last executing test programs: 18.870363984s ago: executing program 2 (id=425): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000003980)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, @ethernet={0x306, @remote}, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0xfff, 0xff}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027bd700000000000040000002400118031f9e05e2f"], 0x38}, 0x1, 0x0, 0x0, 0x42890}, 0x4004004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$xdp(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x8851) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x800}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd27}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x4050) 18.590862047s ago: executing program 2 (id=430): io_setup(0x3, &(0x7f0000000000)=0x0) io_destroy(r0) 18.470772155s ago: executing program 2 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}], 0x10) listen(r2, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) listen(r1, 0x7) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c000280050006", @ANYRES32=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x40, 0x0, 0x8, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x3, 0x1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x8, 0x10, 0x4, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x8000, 0x3ff, 0xffffffff, {{0xd, 0x4, 0x2, 0x2, 0x34, 0x64, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x82, 0xe, "93c5ca9f0b72d5c35e387d7b"}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xa5, [@multicast1]}]}}}}}) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r14 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r14, &(0x7f00000000c0)={0x1d, r15}, 0x10) sendmsg$can_bcm(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xd77, 0x4000, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x1, 0x0, 0x0, "6191440132bb112240fcbcc3fa9d0431575f8614db538ce09c50eecf6ac579e8e83b944b666113f3afed71231e6653a1e899f17b33515bb07c9a1ed652a2159b"}}, 0x80}}, 0x4004044) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffff9, {0x60, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0xc, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r11) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r11, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r16, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r17}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000001}, 0x1) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42000820}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x288, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8, 0x1, r9}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x288}}, 0x48081) 18.408867689s ago: executing program 2 (id=433): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x850) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @local}}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000240001f925ad7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 18.407797049s ago: executing program 2 (id=435): syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600a843500142bfffe8000000000000000000000000000bbfe8000000000000000000000000000aa00020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000b79d118b"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) getpeername(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x402000, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(r2, r3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600a843500142bfffe8000000000000000000000000000bbfe8000000000000000000000000000aa00020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000b79d118b"], 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) (async) getpeername(r1, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x402000, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) close_range(r2, r3, 0x0) (async) 18.330742739s ago: executing program 2 (id=438): socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$TCXONC(r2, 0x540a, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000a700", @ANYRES16=r1, @ANYBLOB="0100ffffffff00004000010000000500070000000000080009000000001008000a0000000000060002000000000006001b004e200000"], 0x3c}, 0x1, 0x620b}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="1b00000e20000000e22d09f0eded81db72ca5f000000311be25c2865597800", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) preadv2(r6, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f00000006c0)=""/104, 0x68}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/26, 0x1a}], 0x6, 0x9, 0x10, 0xa) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[], 0xe) 3.186638098s ago: executing program 32 (id=438): socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$TCXONC(r2, 0x540a, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000a700", @ANYRES16=r1, @ANYBLOB="0100ffffffff00004000010000000500070000000000080009000000001008000a0000000000060002000000000006001b004e200000"], 0x3c}, 0x1, 0x620b}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="1b00000e20000000e22d09f0eded81db72ca5f000000311be25c2865597800", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) preadv2(r6, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f00000006c0)=""/104, 0x68}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/26, 0x1a}], 0x6, 0x9, 0x10, 0xa) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[], 0xe) 2.551015404s ago: executing program 1 (id=715): r0 = socket(0x2a, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x40000000000019}]}) r4 = socket$inet(0x2, 0xa, 0x5) ioctl$sock_ifreq(r4, 0x8971, &(0x7f0000002a80)={'dummy0\x00', @ifru_ivalue=0xc}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r5, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 2.269101662s ago: executing program 1 (id=716): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r6, 0x400455c8, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c7c00000000000000000000ffdbdf25027c000008009b8001000000100064f7feda2427f5772f8ad092df18f06beb880fb9ae87506964b7994ec2e272f7168b82c792cd551bdca1d757ed87a8c93eefa32fa4f7a913a2c214eac89cb185707a834b040c6793dce84e726d707288978926df5200eb59a041e100450bc57788cf334f007c91ac576c8a7013b5951a99b221e92d3155feef8d55eaaf2e4f3d134b7b3b9fba4176e4054888e83053499d68c64c6864a55ee1a4aeaae3aa9a"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x43, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) (async) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x43, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x1, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x180000004000080, 0x8000001, 0x8, 0x1ff, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xdb) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x32162) read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.717693981s ago: executing program 3 (id=725): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0xbc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 1.600025904s ago: executing program 3 (id=727): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x800, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d66642e72d982bc5841d78fba9845000000", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 1.490545679s ago: executing program 3 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x4070bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x4000000) 1.350099948s ago: executing program 3 (id=729): sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x851) r0 = socket$inet6(0xa, 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4b, {0x0, "430f0135000000000f23c80f21f8350c20000f33f8bebe3266b864000f00d03500010000b8050002000f006080020b01b00f30"}}], 0x1c}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000280)="81100078f20f5f07baf80c66b8da12f58566efbafc0ced66b91d03000066b8de977c1f66ba000000000f30eab38f1301653e0f23bb0f01c59a07002c01f369cfd7190f32", 0x44}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xc}, &(0x7f0000000080)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = io_uring_setup(0x4066, &(0x7f00000005c0)={0x0, 0xc4d9, 0x80, 0x1, 0x19f}) io_uring_enter(r7, 0x7fd1, 0xc125, 0x4, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) recvmsg(r6, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x2) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x80000002}, 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x2004c9c1) sendmmsg$unix(r9, &(0x7f000000a0c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}], 0x1, 0x4004000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r9, 0x800448d2, &(0x7f00000001c0)={0x6, &(0x7f0000000640)=[{}, {}, {}, {@none}, {}, {@none}]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) socket$netlink(0x10, 0x3, 0xb) 1.020536902s ago: executing program 3 (id=730): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') exit(0xf) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6, 0x7}}, './file0\x00'}) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 64) 368.655033ms ago: executing program 0 (id=741): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x40085500, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x400000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x1, 0x0, [0x0], [0x0, 0x7], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={r5, 0x80000}) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) 319.919972ms ago: executing program 0 (id=742): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000013c0)={0x14, r6, 0x205, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4001) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002010}, 0x20000840) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x300, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x3aa2}}, 0x20}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 319.735704ms ago: executing program 0 (id=743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[], 0x10) r2 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000080)={&(0x7f0000000100)={0x2d, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20014081}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) r4 = inotify_init() unshare(0x400) (async) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0xa4) r5 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) fstat(r6, &(0x7f0000000240)) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 240.941708ms ago: executing program 0 (id=744): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x480281, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 239.168064ms ago: executing program 0 (id=745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 149.941436ms ago: executing program 0 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1c}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x30a040f, 0x4f) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1c}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x30a040f, 0x4f) (async) 149.651706ms ago: executing program 3 (id=747): kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x5ffdd000, 0x3e0000}], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="09000000010017", 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) close(r7) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_io_uring_setup(0x56d6, &(0x7f0000000440)={0x0, 0xabf4, 0x8, 0x4, 0x24f}, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4900, 0x30a8a}, [@IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) 145.697299ms ago: executing program 1 (id=748): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=0x0}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x84885, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000000040)="a66524617190c88de6247e72ccdda6b4baed0c2f39bb2d72b12c", 0x1a}], 0x2) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000001ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000230bd7000fedbdf250b0000002c0009800800010001000080080002000200000008000200080000000800010069990000200004800900010073797a30000000000900010073797a300000000004000780c4580a15c75e70468bc3965cf03fcfcbe82fe90754a7209210131d1c515fe6f3bda9e4d0929fccbc78ff33e27e3629295e28cf0d5ea4d51684a57fe8b717f185a28fce57f70ece35ff3287aeaa7dfc5d22151775646938cbd667bbf9be07b7626e7819bba59778557fb120365d4d52e1c9615dd223e370cb1462af1f85d32d1d072e36e6264bb81cf86c291862e0b4cdc4e055fe90b16c3f07eca87eb571e5d622ceb225b54b8fd305b380f5f305c724f2cfa5467fc5d67f3c99bcecf1"], 0x60}}, 0x8000) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r5) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="660f38828c2f000f09ba210066edc1ed5f3664660ff8ae00500f01c3ea0100190036660fc7b1acda0f06baa00066b80a00000066ef", 0x35}], 0x1, 0x48, &(0x7f0000000240), 0x0) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64=r3], 0x38}], 0x1}, 0x4) 60.793568ms ago: executing program 1 (id=749): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) lseek(r1, 0x7fff, 0x1) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000180), 0x4) 57.960693ms ago: executing program 1 (id=750): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000940)={0x0, 0x2000, 0x7e, 0x3231564e, 0x2, [0x2], [0x2000, 0x0, 0x404000, 0xfffffffb], [0x5, 0x0, 0x0, 0x1], [0x3fffffffffffffe, 0x3ffffffd]}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x3, 0x4) 0s ago: executing program 1 (id=751): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_pidfd_open(0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$CDROMREADTOCENTRY(r5, 0x5306, &(0x7f0000000000)={0x1, 0x4, 0xd, 0x1, @msf={0x0, 0x81, 0x6}, 0x39}) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000200)=@hsc={0x1, 0x1, "9931264c68695f01c16c"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r2, &(0x7f0000000080)=@random={'trusted.', '\x00'}, &(0x7f0000000780)=""/4096, 0x1000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60010100001a1100fe8000000000000000000000000000bbfe80005651b9a700004e22001a907888caef0d020300"/80], 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$CDROM_CLEAR_OPTIONS(r2, 0x5321, 0x14) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38]}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180070e7646f4b00e400000000000000e1ffeb009500000000070000000000003a2fab0993e5be9333427e7e0fba0e11dcfcb6f115af53c002ed45230d39526b79746a32b10c81586238813031852df18e6fdf9d9758d09ab349d5ca98d15d2afb681425e4f202f4b2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4, 0x2, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}}}, 0x3a) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30445' (ED25519) to the list of known hosts. [ 46.153324][ T40] audit: type=1400 audit(1774501146.545:62): avc: denied { name_bind } for pid=5877 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.183910][ T40] audit: type=1400 audit(1774501146.575:63): avc: denied { execute } for pid=5878 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.192568][ T40] audit: type=1400 audit(1774501146.575:64): avc: denied { execute_no_trans } for pid=5878 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.620231][ T40] audit: type=1400 audit(1774501149.015:65): avc: denied { mounton } for pid=5878 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.629244][ T40] audit: type=1400 audit(1774501149.025:66): avc: denied { mount } for pid=5878 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.631229][ T5878] cgroup: Unknown subsys name 'net' [ 48.767716][ T5878] cgroup: Unknown subsys name 'cpuset' [ 48.771718][ T5878] cgroup: Unknown subsys name 'rlimit' [ 49.008386][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 49.008397][ T40] audit: type=1400 audit(1774501149.405:72): avc: denied { mounton } for pid=5878 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.020389][ T40] audit: type=1400 audit(1774501149.415:73): avc: denied { mount } for pid=5878 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.030079][ T40] audit: type=1400 audit(1774501149.415:74): avc: denied { read } for pid=5638 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.037305][ T40] audit: type=1400 audit(1774501149.425:75): avc: denied { read } for pid=5638 comm="dhcpcd" name="n102" dev="tmpfs" ino=1964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.045138][ T40] audit: type=1400 audit(1774501149.425:76): avc: denied { open } for pid=5638 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.052920][ T40] audit: type=1400 audit(1774501149.425:77): avc: denied { getattr } for pid=5638 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.060999][ T5911] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.064617][ T40] audit: type=1400 audit(1774501149.465:78): avc: denied { relabelto } for pid=5911 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.076461][ T40] audit: type=1400 audit(1774501149.465:79): avc: denied { write } for pid=5911 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.085956][ T40] audit: type=1400 audit(1774501149.475:80): avc: denied { read } for pid=5878 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.094198][ T40] audit: type=1400 audit(1774501149.475:81): avc: denied { open } for pid=5878 comm="syz-executor" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.925110][ T5878] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.131952][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 54.131969][ T40] audit: type=1400 audit(1774501154.525:83): avc: denied { create } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.154518][ T40] audit: type=1400 audit(1774501154.525:84): avc: denied { read write } for pid=5924 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.162743][ T40] audit: type=1400 audit(1774501154.525:85): avc: denied { open } for pid=5924 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.162988][ T5931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.171343][ T40] audit: type=1400 audit(1774501154.535:86): avc: denied { ioctl } for pid=5924 comm="syz-executor" path="socket:[6582]" dev="sockfs" ino=6582 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.174984][ T5931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.175681][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.179848][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.182269][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.184508][ T5931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.186205][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.186598][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.187088][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.187679][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.187994][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.188409][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.189403][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.189880][ T5931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.191911][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.195025][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.197288][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.199422][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.204782][ T5287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.210204][ T40] audit: type=1400 audit(1774501154.605:87): avc: denied { read } for pid=5926 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.212796][ T5287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.217300][ T40] audit: type=1400 audit(1774501154.605:88): avc: denied { open } for pid=5936 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.250918][ T40] audit: type=1400 audit(1774501154.605:89): avc: denied { mounton } for pid=5936 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.459686][ T40] audit: type=1400 audit(1774501154.855:90): avc: denied { module_request } for pid=5936 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.537802][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 54.544601][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 54.646758][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 54.652033][ T5924] chnl_net:caif_netlink_parms(): no params data found [ 54.766538][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.769394][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.771995][ T5926] bridge_slave_0: entered allmulticast mode [ 54.775010][ T5926] bridge_slave_0: entered promiscuous mode [ 54.785673][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.788539][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.792245][ T5936] bridge_slave_0: entered allmulticast mode [ 54.796273][ T5936] bridge_slave_0: entered promiscuous mode [ 54.810195][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.813054][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.815764][ T5926] bridge_slave_1: entered allmulticast mode [ 54.819050][ T5926] bridge_slave_1: entered promiscuous mode [ 54.828132][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.831285][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.835367][ T5936] bridge_slave_1: entered allmulticast mode [ 54.840660][ T5936] bridge_slave_1: entered promiscuous mode [ 54.895076][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.897959][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.901061][ T5924] bridge_slave_0: entered allmulticast mode [ 54.904664][ T5924] bridge_slave_0: entered promiscuous mode [ 54.931727][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.938555][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.950833][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.954176][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.957639][ T5924] bridge_slave_1: entered allmulticast mode [ 54.960573][ T5924] bridge_slave_1: entered promiscuous mode [ 54.966733][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.971068][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.975169][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.978397][ T5928] bridge_slave_0: entered allmulticast mode [ 54.982425][ T5928] bridge_slave_0: entered promiscuous mode [ 54.993790][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.997006][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.000042][ T5928] bridge_slave_1: entered allmulticast mode [ 55.003714][ T5928] bridge_slave_1: entered promiscuous mode [ 55.023557][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.034198][ T5926] team0: Port device team_slave_0 added [ 55.063620][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.081234][ T5926] team0: Port device team_slave_1 added [ 55.085965][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.092145][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.108615][ T5936] team0: Port device team_slave_0 added [ 55.122572][ T5936] team0: Port device team_slave_1 added [ 55.126951][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.164933][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.168028][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.179099][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.186426][ T5924] team0: Port device team_slave_0 added [ 55.202189][ T5924] team0: Port device team_slave_1 added [ 55.221862][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.225364][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.236076][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.242880][ T5928] team0: Port device team_slave_0 added [ 55.246001][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.248852][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.259574][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.273815][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.276429][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.286275][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.296415][ T5928] team0: Port device team_slave_1 added [ 55.299026][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.301711][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.310953][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.321103][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.323988][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.334752][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.363513][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.366540][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.377396][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.383349][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.386384][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.396958][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.463970][ T5936] hsr_slave_0: entered promiscuous mode [ 55.466743][ T5936] hsr_slave_1: entered promiscuous mode [ 55.474515][ T5926] hsr_slave_0: entered promiscuous mode [ 55.477866][ T5926] hsr_slave_1: entered promiscuous mode [ 55.481408][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 55.484387][ T5926] Cannot create hsr debugfs directory [ 55.489716][ T5924] hsr_slave_0: entered promiscuous mode [ 55.492132][ T5924] hsr_slave_1: entered promiscuous mode [ 55.494675][ T5924] debugfs: 'hsr0' already exists in 'hsr' [ 55.496773][ T5924] Cannot create hsr debugfs directory [ 55.540526][ T5928] hsr_slave_0: entered promiscuous mode [ 55.542933][ T5928] hsr_slave_1: entered promiscuous mode [ 55.545344][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 55.547221][ T5928] Cannot create hsr debugfs directory [ 55.836017][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.842220][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.846643][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.859247][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.911686][ T5924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.918530][ T5924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.922792][ T5924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.928255][ T5924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.002938][ T5928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.013222][ T5928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.021317][ T5928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.032521][ T5928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.098540][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.104973][ T5936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.110528][ T5936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.117345][ T5936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.125214][ T5936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.172471][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.180667][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.192765][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.196055][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.212320][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.215655][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.228023][ T5924] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.255754][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.258766][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.288546][ T5940] Bluetooth: hci3: command tx timeout [ 56.288843][ T5933] Bluetooth: hci0: command tx timeout [ 56.291150][ T63] Bluetooth: hci1: command tx timeout [ 56.293714][ T5287] Bluetooth: hci2: command tx timeout [ 56.295872][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.305393][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.310567][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.313578][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.342614][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.345853][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.360818][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.364333][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.380792][ T40] audit: type=1400 audit(1774501156.775:91): avc: denied { sys_module } for pid=5924 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.408076][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.428661][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.455975][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.459365][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.465181][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.467512][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.520012][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.540776][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.564682][ T5924] veth0_vlan: entered promiscuous mode [ 56.573441][ T5924] veth1_vlan: entered promiscuous mode [ 56.598533][ T5926] veth0_vlan: entered promiscuous mode [ 56.606943][ T5926] veth1_vlan: entered promiscuous mode [ 56.630434][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.636453][ T5924] veth0_macvtap: entered promiscuous mode [ 56.644252][ T5924] veth1_macvtap: entered promiscuous mode [ 56.653525][ T5926] veth0_macvtap: entered promiscuous mode [ 56.658721][ T5926] veth1_macvtap: entered promiscuous mode [ 56.665532][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.672722][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.678664][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.690688][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.696195][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.699552][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.709407][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.712242][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.718605][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.742533][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.756236][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.759413][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.773811][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.782126][ T5928] veth0_vlan: entered promiscuous mode [ 56.791393][ T5936] veth0_vlan: entered promiscuous mode [ 56.808582][ T5928] veth1_vlan: entered promiscuous mode [ 56.818298][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.820999][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.829143][ T5936] veth1_vlan: entered promiscuous mode [ 56.855436][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.858812][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.871604][ T5928] veth0_macvtap: entered promiscuous mode [ 56.878187][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.880509][ T5928] veth1_macvtap: entered promiscuous mode [ 56.880999][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.889178][ T40] audit: type=1400 audit(1774501157.285:92): avc: denied { mount } for pid=5924 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.917521][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.920438][ T5924] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.920762][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.935651][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.943905][ T5936] veth0_macvtap: entered promiscuous mode [ 56.967757][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.980194][ T5936] veth1_macvtap: entered promiscuous mode [ 56.990420][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.998560][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.002926][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.008955][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.070946][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.110040][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.127507][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.130288][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.139327][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.145481][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.149303][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.153934][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.186837][ T6022] Bluetooth: MGMT ver 1.23 [ 57.198386][ T6022] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 57.212830][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.217688][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.262829][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.272517][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.299188][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.302490][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.460170][ T6037] random: crng reseeded on system resumption [ 57.469757][ T6037] xt_hashlimit: size too large, truncated to 1048576 [ 57.477325][ T74] Bluetooth: (null): Invalid header checksum [ 57.675245][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.685272][ T6046] capability: warning: `syz.3.10' uses deprecated v2 capabilities in a way that may be insecure [ 57.692251][ T6046] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6046 comm=syz.3.10 [ 57.828519][ T6052] bond1: Removing last ns target with arp_interval on [ 57.834515][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 57.840283][ T29] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.849417][ T29] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.853672][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 57.858142][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 57.862218][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.883938][ T29] usb 6-1: config 0 descriptor?? [ 57.982240][ T6063] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15'. [ 57.989894][ T6063] MINIX-fs: unable to read superblock [ 58.003985][ T6063] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 58.097459][ T6073] Zero length message leads to an empty skb [ 58.135975][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.138557][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.143509][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.149339][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.157286][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 58.160166][ T29] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 58.273713][ T830] usb 6-1: USB disconnect, device number 2 [ 58.307612][ T6084] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 58.366022][ T5287] Bluetooth: hci2: command tx timeout [ 58.366168][ T63] Bluetooth: hci0: command tx timeout [ 58.367262][ T6083] random: crng reseeded on system resumption [ 58.368184][ T5287] Bluetooth: hci1: command tx timeout [ 58.370439][ T63] Bluetooth: hci3: command tx timeout [ 58.383284][ T6083] XFS (nbd2): SB validate failed with error -5. [ 58.553627][ T6098] binder: 6097:6098 ioctl c0306201 200000000640 returned -22 [ 58.630141][ T6103] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET) [ 58.647768][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 58.650806][ T6103] netlink: 52 bytes leftover after parsing attributes in process `syz.2.25'. [ 58.670443][ T6104] bridge_slave_0: left allmulticast mode [ 58.672278][ T6104] bridge_slave_0: left promiscuous mode [ 58.675672][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.688362][ T6104] bridge_slave_1: left allmulticast mode [ 58.690233][ T6104] bridge_slave_1: left promiscuous mode [ 58.692152][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.705941][ T6104] bond0: (slave bond_slave_0): Releasing backup interface [ 58.714953][ T6104] bond0: (slave bond_slave_1): Releasing backup interface [ 58.723732][ T6104] team0: Port device team_slave_0 removed [ 58.731103][ T6104] team0: Port device team_slave_1 removed [ 58.733425][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.736901][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.741641][ T6104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.744472][ T6104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.749403][ T6104] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.768118][ T6106] team0: Mode changed to "loadbalance" [ 58.775923][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 58.957171][ T6118] input: syz1 as /devices/virtual/input/input5 [ 59.058118][ T6121] xt_socket: unknown flags 0xc [ 59.147089][ T40] kauditd_printk_skb: 122 callbacks suppressed [ 59.147113][ T40] audit: type=1400 audit(1774501159.535:215): avc: denied { write } for pid=6117 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.160581][ T40] audit: type=1400 audit(1774501159.535:216): avc: denied { create } for pid=6117 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.221102][ T40] audit: type=1400 audit(1774501159.615:217): avc: denied { create } for pid=6129 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.233887][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 59.238915][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 59.243782][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 59.248482][ T6130] openvswitch: netlink: Flow actions attr not present in new flow. [ 59.304542][ T40] audit: type=1400 audit(1774501159.695:218): avc: denied { accept } for pid=6129 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.317881][ T40] audit: type=1400 audit(1774501159.715:219): avc: denied { create } for pid=6134 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.325244][ T40] audit: type=1400 audit(1774501159.715:220): avc: denied { bind } for pid=6134 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.331796][ T40] audit: type=1400 audit(1774501159.715:221): avc: denied { listen } for pid=6134 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.347498][ T40] audit: type=1400 audit(1774501159.715:222): avc: denied { connect } for pid=6134 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.437650][ T40] audit: type=1400 audit(1774501159.835:223): avc: denied { create } for pid=6141 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.455881][ T40] audit: type=1400 audit(1774501159.845:224): avc: denied { getopt } for pid=6141 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.574979][ T6135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.577040][ T6135] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.583330][ T6135] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 59.589813][ T6135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.591711][ T6135] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.598155][ T6135] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 59.605218][ T6135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.607868][ T6135] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.613633][ T6135] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 59.620969][ T6135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.623791][ T6135] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.628103][ T6135] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 59.674406][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.677508][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.680552][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.686271][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.689451][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.692393][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.697071][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.700100][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.703156][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.706167][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.709293][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.712164][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.715193][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.718076][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.721060][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.723941][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.727847][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.730750][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.733834][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.737027][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.740006][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.742878][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.746012][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.746096][ T6152] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 59.748960][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.755569][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.758517][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.761400][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.764458][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.767381][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.770365][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.773212][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.776271][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.779152][ T6151] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.275866][ T6158] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 60.281096][ T6158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=6158 comm=syz.1.40 [ 60.297463][ T6158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=6158 comm=syz.1.40 [ 60.463920][ T6164] netlink: 'syz.3.42': attribute type 10 has an invalid length. [ 60.470159][ T6164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.42'. [ 60.476505][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 60.487744][ T6164] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 60.607363][ T6172] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.44'. [ 60.635720][ T6175] process 'syz.2.45' launched '/dev/fd/4' with NULL argv: empty string added [ 60.650079][ T6177] afs: Unknown parameter '0x0000000000000003' [ 60.652971][ T6177] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 60.840695][ T6192] Mount JFS Failure: -5 [ 60.844603][ T6192] jfs_mount failed w/return code = -5 [ 61.012821][ T6200] netlink: 'syz.2.54': attribute type 8 has an invalid length. [ 61.055625][ T6202] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 61.359990][ T6213] tipc: Started in network mode [ 61.362037][ T6213] tipc: Node identity 080211000001, cluster identity 4711 [ 61.365796][ T6213] tipc: Enabled bearer , priority 10 [ 61.412049][ T6215] loop6: detected capacity change from 0 to 2640 [ 61.485039][ T6215] loop6: detected capacity change from 2640 to 524287999 [ 61.488637][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.492171][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.495588][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.498968][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.502422][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.505558][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.508569][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.511875][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.515265][ T5925] ldm_validate_partition_table(): Disk read failed. [ 61.518087][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.521526][ T5925] Buffer I/O error on dev loop6, logical block 0, async page read [ 61.524945][ T5925] Dev loop6: unable to read RDB block 0 [ 61.527521][ T5925] loop6: unable to read partition table [ 61.532600][ T6215] ldm_validate_partition_table(): Disk read failed. [ 61.535672][ T6215] Dev loop6: unable to read RDB block 0 [ 61.538277][ T6215] loop6: unable to read partition table [ 61.540881][ T6215] loop_reread_partitions: partition scan of loop6 (žXHuJ[dw|i4F-ڣrwǘ3UȞJ?"e) failed (rc=-5) [ 61.639235][ T6222] syzkaller0: entered promiscuous mode [ 61.641477][ T6222] syzkaller0: entered allmulticast mode [ 61.644600][ T5287] Bluetooth: hci3: command 0x0419 tx timeout [ 61.646621][ T5287] Bluetooth: hci2: command 0x0419 tx timeout [ 61.648563][ T5940] Bluetooth: hci1: command 0x0419 tx timeout [ 61.648684][ T5933] Bluetooth: hci0: command 0x0419 tx timeout [ 61.823112][ T6226] gfs2: error -5 reading superblock [ 61.956564][ T6230] : entered promiscuous mode [ 62.028858][ T6233] bond2: entered promiscuous mode [ 62.064486][ T993] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.225830][ T993] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 62.228695][ T993] usb 6-1: config 0 has no interface number 0 [ 62.230917][ T993] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x83 has an invalid bInterval 195, changing to 11 [ 62.236108][ T993] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x83 has invalid maxpacket 9866, setting to 1024 [ 62.242578][ T993] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 62.246479][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.260135][ T993] usb 6-1: config 0 descriptor?? [ 62.263898][ T6228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.274813][ T993] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input6 [ 62.398258][ C2] sr 2:0:0:0: [sr0] tag#24 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 62.402222][ C2] sr 2:0:0:0: [sr0] tag#24 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 62.495310][ T993] tipc: Node number set to 134418688 [ 62.538433][ T5938] usb 6-1: USB disconnect, device number 3 [ 62.551409][ T6264] syzkaller0: entered promiscuous mode [ 62.554738][ T6264] syzkaller0: entered allmulticast mode [ 62.916939][ T6240] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 63.405477][ T993] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.474658][ T6281] __nla_validate_parse: 3 callbacks suppressed [ 63.474671][ T6281] netlink: 734 bytes leftover after parsing attributes in process `syz.3.80'. [ 63.479654][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 63.523269][ T6293] tmpfs: Bad value for 'size' [ 63.531983][ T6295] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 63.568343][ T993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.576768][ T993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.579997][ T993] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.585455][ T993] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.588372][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.595080][ T993] usb 6-1: config 0 descriptor?? [ 63.653184][ T6308] tmpfs: Bad value for 'size' [ 63.724839][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 63.734206][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 63.734281][ T5933] Bluetooth: hci2: command 0x0419 tx timeout [ 63.734589][ T5287] Bluetooth: hci1: command 0x0419 tx timeout [ 63.901121][ T6320] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 63.953833][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 63.956882][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 63.989625][ T6334] loop4: detected capacity change from 0 to 7 [ 63.991989][ T6334] ldm_validate_partition_table(): Disk read failed. [ 63.994196][ T6334] Dev loop4: unable to read RDB block 0 [ 63.998848][ T6334] loop4: unable to read partition table [ 64.000865][ T6334] loop4: partition table beyond EOD, truncated [ 64.003025][ T6334] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 64.009678][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.012232][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.015300][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.017821][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.020269][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.022588][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.026628][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.029372][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.031796][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.034959][ T993] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 64.045368][ T993] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 64.085900][ T6349] netlink: 44 bytes leftover after parsing attributes in process `syz.0.100'. [ 64.089832][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'. [ 64.101054][ T6349] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 64.110634][ T6349] input: syz1 as /devices/virtual/input/input8 [ 64.154105][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 64.154121][ T40] audit: type=1400 audit(1774501164.545:295): avc: denied { read } for pid=6347 comm="syz.3.101" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 64.167586][ T40] audit: type=1400 audit(1774501164.545:296): avc: denied { open } for pid=6347 comm="syz.3.101" path="/29/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 64.170200][ T6356] fuse: Unknown parameter 'group00000000000000000000' [ 64.175081][ T6353] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.175260][ T6353] block device autoloading is deprecated and will be removed. [ 64.180896][ T40] audit: type=1400 audit(1774501164.565:297): avc: denied { ioctl } for pid=6355 comm="syz.0.103" path="socket:[11396]" dev="sockfs" ino=11396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.194381][ T40] audit: type=1400 audit(1774501164.575:298): avc: denied { ioctl } for pid=6347 comm="syz.3.101" path="/29/file0/file0" dev="fuse" ino=64 ioctlcmd=0x930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 64.232386][ T40] audit: type=1400 audit(1774501164.625:299): avc: denied { open } for pid=6359 comm="syz.3.104" path="/dev/ptyqa" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 64.241773][ T40] audit: type=1400 audit(1774501164.635:300): avc: denied { ioctl } for pid=6359 comm="syz.3.104" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 64.258486][ T40] audit: type=1400 audit(1774501164.655:301): avc: denied { read write } for pid=5928 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.269895][ T40] audit: type=1400 audit(1774501164.655:302): avc: denied { open } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.273879][ T6291] deleting an unspecified loop device is not supported. [ 64.284835][ T40] audit: type=1400 audit(1774501164.655:303): avc: denied { ioctl } for pid=5928 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.295274][ T6364] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 64.296569][ T40] audit: type=1400 audit(1774501164.665:304): avc: denied { read } for pid=6290 comm="syz.1.83" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.305374][ T50] usb 6-1: USB disconnect, device number 4 [ 64.343437][ T6364] bond2: entered promiscuous mode [ 64.348681][ T6364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.355415][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 64.376137][ T993] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.388815][ T6369] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 64.510273][ T6382] syz.0.109: attempt to access beyond end of device [ 64.510273][ T6382] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 64.521424][ T6382] gfs2: error -5 reading superblock [ 64.540666][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 64.546534][ T993] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.552147][ T993] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.556549][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.569974][ T993] usb 7-1: config 0 descriptor?? [ 64.577559][ T993] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 64.628999][ T6393] warning: `syz.0.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.941445][ T24] usb 7-1: USB disconnect, device number 2 [ 65.474155][ T6404] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 65.524475][ T6408] bridge_slave_0: left allmulticast mode [ 65.527003][ T6408] bridge_slave_0: left promiscuous mode [ 65.529863][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.537683][ T6408] bridge_slave_1: left allmulticast mode [ 65.539553][ T6408] bridge_slave_1: left promiscuous mode [ 65.541519][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.551200][ T6408] bond0: (slave bond_slave_0): Releasing backup interface [ 65.560362][ T6408] bond0: (slave bond_slave_1): Releasing backup interface [ 65.570069][ T6417] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 65.572981][ T6408] team0: Port device team_slave_0 removed [ 65.580671][ T6408] team0: Port device team_slave_1 removed [ 65.583149][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.587580][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.591531][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.594595][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.599329][ T6408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.613209][ T6416] ip6gre1: entered promiscuous mode [ 65.616007][ T6416] ip6gre1: entered allmulticast mode [ 65.677537][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 65.709498][ T6423] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 65.804144][ T5933] Bluetooth: hci3: command 0x0419 tx timeout [ 65.804174][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 65.809394][ T63] Bluetooth: hci2: command 0x0419 tx timeout [ 66.487255][ T6422] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.489564][ T6422] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.492560][ T6422] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.495059][ T6422] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.557367][ T6431] loop5: detected capacity change from 0 to 3 [ 66.563537][ T6431] Dev loop5: unable to read RDB block 3 [ 66.566249][ T6431] loop5: AHDI p1 p2 p3 [ 66.567973][ T6431] loop5: partition table partially beyond EOD, truncated [ 66.571438][ T6431] loop5: p1 start 1601398130 is beyond EOD, truncated [ 66.574415][ T6431] loop5: p2 start 1702059890 is beyond EOD, truncated [ 66.595559][ T6435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.634397][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 66.638189][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 66.705690][ T6445] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.718050][ T6447] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 3, id = 0 [ 66.837714][ T6455] syzkaller0: entered promiscuous mode [ 66.840372][ T6455] syzkaller0: entered allmulticast mode [ 66.863811][ T6455] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 66.921859][ T6460] trusted_key: syz.1.135 sent an empty control message without MSG_MORE. [ 67.059294][ T6465] fuse: Bad value for 'fd' [ 67.174875][ T6471] dlm: no locking on control device [ 67.252787][ T6473] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 67.255555][ T6477] openvswitch: netlink: IP tunnel TTL not specified. [ 67.256776][ T6473] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 67.280542][ T6473] ======================================================= [ 67.280542][ T6473] WARNING: The mand mount option has been deprecated and [ 67.280542][ T6473] and is ignored by this kernel. Remove the mand [ 67.280542][ T6473] option from the mount to silence this warning. [ 67.280542][ T6473] ======================================================= [ 67.347065][ T6473] overlayfs: overlapping lowerdir path [ 67.738076][ T6488] pimreg: entered allmulticast mode [ 67.746821][ T6488] pimreg: left allmulticast mode [ 67.804669][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 67.957520][ T6494] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 67.964358][ T5938] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 68.115647][ T5938] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 68.118704][ T5938] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.122098][ T5938] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.126402][ T5938] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.130312][ T5938] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.138391][ T5938] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 68.141210][ T5938] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.154168][ T5938] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.160299][ T5938] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.164921][ T5938] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.174769][ T5938] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 68.179075][ T5938] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 68.194093][ T5938] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.199113][ T5938] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 68.203528][ T5938] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 68.218327][ T5938] usb 5-1: string descriptor 0 read error: -22 [ 68.221480][ T5938] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 68.225537][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.259603][ T5938] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 68.534211][ T63] Bluetooth: hci3: command 0x0419 tx timeout [ 68.534560][ T5933] Bluetooth: hci1: command 0x0419 tx timeout [ 68.534589][ T5287] Bluetooth: hci2: command 0x0419 tx timeout [ 68.641957][ T6512] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 68.803673][ T6523] __nla_validate_parse: 2 callbacks suppressed [ 68.803692][ T6523] netlink: 56 bytes leftover after parsing attributes in process `syz.2.155'. [ 68.959100][ T6525] /dev/sg0: Can't lookup blockdev [ 68.984295][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 69.008520][ T6527] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 69.134230][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 69.171850][ T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 69.177146][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 69.181064][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.185075][ T50] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.189475][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 69.189484][ T40] audit: type=1400 audit(1774501169.585:353): avc: denied { read write } for pid=6535 comm="syz.2.161" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 69.200286][ T50] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.203088][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.204234][ T40] audit: type=1400 audit(1774501169.585:354): avc: denied { open } for pid=6535 comm="syz.2.161" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 69.206813][ T6531] kvm: pic: non byte write [ 69.233370][ T6531] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.312237][ T6545] overlayfs: overlapping lowerdir path [ 69.390825][ T6548] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.394615][ T40] audit: type=1400 audit(1774501169.795:355): avc: denied { read } for pid=6547 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.445375][ T50] usb 8-1: GET_CAPABILITIES returned 0 [ 69.447104][ T50] usbtmc 8-1:16.0: can't read capabilities [ 69.818746][ T5938] usb 8-1: USB disconnect, device number 2 [ 69.885938][ T5933] Bluetooth: hci0: command 0x0419 tx timeout [ 70.055137][ T40] audit: type=1400 audit(1774501170.455:356): avc: denied { append } for pid=6556 comm="syz.2.166" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.065535][ T6557] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 70.070660][ T40] audit: type=1400 audit(1774501170.465:357): avc: denied { relabelto } for pid=6556 comm="syz.2.166" name="68" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 70.081335][ T40] audit: type=1400 audit(1774501170.465:358): avc: denied { associate } for pid=6556 comm="syz.2.166" name="68" dev="tmpfs" ino=375 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 70.091973][ T40] audit: