last executing test programs: 17.716493701s ago: executing program 4 (id=3049): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019180)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040851) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000019080)={0x0, 0xaf, "9f7af68522a5dd4618ff662b6a1c915a72c73c554441fd3a50dbb08f0a8b39b57a3ce8043573e2b6e165310c3f67c277778c4da76080598a1a92ca3f676558938f385def086e4ac74998ad0848555fe5d541184d3b77d761872852cede6cc4841f9003ced041a317319c85a64c08229d35bb0b4677384cebc23ad7af0c5ef5a289050a121317c0c76f1295f073b20316435b86d15019d915d6ba838f06722874f26eca7234790dfed396554b72512a"}, &(0x7f0000019140)=0xb7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x5cf3, &(0x7f00000002c0)={0x0, 0x64a0, 0x100, 0x1, 0x393}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r5, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/80, 0x50}], 0x1}}], 0x2, 0x102, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "4d1e32ce4fc262db", "cb97bbf0b09ffbbbd8de76519b478499", "b158e376", "4facbd0641ba0dc4"}, 0x28) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 13.257591797s ago: executing program 4 (id=3064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="07062bbd03000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, 0x0, 0xa000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 11.896024622s ago: executing program 4 (id=3066): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x20000400000bcf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r2, 0x400, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d9620bb35df5a66a86e792bb95c26b1d77ca91a98aee8188776186a5e1b4ea4c95bfa044c6d0a0b0825516bbb9d3927a42b09c8a27765673f4f07489"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) syslog(0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x16) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000008010900000000000000000700000e0900010073797a30000000000600024088a80000050003002f00000014000480"], 0x44}, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/fs/cgroup', 0x0, 0x0) 10.804503727s ago: executing program 4 (id=3071): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000700)={0x0, 0x0, 0x400, 0x10, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) 9.047523762s ago: executing program 4 (id=3081): mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x404, 0x0) 8.920398346s ago: executing program 4 (id=3082): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0xa, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001"], 0x140}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x402, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xe, 0x3, @thr={0x0, 0x0}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10f, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast1, 0x0, 0x3}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x57b97a23) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x11, 0x0, 0x0, 0xb4d, 0x6, 0x88, 0x0, 0x3ff}, 0x0) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x20c02) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa0, 0x0, 0x0) 7.516023283s ago: executing program 3 (id=3091): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000700)={0x0, 0x0, 0x400, 0x10, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) 7.092965682s ago: executing program 1 (id=3095): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0x1f, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 6.952445336s ago: executing program 1 (id=3096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0x0, 0xee00) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000810) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='mm_migrate_pages\x00', r4, 0x0, 0xdf5}, 0x42) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x3000002, @mcast2, 0x1}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) 6.952174939s ago: executing program 1 (id=3097): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = io_uring_setup(0x29bc, &(0x7f00000011c0)={0x0, 0x1a10, 0x80, 0x0, 0x9f}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="79a3c074d3f75a9af76501"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000002500)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) 5.700337382s ago: executing program 2 (id=3100): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x72}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, 0x0, 0x0) epoll_create(0xaf2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000300)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffb}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xe0000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 5.68938248s ago: executing program 3 (id=3101): lseek(0xffffffffffffffff, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4, 0x0, 0x500}}, 0x14}}, 0x20000000) 5.248614774s ago: executing program 0 (id=3102): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "338e3468c0ad2a4f4813347ed3e1c0bf"}) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01'], 0xffffff7f00000000}) 5.140320158s ago: executing program 3 (id=3103): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000004000000", 0x6033) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x3, 0xffffd, &(0x7f0000000dc0)=""/222, &(0x7f00000000c0)=""/87, &(0x7f0000001480)=""/96, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x204002, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000c00)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) timer_create(0x7, &(0x7f0000000800)={0x0, 