 145.655173][ T8694] bridge_slave_1: left promiscuous mode [ 145.657581][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.661665][ T8694] bridge_slave_0: left allmulticast mode [ 145.664098][ T8694] bridge_slave_0: left promiscuous mode [ 145.666514][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.704184][ T8694] bond2 (unregistering): (slave geneve2): Releasing active interface [ 145.823960][ T8694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.827334][ T8694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.830631][ T8694] bond0 (unregistering): Released all slaves [ 145.833960][ T8694] bond1 (unregistering): Released all slaves [ 145.839590][ T8694] bond2 (unregistering): Released all slaves [ 145.846551][ T8694] bond3 (unregistering): (slave veth3): Releasing active interface [ 145.849386][ T8694] bond3 (unregistering): Released all slaves [ 145.853574][ T8694] bond4 (unregistering): (slave veth5): Releasing active interface [ 145.856886][ T8694] bond4 (unregistering): Released all slaves [ 145.951568][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 146.073587][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 146.153628][ T8694] hsr_slave_0: left promiscuous mode [ 146.156331][ T8694] hsr_slave_1: left promiscuous mode [ 146.158915][ T8694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.162714][ T8694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.220118][ T8694] team0 (unregistering): Port device team_slave_1 removed [ 146.225439][ T8694] team0 (unregistering): Port device team_slave_0 removed [ 146.280693][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 146.429047][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 146.825866][ T8694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.830149][ T8694] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.895850][ T8694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.900163][ T8694] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.020690][ T8694] team0: Port device netdevsim1 removed [ 147.023832][ T8694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.028055][ T8694] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.114825][ T8694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.118758][ T8694] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.205200][ T8694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.251537][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 147.258755][ T8694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.311528][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 147.327528][ T8694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.373859][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 147.373875][ T40] audit: type=1400 audit(1781983222.707:837): avc: denied { write } for pid=10695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.396171][ T8694] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.404388][ T40] audit: type=1400 audit(1781983222.737:838): avc: denied { write } for pid=10698 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.425602][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 147.466646][ T40] audit: type=1400 audit(1781983222.797:839): avc: denied { write } for pid=10701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.467830][ T8694] dvmrp0: left allmulticast mode [ 147.475402][ T8694] pimreg9: left allmulticast mode [ 147.478193][ T8694] bridge_slave_1: left allmulticast mode [ 147.479995][ T8694] bridge_slave_1: left promiscuous mode [ 147.482587][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.486409][ T8694] bridge_slave_0: left allmulticast mode [ 147.488279][ T8694] bridge_slave_0: left promiscuous mode [ 147.490081][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.508603][ T40] audit: type=1400 audit(1781983222.837:840): avc: denied { write } for pid=10704 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.974940][ T8694] bond0 (unregistering): Released all slaves [ 147.979553][ T8694] bond1 (unregistering): Released all slaves [ 148.087379][ T8694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.092452][ T8694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.096850][ T8694] bond0 (unregistering): Released all slaves [ 148.101614][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 148.176012][ T40] audit: type=1400 audit(1781983223.507:841): avc: denied { write } for pid=10711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.213510][ T40] audit: type=1400 audit(1781983223.547:842): avc: denied { write } for pid=10714 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.242108][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 148.328644][ T40] audit: type=1400 audit(1781983223.657:843): avc: denied { write } for pid=10718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.377057][ T40] audit: type=1400 audit(1781983223.707:844): avc: denied { write } for pid=10721 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.409190][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 148.459237][ T40] audit: type=1400 audit(1781983223.787:845): avc: denied { write } for pid=10724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.499473][ T40] audit: type=1400 audit(1781983223.827:846): avc: denied { write } for pid=10727 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.530917][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 148.562296][ T8694] hsr_slave_0: left promiscuous mode [ 148.565091][ T8694] hsr_slave_1: left promiscuous mode [ 148.569997][ T8694] hsr_slave_0: left promiscuous mode [ 148.573424][ T8694] hsr_slave_1: left promiscuous mode [ 148.575994][ T8694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.579057][ T8694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.582633][ T8694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.585712][ T8694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.593979][ T8694] veth1_macvtap: left promiscuous mode [ 148.596266][ T8694] veth0_macvtap: left promiscuous mode [ 148.598576][ T8694] veth1_vlan: left promiscuous mode [ 148.600780][ T8694] veth0_vlan: left promiscuous mode [ 148.605531][ T8694] veth1_macvtap: left promiscuous mode [ 148.607819][ T8694] veth0_macvtap: left promiscuous mode [ 148.610164][ T8694] veth1_vlan: left promiscuous mode [ 148.612453][ T8694] veth0_vlan: left promiscuous mode [ 148.761132][ T8694] team0 (unregistering): Port device team_slave_1 removed [ 148.784089][ T8694] team0 (unregistering): Port device team_slave_0 removed [ 148.810432][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 148.910279][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 149.537904][ T8694] IPVS: stop unused estimator thread 0...