type=1400 audit(1774501170.475:359): avc: denied { remove_name } for pid=5924 comm="syz-executor" name="binderfs" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 70.102566][ T40] audit: type=1400 audit(1774501170.485:360): avc: denied { rmdir } for pid=5924 comm="syz-executor" name="68" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 70.138202][ T40] audit: type=1400 audit(1774501170.535:361): avc: denied { write } for pid=6560 comm="syz.1.168" path="socket:[11906]" dev="sockfs" ino=11906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 70.139847][ T6559] macsec1: entered promiscuous mode [ 70.150751][ T6559] macsec1: entered allmulticast mode [ 70.163493][ T40] audit: type=1400 audit(1774501170.555:362): avc: denied { mounton } for pid=6558 comm="syz.2.167" path="/bus" dev="ramfs" ino=13590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 70.166797][ T6559] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.176486][ T6559] overlayfs: failed to set xattr on upper [ 70.178462][ T6559] overlayfs: ...falling back to redirect_dir=nofollow. [ 70.181109][ T6559] overlayfs: ...falling back to metacopy=off. [ 70.184308][ T6559] overlayfs: ...falling back to index=off. [ 70.187050][ T6559] overlayfs: ...falling back to uuid=null. [ 70.289934][ T6570] netlink: 'syz.1.172': attribute type 8 has an invalid length. [ 70.371564][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 70.429207][ T6581] l2tp_ppp: sess 2/0: no socket in recv [ 70.482937][ T6592] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 70.487010][ T6592] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 70.531720][ T6598] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.181'. [ 70.558105][ T6600] tipc: Invalid UDP bearer configuration [ 70.558148][ T6600] tipc: Enabling of bearer rejected, failed to enable media [ 70.604181][ T5933] Bluetooth: hci3: command 0x0419 tx timeout [ 70.706329][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 70.808745][ T6631] fuse: Bad value for 'group_id' [ 70.810398][ T6631] fuse: Bad value for 'group_id' [ 70.813072][ T6634] syzkaller0: entered promiscuous mode [ 70.815923][ T6634] syzkaller0: entered allmulticast mode [ 71.160504][ T6637] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.574831][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 71.902973][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 71.910684][ T6666] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 71.930958][ T6668] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6668 comm=syz.2.199 [ 72.018548][ T6672] vlan2: entered allmulticast mode [ 72.021112][ T6672] bridge27: entered allmulticast mode [ 72.026936][ T6674] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 72.026936][ T6674] program syz.2.200 not setting count and/or reply_len properly [ 72.109556][ T6678] veth0_to_bond: entered allmulticast mode [ 72.154647][ T6680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.176112][ T6680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.203'. [ 72.243831][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 72.385403][ T6698] MTD: Couldn't look up '/dev/sg0': -15 [ 72.387778][ T6698] /dev/sg0: Can't lookup blockdev [ 72.525595][ T5938] usb 5-1: USB disconnect, device number 2 [ 72.559596][ T6707] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 72.564787][ T6707] Cannot find del_set index 0 as target [ 72.602031][ T6709] netlink: 56 bytes leftover after parsing attributes in process `syz.0.212'. [ 72.622050][ T6709] nbd: must specify at least one socket [ 72.661888][ T6714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6714 comm=syz.0.214 [ 72.684952][ T5933] Bluetooth: hci3: command 0x0419 tx timeout [ 72.830769][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 72.837899][ T6728] vlan2: entered allmulticast mode [ 72.840398][ T6728] vlan0: entered allmulticast mode [ 72.843115][ T6728] veth0_vlan: entered allmulticast mode [ 72.874181][ T6731] xt_CONNSECMARK: invalid mode: 0 [ 72.936596][ T6734] overlayfs: upper fs does not support file handles, falling back to index=off. [ 72.993622][ T6736] netlink: 'syz.3.220': attribute type 11 has an invalid length. [ 73.141035][ T6743] 9p: Invalid uid '0x00000000ffffffff' [ 73.347219][ T50] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 73.506581][ T50] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 73.509431][ T50] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 73.512592][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 73.525694][ T50] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.528803][ T50] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 73.531451][ T50] usb 8-1: Product: syz [ 73.532896][ T50] usb 8-1: Manufacturer: syz [ 73.534859][ T50] usb 8-1: SerialNumber: syz [ 73.538482][ T50] usb 8-1: config 0 descriptor?? [ 73.542963][ T50] hub 8-1:0.0: bad descriptor, ignoring hub [ 73.549256][ T50] hub 8-1:0.0: probe with driver hub failed with error -5 [ 73.561802][ T50] usb 8-1: selecting invalid altsetting 0 [ 73.783773][ T6782] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 73.961012][ T6788] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 74.155031][ T6741] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 74.239390][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 74.239402][ T40] audit: type=1400 audit(1774501174.635:399): avc: denied { setopt } for pid=6799 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.293872][ T6802] program syz.1.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.358754][ T40] audit: type=1400 audit(1774501174.755:400): avc: denied { getopt } for pid=6801 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.746487][ T39] usb 8-1: USB disconnect, device number 3 [ 74.948215][ T6812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.952059][ T6812] __nla_validate_parse: 1 callbacks suppressed [ 74.952072][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 74.958443][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 75.010036][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 75.053598][ T6816] Cannot find del_set index 0 as target [ 75.089268][ T40] audit: type=1400 audit(1774501175.485:401): avc: denied { connect } for pid=6818 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.090577][ T6819] netlink: 830 bytes leftover after parsing attributes in process `syz.0.248'. [ 75.175162][ T40] audit: type=1400 audit(1774501175.575:402): avc: denied { create } for pid=6825 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 75.200735][ T40] audit: type=1400 audit(1774501175.595:403): avc: denied { nlmsg_read } for pid=6830 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 75.213683][ T5933] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 75.219368][ T6835] netlink: 96 bytes leftover after parsing attributes in process `syz.1.254'. [ 75.296640][ T40] audit: type=1400 audit(1774501175.695:404): avc: denied { accept } for pid=6841 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.320838][ T40] audit: type=1400 audit(1774501175.715:405): avc: denied { search } for pid=5638 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.342362][ T40] audit: type=1400 audit(1774501175.725:406): avc: denied { search } for pid=5638 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.364408][ T40] audit: type=1400 audit(1774501175.725:407): avc: denied { search } for pid=5638 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.377546][ T40] audit: type=1400 audit(1774501175.775:408): avc: denied { setopt } for pid=6852 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.386952][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 75.389780][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 75.392581][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 75.414176][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 75.417165][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 75.420162][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 75.632052][ T6877] mmap: syz.0.265 (6877) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.730824][ T6877] fuse: Bad value for 'fd' [ 75.732818][ T6877] fuse: Bad value for 'fd' [ 75.738884][ T6890] openvswitch: netlink: Flow actions attr not present in new flow. [ 75.836830][ T6898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60382 sclass=netlink_route_socket pid=6898 comm=syz.0.270 [ 75.962528][ T6900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.297606][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.299665][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.513754][ T6929] tls_set_device_offload_rx: netdev not found [ 76.560063][ T6931] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 76.769507][ T6952] random: crng reseeded on system resumption [ 76.798176][ T6952] misc userio: Invalid payload size [ 76.876599][ T6967] dns_resolver: Unsupported content type (234) [ 76.999366][ T6987] hsr_slave_0: left promiscuous mode [ 77.002166][ T6987] hsr_slave_1: left promiscuous mode [ 77.108374][ T7001] team0: No ports can be present during mode change [ 77.185273][ T7016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=7016 comm=syz.0.296 [ 77.293003][ T7032] overlay: Bad value for 'workdir' [ 77.308123][ T7032] bond1: (slave bond_slave_1): Device is not bonding slave [ 77.311127][ T7032] bond1: option active_slave: invalid value (bond_slave_1) [ 77.317078][ T7032] bond1 (unregistering): Released all slaves [ 77.384501][ T7044] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 77.420123][ T7048] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 77.425059][ T7048] netlink: 'syz.0.302': attribute type 3 has an invalid length. [ 77.472089][ T7055] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 77.486450][ T7056] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 77.490106][ T7055] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 77.530584][ T7067] overlay: ./file0 is not a directory [ 77.640861][ T7080] binder: 7070:7080 ioctl c00c620f 200000000040 returned -22 [ 77.648496][ T7080] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 77.661387][ T7080] qrtr: Invalid version 50 [ 77.747411][ T7087] overlayfs: failed to clone upperpath [ 77.805339][ T7093] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 77.847335][ T10] libceph: connect (1)[c::]:6789 error -97 [ 77.849683][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 77.876829][ T7103] bridge0: port 3(ipvlan2) entered blocking state [ 77.879283][ T7103] bridge0: port 3(ipvlan2) entered disabled state [ 77.881911][ T7103] ipvlan2: entered allmulticast mode [ 77.883869][ T7103] bridge0: entered allmulticast mode [ 77.887987][ T7103] ipvlan2: left allmulticast mode [ 77.889704][ T7103] bridge0: left allmulticast mode [ 77.938814][ T7106] loop5: detected capacity change from 0 to 7 [ 77.946484][ T5925] Dev loop5: unable to read RDB block 7 [ 77.948516][ T7097] ceph: No mds server is up or the cluster is laggy [ 77.949029][ T5925] loop5: unable to read partition table [ 77.955518][ T5925] loop5: partition table beyond EOD, truncated [ 77.969196][ T7106] Dev loop5: unable to read RDB block 7 [ 77.971637][ T7106] loop5: unable to read partition table [ 77.974550][ T7106] loop5: partition table beyond EOD, truncated [ 77.984133][ T7106] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 78.141596][ T7117] faux_driver vkms: [drm] Unknown color mode 257; guessing buffer size. [ 78.311659][ T7132] bridge_slave_0: default FDB implementation only supports local addresses [ 78.391187][ T7147] veth0_to_bond: entered allmulticast mode [ 78.880811][ T7190] Cannot find set identified by id 0 to match [ 79.051966][ T7210] loop5: detected capacity change from 0 to 7 [ 79.060308][ T7210] Dev loop5: unable to read RDB block 7 [ 79.063038][ T7210] loop5: unable to read partition table [ 79.069032][ T7210] loop5: partition table beyond EOD, truncated [ 79.071097][ T7210] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 79.185942][ T7216] macsec1: entered promiscuous mode [ 79.189140][ T7216] macsec1: entered allmulticast mode [ 79.254248][ T50] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 79.435341][ T7244] trusted_key: encrypted_key: master key parameter is missing [ 79.526783][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 79.526795][ T40] audit: type=1400 audit(1774501179.925:439): avc: denied { name_connect } for pid=7246 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 79.581520][ T40] audit: type=1400 audit(1774501179.975:440): avc: denied { accept } for pid=7246 comm="syz.3.348" lport=33208 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.588988][ T40] audit: type=1400 audit(1774501179.975:441): avc: denied { write } for pid=7246 comm="syz.3.348" lport=33208 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 79.596732][ T40] audit: type=1400 audit(1774501179.975:442): avc: denied { setopt } for pid=7246 comm="syz.3.348" lport=33208 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 79.955668][ T40] audit: type=1400 audit(1774501180.355:443): avc: denied { read } for pid=7249 comm="syz.0.349" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.050158][ T5933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 80.300758][ T7280] __nla_validate_parse: 71 callbacks suppressed [ 80.300776][ T7280] netlink: 11 bytes leftover after parsing attributes in process `syz.0.352'. [ 80.308022][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 80.311972][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 80.366073][ T7283] overlayfs: missing 'lowerdir' [ 80.410424][ T40] audit: type=1400 audit(1774501180.805:444): avc: denied { create } for pid=7284 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.418786][ T40] audit: type=1400 audit(1774501180.805:445): avc: denied { ioctl } for pid=7284 comm="syz.3.354" path="socket:[16486]" dev="sockfs" ino=16486 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 80.632852][ T7307] netlink: 11 bytes leftover after parsing attributes in process `syz.0.361'. [ 80.636879][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.361'. [ 80.640417][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.361'. [ 80.697842][ T40] audit: type=1400 audit(1774501181.095:446): avc: denied { write } for pid=7312 comm="syz.3.363" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.782880][ T40] audit: type=1400 audit(1774501181.175:447): avc: denied { ioctl } for pid=7316 comm="syz.0.364" path="socket:[17414]" dev="sockfs" ino=17414 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.808627][ T40] audit: type=1400 audit(1774501181.205:448): avc: denied { ioctl } for pid=7321 comm="syz.0.365" path="socket:[15173]" dev="sockfs" ino=15173 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.085208][ T7340] netlink: 11 bytes leftover after parsing attributes in process `syz.3.370'. [ 81.088020][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 81.090755][ T7340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 81.095141][ T7340] loop5: detected capacity change from 0 to 7 [ 81.097622][ T7340] Dev loop5: unable to read RDB block 7 [ 81.099444][ T7340] loop5: unable to read partition table [ 81.101317][ T7340] loop5: partition table beyond EOD, truncated [ 81.103257][ T7340] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 81.254825][ T7344] ALSA: mixer_oss: invalid OSS volume ';' [ 81.283071][ T7349] libceph: secret too big 289 [ 81.527488][ T7364] fuse: Bad value for 'fd' [ 81.571582][ T7369] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 81.574686][ T7369] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 82.524168][ T50] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 82.647227][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.386'. [ 82.686500][ T50] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 82.689433][ T50] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.693158][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.698027][ T50] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.701053][ T50] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.703639][ T50] usb 7-1: Product: syz [ 82.705228][ T50] usb 7-1: Manufacturer: syz [ 82.707085][ T50] usb 7-1: SerialNumber: syz [ 82.710561][ T50] usb 7-1: config 0 descriptor?? [ 82.717082][ T50] hub 7-1:0.0: bad descriptor, ignoring hub [ 82.719078][ T50] hub 7-1:0.0: probe with driver hub failed with error -5 [ 82.723203][ T50] usb 7-1: selecting invalid altsetting 0 [ 83.183012][ T7397] overlayfs: failed to resolve './file2': -2 [ 83.184570][ T7398] overlayfs: overlapping lowerdir path [ 83.222351][ T7400] trusted_key: encrypted_key: insufficient parameters specified [ 83.261763][ T7402] loop5: detected capacity change from 0 to 7 [ 83.264912][ T7402] Dev loop5: unable to read RDB block 7 [ 83.266952][ T7402] loop5: unable to read partition table [ 83.268927][ T7402] loop5: partition table beyond EOD, truncated [ 83.271065][ T7402] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 83.405610][ T5933] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 83.408444][ T5933] Bluetooth: hci3: Injecting HCI hardware error event [ 83.411412][ T5933] Bluetooth: hci3: hardware error 0x00 [ 83.634314][ T7384] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 83.649215][ T7411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.774336][ T7384] usb 7-1: device descriptor read/64, error -71 [ 83.849034][ T7420] netlink: 'syz.3.398': attribute type 4 has an invalid length. [ 83.996570][ T7424] loop5: detected capacity change from 0 to 7 [ 84.001516][ T7424] Dev loop5: unable to read RDB block 7 [ 84.003671][ T7424] loop5: unable to read partition table [ 84.006287][ T7424] loop5: partition table beyond EOD, truncated [ 84.008298][ T7424] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 84.034331][ T7384] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 84.164230][ T7384] usb 7-1: device descriptor read/64, error -71 [ 84.404161][ T7384] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 84.424847][ T7384] usb 7-1: device descriptor read/8, error -71 [ 84.664353][ T7384] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 84.666387][ T7431] IPv6: sit1: Disabled Multicast RS [ 84.670877][ T7431] sit1: entered allmulticast mode [ 84.684704][ T7384] usb 7-1: device descriptor read/8, error -71 [ 84.795579][ T39] usb 7-1: USB disconnect, device number 4 [ 84.954222][ T39] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.094421][ T39] usb 7-1: device descriptor read/64, error -71 [ 85.136765][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 85.136780][ T40] audit: type=1400 audit(1774501185.535:464): avc: denied { create } for pid=7451 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 85.140650][ T7453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=7453 comm=syz.2.411 [ 85.173078][ T7453] binder: 7451:7453 unknown command 0 [ 85.176260][ T7453] binder: 7451:7453 ioctl c0306201 200000000080 returned -22 [ 85.275849][ T40] audit: type=1400 audit(1774501185.675:465): avc: denied { lock } for pid=7468 comm="syz.2.415" path="socket:[16737]" dev="sockfs" ino=16737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 85.379949][ T7478] bond4 (unregistering): Released all slaves [ 85.415085][ T40] audit: type=1400 audit(1774501185.815:466): avc: denied { execmod } for pid=7477 comm="syz.3.419" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 85.427195][ T40] audit: type=1400 audit(1774501185.815:467): avc: denied { execute } for pid=7477 comm="syz.3.419" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 85.437195][ T7482] __nla_validate_parse: 5 callbacks suppressed [ 85.437213][ T7482] netlink: 11 bytes leftover after parsing attributes in process `syz.2.418'. [ 85.443787][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.418'. [ 85.456697][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.418'. [ 85.494162][ T5933] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 85.498022][ T40] audit: type=1400 audit(1774501185.895:468): avc: denied { ioctl } for pid=7483 comm="syz.3.420" path="socket:[15277]" dev="sockfs" ino=15277 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.500504][ T7484] tmpfs: Bad value for 'mpol' [ 85.509511][ T7484] netlink: 64 bytes leftover after parsing attributes in process `syz.3.420'. [ 85.544075][ T40] audit: type=1400 audit(1774501185.925:469): avc: denied { map } for pid=7483 comm="syz.3.420" path="socket:[15278]" dev="sockfs" ino=15278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.571623][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 85.577618][ T7488] netlink: 75 bytes leftover after parsing attributes in process `syz.2.421'. [ 85.651161][ T7500] sysfs: cannot create duplicate filename '/class/ieee80211/1^!' [ 85.655368][ T7500] CPU: 0 UID: 0 PID: 7500 Comm: syz.2.425 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.655402][ T7500] Tainted: [L]=SOFTLOCKUP [ 85.655410][ T7500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.655420][ T7500] Call Trace: [ 85.655426][ T7500] [ 85.655433][ T7500] dump_stack_lvl+0x100/0x190 [ 85.655479][ T7500] sysfs_warn_dup.cold+0x1c/0x28 [ 85.655570][ T7500] sysfs_do_create_link_sd+0x113/0x140 [ 85.655624][ T7500] sysfs_create_link+0x61/0xc0 [ 85.655651][ T7500] device_add+0x675/0x1950 [ 85.655690][ T7500] ? __pfx_device_add+0x10/0x10 [ 85.655708][ T7500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.655735][ T7500] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 85.655777][ T7500] wiphy_register+0x1e5b/0x2d30 [ 85.655809][ T7500] ? __rtnl_unlock+0xb9/0xf0 [ 85.655840][ T7500] ? netdev_run_todo+0x7d0/0x12c0 [ 85.655868][ T7500] ? __pfx_wiphy_register+0x10/0x10 [ 85.655893][ T7500] ? __asan_memset+0x23/0x50 [ 85.655919][ T7500] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 85.655954][ T7500] ieee80211_register_hw+0x2cfd/0x4140 [ 85.655993][ T7500] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 85.656019][ T7500] ? __pfx___debug_object_init+0x10/0x10 [ 85.656050][ T7500] ? find_held_lock+0x2b/0x80 [ 85.656074][ T7500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.656099][ T7500] ? __hrtimer_setup+0x178/0x280 [ 85.656121][ T7500] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 85.656163][ T7500] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 85.656192][ T7500] ? __asan_memcpy+0x3c/0x60 [ 85.656218][ T7500] hwsim_new_radio_nl+0xc1f/0x1340 [ 85.656246][ T7500] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 85.656279][ T7500] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 85.656302][ T7500] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 85.656325][ T7500] genl_family_rcv_msg_doit+0x214/0x300 [ 85.656346][ T7500] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 85.656371][ T7500] ? bpf_lsm_capable+0x9/0x10 [ 85.656391][ T7500] ? security_capable+0x80/0x260 [ 85.656417][ T7500] ? ns_capable+0xd2/0xf0 [ 85.656440][ T7500] genl_rcv_msg+0x560/0x800 [ 85.656461][ T7500] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.656482][ T7500] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 85.656594][ T7500] netlink_rcv_skb+0x159/0x420 [ 85.656624][ T7500] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.656643][ T7500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.656680][ T7500] ? netlink_deliver_tap+0x1ae/0xcc0 [ 85.656712][ T7500] genl_rcv+0x28/0x40 [ 85.656740][ T7500] netlink_unicast+0x5aa/0x870 [ 85.656769][ T7500] ? __pfx_netlink_unicast+0x10/0x10 [ 85.656803][ T7500] netlink_sendmsg+0x8b0/0xda0 [ 85.656833][ T7500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.656857][ T7500] ? __might_fault+0x20/0x140 [ 85.656888][ T7500] ____sys_sendmsg+0x9e1/0xb70 [ 85.656917][ T7500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.656947][ T7500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.656980][ T7500] ? __pfx_futex_wake_mark+0x10/0x10 [ 85.657008][ T7500] ___sys_sendmsg+0x190/0x1e0 [ 85.657029][ T7500] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.657078][ T7500] __sys_sendmsg+0x170/0x220 [ 85.657101][ T7500] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.657123][ T7500] ? __x64_sys_futex+0x34f/0x4d0 [ 85.657156][ T7500] do_syscall_64+0x106/0xf80 [ 85.657180][ T7500] ? clear_bhb_loop+0x40/0x90 [ 85.657200][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.657220][ T7500] RIP: 0033:0x7f7a4b79c799 [ 85.657238][ T7500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.657254][ T7500] RSP: 002b:00007f7a4c6a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.657270][ T7500] RAX: ffffffffffffffda RBX: 00007f7a4ba15fa0 RCX: 00007f7a4b79c799 [ 85.657283][ T7500] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000008 [ 85.657294][ T7500] RBP: 00007f7a4b832c99 R08: 0000000000000000 R09: 0000000000000000 [ 85.657314][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.657325][ T7500] R13: 00007f7a4ba16038 R14: 00007f7a4ba15fa0 R15: 00007ffef6419a78 [ 85.657351][ T7500] [ 85.927090][ T7517] netlink: 11 bytes leftover after parsing attributes in process `syz.1.429'. [ 85.929996][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.429'. [ 85.933663][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.429'. [ 86.007202][ T40] audit: type=1400 audit(1774501186.405:470): avc: denied { bind } for pid=7518 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.015207][ T40] audit: type=1400 audit(1774501186.415:471): avc: denied { setopt } for pid=7518 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.016791][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 86.063505][ T7526] bad cache= option: nonw4$8KNi\mx+bsB"0cLd&x\^ [ 86.063505][ T7526] [ 86.075305][ T7526] CIFS: VFS: bad cache= option: nonw4$8KNi\mx+bsB"0cLd&x\^ [ 86.121453][ T7534] syzkaller0: entered promiscuous mode [ 86.123935][ T7534] syzkaller0: entered allmulticast mode [ 86.126011][ T40] audit: type=1400 audit(1774501186.525:472): avc: denied { map } for pid=7533 comm="syz.3.437" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.176293][ T7539] usb usb8: usbfs: process 7539 (syz.3.439) did not claim interface 0 before use [ 86.182813][ T7539] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 86.198228][ T40] audit: type=1400 audit(1774501186.595:473): avc: denied { override_creds } for pid=7540 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.255996][ T7548] netlink: 'syz.3.443': attribute type 2 has an invalid length. [ 86.273294][ T7548] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=7548 comm=syz.3.443 [ 86.335300][ T7555] loop5: detected capacity change from 0 to 7 [ 86.344550][ T7555] Dev loop5: unable to read RDB block 7 [ 86.346383][ T7555] loop5: unable to read partition table [ 86.348348][ T7555] loop5: partition table beyond EOD, truncated [ 86.353070][ T7555] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 86.527302][ T34] cfg80211: failed to load regulatory.db [ 86.539465][ T7568] netlink: 'syz.1.451': attribute type 1 has an invalid length. [ 86.564424][ T7568] bond3: (slave geneve2): Opening slave failed [ 86.609280][ T7571] bond3 (unregistering): Released all slaves [ 87.449718][ T7605] overlayfs: failed to resolve './file1': -2 [ 87.672777][ T7623] tmpfs: Bad value for 'mpol' [ 87.805334][ T7631] [ 87.821490][ T7639] Failed to initialize the IGMP autojoin socket (err -2) [ 87.965202][ T7658] netlink: 'syz.3.477': attribute type 3 has an invalid length. [ 87.966449][ T7659] tmpfs: Cannot change global quota limit on remount [ 88.201647][ T7680] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.218617][ T7683] netlink: 'syz.3.484': attribute type 11 has an invalid length. [ 88.429842][ T7701] loop5: detected capacity change from 0 to 7 [ 88.433562][ T7701] Dev loop5: unable to read RDB block 7 [ 88.436060][ T7701] loop5: unable to read partition table [ 88.438573][ T7701] loop5: partition table beyond EOD, truncated [ 88.454523][ T7701] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 88.527239][ T7708] cgroup: name respecified [ 88.736116][ T7720] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 88.857744][ T7724] SELinux: ebitmap: truncated map [ 88.897727][ T7724] SELinux: failed to load policy [ 88.937939][ T7736] : entered promiscuous mode [ 88.975173][ T7736] atomic_op ffff8880585eb198 conn xmit_atomic 0000000000000000 [ 89.064294][ T7749] tipc: Enabling of bearer rejected, failed to enable media [ 89.069011][ T7749] fuse: Bad value for 'fd' [ 89.533453][ T7779] loop5: detected capacity change from 0 to 7 [ 89.538639][ T7779] Dev loop5: unable to read RDB block 7 [ 89.541129][ T7779] loop5: unable to read partition table [ 89.543912][ T7779] loop5: partition table beyond EOD, truncated [ 89.547895][ T7779] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 89.796219][ T7797] overlayfs: overlapping lowerdir path [ 89.952755][ T7808] netlink: 'syz.1.523': attribute type 3 has an invalid length. [ 89.957453][ T7808] netlink: 'syz.1.523': attribute type 3 has an invalid length. [ 90.547089][ T7842] ALSA: seq fatal error: cannot create timer (-22) [ 90.552091][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 90.552109][ T40] audit: type=1400 audit(1774501190.945:587): avc: denied { setopt } for pid=7843 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 90.769725][ T7871] __nla_validate_parse: 11 callbacks suppressed [ 90.769742][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 90.819360][ T7873] netlink: 56 bytes leftover after parsing attributes in process `syz.0.540'. [ 90.856468][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 91.176509][ T7895] netlink: 56 bytes leftover after parsing attributes in process `syz.1.544'. [ 91.176565][ T40] audit: type=1400 audit(1774501191.575:588): avc: denied { read } for pid=7892 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 91.248946][ T7903] capability: warning: `syz.1.548' uses 32-bit capabilities (legacy support in use) [ 91.302123][ T7907] gretap1: entered promiscuous mode [ 91.305503][ T7907] batman_adv: batadv0: Adding interface: gretap1 [ 91.308480][ T7907] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 91.318778][ T7907] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 91.323933][ T7905] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.440555][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 91.479737][ T40] audit: type=1400 audit(1774501191.875:589): avc: denied { map } for pid=7922 comm="syz.3.556" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.561224][ T7932] /dev/nullb0: Can't open blockdev [ 91.647404][ T40] audit: type=1400 audit(1774501192.045:590): avc: denied { read open } for pid=7940 comm="syz.0.564" path="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.693648][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'. [ 91.711699][ T40] audit: type=1400 audit(1774501192.105:591): avc: denied { lock } for pid=7945 comm="syz.3.566" path="socket:[18068]" dev="sockfs" ino=18068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 91.757580][ T7952] fuse: Bad value for 'fd' [ 92.561403][ T7979] 9pnet_fd: p9_fd_create_tcp (7979): problem creating socket [ 92.690564][ T40] audit: type=1400 audit(1774501193.085:592): avc: denied { getopt } for pid=7984 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.785953][ T7991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7991 comm=syz.0.579 [ 92.793226][ T7991] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 92.811918][ T7991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.830402][ T7991] bond1: (slave dummy0): making interface the new active one [ 92.835314][ T7991] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 92.880601][ T7994] overlayfs: missing 'lowerdir' [ 92.913870][ T40] audit: type=1400 audit(1774501193.305:593): avc: denied { create } for pid=7995 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 92.914978][ T7996] delete_channel: no stack [ 92.923451][ T74] bond1: (slave dummy0): link status definitely down, disabling slave [ 92.939802][ T74] bond1: now running without any active interface! [ 92.976904][ T7999] netlink: 168 bytes leftover after parsing attributes in process `syz.0.582'. [ 92.980322][ T7999] netlink: 168 bytes leftover after parsing attributes in process `syz.0.582'. [ 93.619194][ T8015] loop5: detected capacity change from 0 to 7 [ 93.624842][ T5925] Dev loop5: unable to read RDB block 7 [ 93.626705][ T5925] loop5: unable to read partition table [ 93.629176][ T5925] loop5: partition table beyond EOD, truncated [ 93.634675][ T8015] Dev loop5: unable to read RDB block 7 [ 93.637198][ T8015] loop5: unable to read partition table [ 93.639937][ T8015] loop5: partition table beyond EOD, truncated [ 93.642635][ T8015] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 93.761921][ T8018] netlink: 72 bytes leftover after parsing attributes in process `syz.3.589'. [ 93.779688][ T40] audit: type=1400 audit(1774501194.175:594): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 94.021617][ T8030] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 94.028993][ T8030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42513 sclass=netlink_route_socket pid=8030 comm=syz.3.592 [ 94.462805][ T8039] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 94.463714][ T8040] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 94.491816][ T40] audit: type=1400 audit(1774501194.885:595): avc: denied { mounton } for pid=8042 comm="syz.1.596" path="/143/bus" dev="tmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 94.491920][ T8043] /dev/nullb0: Can't open blockdev [ 94.611177][ T8048] loop5: detected capacity change from 0 to 7 [ 94.615430][ T5925] Dev loop5: unable to read RDB block 7 [ 94.617538][ T5925] loop5: unable to read partition table [ 94.619546][ T5925] loop5: partition table beyond EOD, truncated [ 94.623963][ T8048] Dev loop5: unable to read RDB block 7 [ 94.627078][ T8048] loop5: unable to read partition table [ 94.643032][ T8048] loop5: partition table beyond EOD, truncated [ 94.646057][ T8048] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 94.750350][ T8054] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 94.763036][ T8056] syzkaller1: entered promiscuous mode [ 94.765847][ T8056] syzkaller1: entered allmulticast mode [ 94.768893][ T8056] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 94.987717][ T8063] netlink: 'syz.3.603': attribute type 13 has an invalid length. [ 95.023125][ T8065] netlink: 56 bytes leftover after parsing attributes in process `syz.3.604'. [ 95.069604][ T8069] syz.1.606 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 95.093313][ T8067] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 95.141994][ T40] audit: type=1400 audit(1774501195.535:596): avc: denied { ioctl } for pid=8070 comm="syz.1.607" path="socket:[18174]" dev="sockfs" ino=18174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.375586][ T8090] FAT-fs (sr0): bogus number of reserved sectors [ 95.378619][ T8090] FAT-fs (sr0): Can't find a valid FAT filesystem [ 95.475739][ T8098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.804233][ T993] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.974138][ T993] usb 6-1: Using ep0 maxpacket: 32 [ 95.977505][ T993] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 95.980468][ T993] usb 6-1: config 0 has no interface number 0 [ 95.982583][ T993] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 95.985982][ T993] usb 6-1: config 0 interface 196 has no altsetting 0 [ 95.990411][ T993] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 95.993788][ T993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.997094][ T993] usb 6-1: Product: syz [ 95.998591][ T993] usb 6-1: Manufacturer: syz [ 96.000433][ T993] usb 6-1: SerialNumber: syz [ 96.004184][ T993] usb 6-1: config 0 descriptor?? [ 96.006356][ T8102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.103940][ T8113] __nla_validate_parse: 7 callbacks suppressed [ 96.103953][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 96.109428][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 96.229849][ T993] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 96.238166][ T8128] netlink: 'syz.0.623': attribute type 15 has an invalid length. [ 96.241810][ T993] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 96.247927][ T993] usb 6-1: USB disconnect, device number 5 [ 96.315879][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 96.315897][ T40] audit: type=1326 audit(1774501196.715:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.623" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35d7f9c799 code=0x0 [ 96.635689][ T8160] cgroup2: Unknown parameter 'euid' [ 96.674228][ T993] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 96.781693][ T8164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8164 comm=syz.1.634 [ 96.829923][ T8169] can: request_module (can-proto-4) failed. [ 96.847075][ T993] usb 8-1: not running at top speed; connect to a high speed hub [ 96.851103][ T993] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 96.859688][ T993] usb 8-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 96.862880][ T993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.866542][ T993] usb 8-1: Product: syz [ 96.867923][ T993] usb 8-1: Manufacturer: syz [ 96.869368][ T993] usb 8-1: SerialNumber: syz [ 96.916248][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.921487][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.072752][ T8178] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 97.076272][ T8178] netlink: 'syz.0.638': attribute type 4 has an invalid length. [ 97.079487][ T8178] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.638'. [ 97.081677][ T993] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.087403][ T993] usb 8-1: MIDIStreaming interface descriptor not found [ 97.122198][ T993] usb 8-1: USB disconnect, device number 4 [ 97.143745][ T6357] udevd[6357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.166237][ T830] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.215266][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.641'. [ 97.228547][ T8187] bond2: entered promiscuous mode [ 97.230593][ T8187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.241340][ T8187] vlan3: entered allmulticast mode [ 97.243006][ T8187] bond2: entered allmulticast mode [ 97.316221][ T830] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 97.319747][ T830] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 97.324206][ T830] usb 6-1: config 0 interface 0 has no altsetting 0 [ 97.330248][ T830] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.335119][ T830] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.338941][ T830] usb 6-1: Product: syz [ 97.340927][ T830] usb 6-1: Manufacturer: syz [ 97.343277][ T830] usb 6-1: SerialNumber: syz [ 97.351391][ T830] usb 6-1: config 0 descriptor?? [ 97.355609][ T830] hub 6-1:0.0: bad descriptor, ignoring hub [ 97.358791][ T830] hub 6-1:0.0: probe with driver hub failed with error -5 [ 97.367659][ T830] usb 6-1: selecting invalid altsetting 0 [ 97.384877][ T8191] netlink: 'syz.0.642': attribute type 5 has an invalid length. [ 97.511311][ T8196] netlink: 'syz.0.644': attribute type 1 has an invalid length. [ 97.523898][ T8196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.544104][ T8195] bond3: (slave veth3): Enslaving as an active interface with a down link [ 97.547511][ T8197] bond1: (slave dummy0): Releasing active interface [ 97.552840][ T8197] bond3: (slave dummy0): making interface the new active one [ 97.555994][ T8197] dummy0: entered promiscuous mode [ 97.558767][ T8197] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 97.676047][ T6011] usb 6-1: USB disconnect, device number 6 [ 97.815167][ T8229] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 97.993894][ T8243] netlink: 32 bytes leftover after parsing attributes in process `syz.3.659'. [ 98.029575][ T40] audit: type=1400 audit(1774501198.425:599): avc: denied { setopt } for pid=8244 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.038940][ T40] audit: type=1400 audit(1774501198.435:600): avc: denied { append } for pid=8244 comm="syz.3.660" name="pfkey" dev="proc" ino=4026533411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 98.228685][ T74] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 98.242165][ T8274] netlink: 68 bytes leftover after parsing attributes in process `syz.0.667'. [ 98.245633][ T8274] netlink: 'syz.0.667': attribute type 4 has an invalid length. [ 98.248341][ T8275] netlink: 'syz.0.667': attribute type 4 has an invalid length. [ 98.311554][ T8277] netlink: 'syz.1.668': attribute type 32 has an invalid length. [ 98.342192][ T40] audit: type=1400 audit(1774501198.735:601): avc: denied { map } for pid=8278 comm="syz.3.669" path="socket:[19373]" dev="sockfs" ino=19373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.350658][ T40] audit: type=1400 audit(1774501198.735:602): avc: denied { read accept } for pid=8278 comm="syz.3.669" path="socket:[19373]" dev="sockfs" ino=19373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.393978][ T8280] 9p: Invalid gid '0x00000000ffffffff' [ 98.490862][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 98.528001][ T40] audit: type=1400 audit(1774501198.925:603): avc: denied { getopt } for pid=8292 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.709722][ T8314] tipc: Enabling of bearer rejected, failed to enable media [ 98.791354][ T8324] program syz.3.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.798405][ T5933] Bluetooth: hci1: unexpected event for opcode 0x202f [ 98.853289][ T40] audit: type=1400 audit(1774501199.245:604): avc: denied { module_load } for pid=8327 comm="syz.3.685" path="/sys/kernel/hardlockup_count" dev="sysfs" ino=70989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 99.005569][ T8341] binder: 8339:8341 unknown command 0 [ 99.007940][ T8341] binder: 8339:8341 ioctl c0306201 200000000080 returned -22 [ 99.011155][ T8340] binder: 8339:8340 unknown command 0 [ 99.013161][ T8340] binder: 8339:8340 ioctl c0306201 200000000080 returned -22 [ 99.018660][ T40] audit: type=1400 audit(1774501199.415:605): avc: denied { map } for pid=8339 comm="syz.1.688" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.022915][ T8340] binder: BINDER_SET_CONTEXT_MGR already set [ 99.031713][ T8340] binder: 8339:8340 ioctl 4018620d 200000000040 returned -16 [ 99.032434][ T8341] binder: BINDER_SET_CONTEXT_MGR already set [ 99.039450][ T8341] binder: 8339:8341 ioctl 4018620d 200000000040 returned -16 [ 99.048150][ T8343] SELinux: failed to load policy [ 99.053438][ T40] audit: type=1400 audit(1774501199.445:606): avc: denied { setopt } for pid=8342 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.059487][ T8343] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 99.261553][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 99.376030][ T40] audit: type=1400 audit(1774501199.775:607): avc: denied { mounton } for pid=8349 comm="syz.3.691" path="/syzcgroup/unified/syz3" dev="pstore" ino=1331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 99.386485][ T8350] efs: device does not support 512 byte blocks [ 99.388527][ T8350] device does not support 512 byte blocks [ 99.388527][ T8350] [ 99.433017][ T5933] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 99.609594][ T8369] qnx6: unable to set blocksize [ 99.780569][ T8377] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 99.780910][ T8378] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 99.856030][ T8383] /dev/nullb0: Can't open blockdev [ 99.905595][ T8383] Failed to initialize the IGMP autojoin socket (err -2) [ 99.952811][ T8393] overlay: Unknown parameter 'euid' [ 99.991417][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.705'. [ 100.045161][ T8395] IPVS: Scheduler module ip_vs_sip not found [ 100.085466][ T8398] netlink: 10 bytes leftover after parsing attributes in process `syz.1.706'. [ 100.154447][ T8400] loop5: detected capacity change from 0 to 7 [ 100.157504][ T8400] Dev loop5: unable to read RDB block 7 [ 100.159883][ T8400] loop5: unable to read partition table [ 100.162512][ T8400] loop5: partition table beyond EOD, truncated [ 100.165164][ T8400] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 100.389261][ T5938] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 100.464139][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 100.544198][ T5938] usb 6-1: Using ep0 maxpacket: 8 [ 100.556648][ T5938] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.560243][ T5938] usb 6-1: config 0 has no interface number 0 [ 100.562915][ T5938] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.567887][ T5938] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.572876][ T5938] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.578418][ T5938] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.583858][ T5938] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 100.588876][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.595972][ T5938] usb 6-1: config 0 descriptor?? [ 100.615167][ T5938] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.625756][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.629931][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.633499][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.643676][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.655894][ T8405] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.665109][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.813486][ T8402] syzkaller0: entered promiscuous mode [ 100.815597][ T8402] syzkaller0: entered allmulticast mode [ 100.917414][ T5938] usb 6-1: USB disconnect, device number 7 [ 100.924578][ T5938] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 100.944615][ T34] usb 8-1: USB disconnect, device number 5 [ 101.365241][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.368820][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.372386][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.379974][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.384157][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.412549][ T8410] Failed to initialize the IGMP autojoin socket (err -2) [ 101.520993][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 101.611720][ T8419] netlink: 64 bytes leftover after parsing attributes in process `syz.3.713'. [ 101.746145][ T8410] chnl_net:caif_netlink_parms(): no params data found [ 101.840109][ T8418] netlink: 248 bytes leftover after parsing attributes in process `syz.1.712'. [ 101.843975][ T8418] openvswitch: netlink: Flow key attr not present in new flow. [ 101.922896][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.933016][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.935925][ T8410] bridge_slave_0: entered allmulticast mode [ 101.938678][ T8410] bridge_slave_0: entered promiscuous mode [ 101.943556][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.946205][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.948535][ T8410] bridge_slave_1: entered allmulticast mode [ 101.951232][ T8410] bridge_slave_1: entered promiscuous mode [ 102.021880][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.052539][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.057040][ T8451] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.715'. [ 102.102136][ T8410] team0: Port device team_slave_0 added [ 102.115145][ T8410] team0: Port device team_slave_1 added [ 102.146856][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.149132][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.159635][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.174198][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.177236][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.190616][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.327668][ T8410] hsr_slave_0: entered promiscuous mode [ 102.333429][ T8410] hsr_slave_1: entered promiscuous mode [ 102.715087][ T8482] validate_nla: 4 callbacks suppressed [ 102.715099][ T8482] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 102.717002][ T8410] netdevsim netdevsim4 netdevsim0: renamed from eth2 [ 102.738634][ T8410] netdevsim netdevsim4 netdevsim1: renamed from eth3 [ 102.748048][ T8410] netdevsim netdevsim4 netdevsim2: renamed from eth4 [ 102.755113][ T8410] netdevsim netdevsim4 netdevsim3: renamed from eth5 [ 102.803736][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.807223][ T8410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.820585][ T8496] loop5: detected capacity change from 0 to 7 [ 102.823276][ T8496] Dev loop5: unable to read RDB block 7 [ 102.826282][ T8496] loop5: unable to read partition table [ 102.828690][ T8496] loop5: partition table beyond EOD, truncated [ 102.831797][ T8496] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 102.923903][ T8500] 9p: Could not find request transport: fd.rقXA׏E [ 102.942519][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.043942][ T8410] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.068325][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 103.078672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.081609][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.107124][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.110102][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.256490][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 103.256509][ T40] audit: type=1400 audit(1774501203.655:618): avc: denied { read } for pid=8508 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.367465][ T8410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.404295][ T5933] Bluetooth: hci4: command tx timeout [ 103.487836][ T5933] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 103.491814][ T5933] Bluetooth: hci2: Injecting HCI hardware error event [ 103.495823][ T5933] Bluetooth: hci2: hardware error 0x00 [ 103.536809][ T40] audit: type=1400 audit(1774501203.935:619): avc: denied { setopt } for pid=8526 comm="syz.0.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.606593][ T8410] veth0_vlan: entered promiscuous mode [ 103.616035][ T8410] veth1_vlan: entered promiscuous mode [ 103.698115][ T8410] veth0_macvtap: entered promiscuous mode [ 103.711733][ T8410] veth1_macvtap: entered promiscuous mode [ 103.712349][ T8538] netlink: 96 bytes leftover after parsing attributes in process `syz.0.734'. [ 103.784236][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.805288][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.817054][ T8410] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 103.826743][ T8410] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 103.833886][ T8410] wireguard: wg0: Could not create IPv4 socket [ 103.838495][ T8410] wireguard: wg1: Could not create IPv4 socket [ 103.842669][ T8410] wireguard: wg2: Could not create IPv4 socket [ 104.156207][ T8563] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 104.175477][ T8563] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 104.200994][ T40] audit: type=1400 audit(1774501204.595:620): avc: denied { write } for pid=8568 comm="syz.0.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 104.284258][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.284502][ T5287] Bluetooth: hci5: command 0x1003 tx timeout [ 104.340145][ T40] audit: type=1400 audit(1774501204.735:621): avc: denied { kexec_image_load } for pid=8578 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 104.536502][ T8579] ------------[ cut here ]------------ [ 104.538725][ T8579] enable_ept && !allow_smaller_maxphyaddr [ 104.538735][ T8579] WARNING: arch/x86/kvm/vmx/vmx.c:5444 at handle_exception_nmi+0xa6e/0x1bb0, CPU#0: syz.3.747/8579 [ 104.546714][ T8579] Modules linked in: [ 104.549363][ T8579] CPU: 0 UID: 0 PID: 8579 Comm: syz.3.747 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.554221][ T8579] Tainted: [L]=SOFTLOCKUP [ 104.556253][ T8579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.560122][ T8579] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 104.562343][ T8579] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 104.570533][ T8579] RSP: 0018:ffffc9000e2d79d8 EFLAGS: 00010283 [ 104.572758][ T8579] RAX: 000000000001c194 RBX: ffff88805b2f0000 RCX: ffffc9000c402000 [ 104.575599][ T8579] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff88802dd5c980 [ 104.578455][ T8579] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 104.581186][ T8579] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 104.584125][ T8579] R13: 0000000000000000 R14: ffff888036392000 R15: ffff88805b2f00d8 [ 104.587898][ T8579] FS: 00007f308d5d26c0(0000) GS:ffff8880d633f000(0000) knlGS:0000000000000000 [ 104.591291][ T8579] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.593713][ T8579] CR2: 000000000f6632eb CR3: 000000002a09c000 CR4: 0000000000352ef0 [ 104.596889][ T8579] Call Trace: [ 104.598315][ T8579] [ 104.599416][ T8579] ? __pfx_handle_exception_nmi+0x10/0x10 [ 104.601616][ T8579] vmx_handle_exit+0x84d/0x1f40 [ 104.603593][ T8579] vcpu_run+0x34cf/0x5ca0 [ 104.605621][ T8579] ? __pfx_vcpu_run+0x10/0x10 [ 104.607384][ T8579] ? rcu_is_watching+0x12/0xc0 [ 104.609083][ T8579] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 104.611321][ T8579] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 104.613271][ T8579] kvm_vcpu_ioctl+0x730/0x1730 [ 104.615301][ T8579] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.617555][ T8579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.620052][ T8579] ? do_vfs_ioctl+0x226/0x13e0 [ 104.621754][ T8579] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.623820][ T8579] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.626297][ T8579] ? __fget_files+0x215/0x3d0 [ 104.628388][ T8579] ? hook_file_ioctl_common+0x146/0x410 [ 104.630580][ T8579] ? selinux_file_ioctl+0x139/0x290 [ 104.632464][ T8579] ? selinux_file_ioctl+0xb4/0x290 [ 104.634566][ T8579] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.636849][ T8579] __x64_sys_ioctl+0x18e/0x210 [ 104.638834][ T8579] do_syscall_64+0x106/0xf80 [ 104.640586][ T8579] ? clear_bhb_loop+0x40/0x90 [ 104.642391][ T8579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.644613][ T8579] RIP: 0033:0x7f308c79c799 [ 104.646216][ T8579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.653476][ T8579] RSP: 002b:00007f308d5d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.656523][ T8579] RAX: ffffffffffffffda RBX: 00007f308ca15fa0 RCX: 00007f308c79c799 [ 104.659682][ T8579] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 104.662962][ T8579] RBP: 00007f308c832c99 R08: 0000000000000000 R09: 0000000000000000 [ 104.666075][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.668858][ T8579] R13: 00007f308ca16038 R14: 00007f308ca15fa0 R15: 00007ffec0826428 [ 104.671614][ T8579] [ 104.672920][ T8579] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.675883][ T8579] CPU: 0 UID: 0 PID: 8579 Comm: syz.3.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.679819][ T8579] Tainted: [L]=SOFTLOCKUP [ 104.681547][ T8579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.685553][ T8579] Call Trace: [ 104.686992][ T8579] [ 104.688118][ T8579] dump_stack_lvl+0x100/0x190 [ 104.689954][ T8579] vpanic+0x552/0x970 [ 104.691413][ T8579] ? __pfx_vpanic+0x10/0x10 [ 104.693109][ T8579] panic+0xd1/0xe0 [ 104.694632][ T8579] ? __pfx_panic+0x10/0x10 [ 104.696244][ T8579] check_panic_on_warn.cold+0x19/0x34 [ 104.698293][ T8579] ? handle_exception_nmi+0xa6e/0x1bb0 [ 104.700339][ T8579] __warn.cold+0x191/0x348 [ 104.702111][ T8579] __report_bug+0x296/0x3d0 [ 104.703863][ T8579] ? handle_exception_nmi+0xa6e/0x1bb0 [ 104.706267][ T8579] ? __pfx___report_bug+0x10/0x10 [ 104.708055][ T8579] ? kvm_sched_in+0x9a/0xf0 [ 104.709652][ T8579] ? finish_task_switch.isra.0+0x4b8/0xb80 [ 104.711747][ T8579] ? rcu_is_watching+0x12/0xc0 [ 104.713541][ T8579] ? trace_sched_exit_tp+0x13a/0x180 [ 104.715537][ T8579] ? handle_exception_nmi+0xa6e/0x1bb0 [ 104.717732][ T8579] report_bug+0xb2/0x220 [ 104.719251][ T8579] ? handle_exception_nmi+0xa6e/0x1bb0 [ 104.721320][ T8579] handle_bug+0x16a/0x2a0 [ 104.722879][ T8579] exc_invalid_op+0x17/0x50 [ 104.724506][ T8579] asm_exc_invalid_op+0x1a/0x20 [ 104.726207][ T8579] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 104.728336][ T8579] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 104.734952][ T8579] RSP: 0018:ffffc9000e2d79d8 EFLAGS: 00010283 [ 104.737250][ T8579] RAX: 000000000001c194 RBX: ffff88805b2f0000 RCX: ffffc9000c402000 [ 104.740254][ T8579] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff88802dd5c980 [ 104.743285][ T8579] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 104.746193][ T8579] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 104.748935][ T8579] R13: 0000000000000000 R14: ffff888036392000 R15: ffff88805b2f00d8 [ 104.751649][ T8579] ? handle_exception_nmi+0xa6d/0x1bb0 [ 104.753541][ T8579] ? handle_exception_nmi+0xa6d/0x1bb0 [ 104.755444][ T8579] ? __pfx_handle_exception_nmi+0x10/0x10 [ 104.757596][ T8579] vmx_handle_exit+0x84d/0x1f40 [ 104.759329][ T8579] vcpu_run+0x34cf/0x5ca0 [ 104.760874][ T8579] ? __pfx_vcpu_run+0x10/0x10 [ 104.762876][ T8579] ? rcu_is_watching+0x12/0xc0 [ 104.764568][ T8579] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 104.766574][ T8579] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 104.768613][ T8579] kvm_vcpu_ioctl+0x730/0x1730 [ 104.770376][ T8579] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.772359][ T8579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.774481][ T8579] ? do_vfs_ioctl+0x226/0x13e0 [ 104.776155][ T8579] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.778173][ T8579] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.780696][ T8579] ? __fget_files+0x215/0x3d0 [ 104.782435][ T8579] ? hook_file_ioctl_common+0x146/0x410 [ 104.784726][ T8579] ? selinux_file_ioctl+0x139/0x290 [ 104.786621][ T8579] ? selinux_file_ioctl+0xb4/0x290 [ 104.788445][ T8579] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.790288][ T8579] __x64_sys_ioctl+0x18e/0x210 [ 104.792132][ T8579] do_syscall_64+0x106/0xf80 [ 104.793795][ T8579] ? clear_bhb_loop+0x40/0x90 [ 104.795542][ T8579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.797695][ T8579] RIP: 0033:0x7f308c79c799 [ 104.799540][ T8579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.806608][ T8579] RSP: 002b:00007f308d5d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.809845][ T8579] RAX: ffffffffffffffda RBX: 00007f308ca15fa0 RCX: 00007f308c79c799 [ 104.812991][ T8579] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 104.815882][ T8579] RBP: 00007f308c832c99 R08: 0000000000000000 R09: 0000000000000000 [ 104.818693][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.821459][ T8579] R13: 00007f308ca16038 R14: 00007f308ca15fa0 R15: 00007ffec0826428 [ 104.824239][ T8579] [ 104.826032][ T8579] Kernel Offset: disabled [ 104.827581][ T8579] Rebooting in 86400 seconds..