0x3, 0x0, @thr={&(0x7f0000000880)="58380a4dc9ab2c009b5029143e2e42f46c736ed46d18dee39a51b17c80e6cf5c9f67ac4186e04aff57a4d654221fe3e095246ad6db7c36aafb41da061eb4dca958f7b33d45c2b4bf319281", &(0x7f0000000b00)="3e5cab2d58a5f3af46ebed07d4ccbc20e49bb3d2178d4097f9b2b6880726ac60419ea5aa9fb841155ab3de4417f1ae81ead863cfaf0e037e791598d6ac1b465a39e73f919109b430e83418ab0188d5d54214b7042bf45d275569571e491d29fb6f322cdd0b7e7ee19aaa90367a412f2d32ffd845e7e71b0746c320b41712eeb4b95b5d1614ce73bb1c7ad34e09a40fea812eeb3bad201cfc2a6cb21733bbb8a0ccd7fcdfd4cf2be8504acbc94b71d27354f9abe34f3eefc4e9c5d870c3547975f5b3db346f2c157518da277e0006"}}, &(0x7f0000000900)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@delqdisc={0x38, 0x25, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xf}, {0x3, 0x8}, {0xd, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r8, &(0x7f0000000540), 0xfffffdd8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000d80)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="400d1400000014f0b1b4acd6bc00"/26], &(0x7f0000000c80)=ANY=[@ANYBLOB="00030400000004030c00"], &(0x7f0000001500)=ANY=[@ANYBLOB="160f058000000500a20000ebc38812efa25416495e652c6ec8e32343c966fb2318b6a8b7f8cf735e567085f21f3efb707d6aea0ffd1d902e375e31480a82757ecd8f2f9c8e4debaa71bb1bdd1391b85e097ef5308f17c511c4b1df974098fa822db427d41bf0a3493d9b1fae7bff099cf8780dc495173a5f7569"], &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe0, 0x1, 0x9, 0x4, "6248fc70", "53c69b69"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x4, 0x1, 0x3, 0x5, 0x0, 0x2}}}, &(0x7f0000001280)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="200dc900000010f58cb47cf3ea7af4cfd304e7a6ba42f4277eaf1be24915e124bbe81c10dc7ede56abff18356def135416646a117e31e6450b35f76b435fa1a20545baed47f7d75475874f5535845099fd7f420d920e48d520dcc1036d6d313ccb9aa17f66a4d25a7ee73b1e7f1eb294210666d33870d1e44abcbb421a48a1caaddeb5b4fa86c30479194e6fa0ba4bf039c9d59627d8e48afabecb430aaf315b3c2d0ba747201dc7f2e34c78b1db6ef13f61fe0e7a89ad24c5de2a27c945d8a71eec13c78eddb1d279d142749be87be295465a9ddb00000000000000819a7acb76c626db345b3f212ebc0355d670106f6c4efc91d19a10db50cd9e7fd361fc4df53db3ec077285615f081dc789e75ff2380e55ccfc11064a1fe07a7d14b2a1f72c71d534c049c5bb6050"], &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000f80)=ANY=[@ANYBLOB=' \x00'/14], &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001040)={0x40, 0xb, 0x2, "1c5e"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x13, 0x6}, &(0x7f0000001100)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001140)={0x40, 0x19, 0x2, "5684"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x63}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x90}}) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='+perf_event +io +cpuqet }net_cls +pids '], 0x27) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) 4.810327557s ago: executing program 2 (id=3104): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000080)={{0xd4, 0xa2}, 'port1\x00', 0x88, 0x4080c, 0x45, 0x3, 0x3, 0xa7, 0x1, 0x0, 0x7, 0x11}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x4000cdb) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r3) 4.464447235s ago: executing program 3 (id=3106): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) (fail_nth: 1) 4.248300271s ago: executing program 3 (id=3107): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000780)={0x14, &(0x7f0000000940)={0x20, 0x2, 0xcf, {0xcf, 0x6, "afb1aaeb9685a402bcff3a1eb1b9df393bfe491ddb5aada2f201d1923f78622e26205a6ac7595625b50b216497fe1a3afc04f7bc0d77c098b625ed74169502b8bcb126a07033a85adce25fa8a3a0d86ca71e6ca363b068d582f5ce031a0b9181b9ededb045e83442a11966ddf6a34bc6574f42eb261a3deddf7490c1f62bfca90543670610fad7bcee0f475b65db5ea2182ec0f443f465a76b1af8fec6edcee6c3e9571ed3d14ee8fd05ac3f0afb9318b5ceefeff9faff18339ec2c947e259241ae3336e578972d37a7f8c8da2"}}, &(0x7f0000000a40)={0x0, 0x3, 0x59, @string={0x59, 0x3, "23e81e2594bd8e785d567348177c9de8c1140fa256346d24c590572ebeffdc6a2e4b1cfed350fe38377b2ce19c184d45f9aa9a8e135c2c3c3eb6c5c4b887ffd847a82eac69ffe6c4a610784b9f46bfc3c6f6213a1b8756"}}}, &(0x7f0000000d00)={0x34, &(0x7f0000000ac0)={0x20, 0xf, 0x4, "27ec5abf"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b80)={0x20, 0x0, 0xd8, {0xd6, "f5858eb0980582a7e591c6a35700d16d49447adf3b29270fd651411b81085ee18d5365e26c19b2f6ae9d678cc1cf92949fbf88bc9c149bbfaf298bbc67a3edea45a609b02915c316b14926a503470cc421981f65d0fe07e7d4ef708d8874cf29b941c4a9f5d0192f87acdba43f202ca6875bd42ca4cbc6f4e22926706b907baa7dd36852842c18a8420a9b10f36658097f43e76d5b74395c20cc5af34eb026f0c2d1c9788afe6e22053e1ffd6eaddfe87fb4c9a29a544a2b14f4e9e5df0756a657c5039e389d04108b632dc026d692190d98256c54fe"}}, &(0x7f0000000c80)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0x80}}) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x37, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) fchdir(r1) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001c80)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)={0x20, 0x1, 0x1, 0x4}, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x1, 0x6, {0x6, 0x23, "12333e69"}}, &(0x7f0000000040)={0x0, 0x3, 0x52, @string={0x52, 0x3, "d75b8e72d3caf4a896305d67cc8a5bcf20a11fe078349d830acdcc4bcb08f4ec7e71c05941e7fca465cd8b58c1d7c65ee7bd0718deb200370f6da88f1d112442ab829cd2532f097f91fa430b1ff00968"}}}, &(0x7f00000002c0)={0x34, &(0x7f0000000100)={0x40, 0x15, 0x28, "49b5efb9ebe16090db5b0413b256ac3c7e095d798ccd89126999cd55e5f465e842bfec80c9fbcd34"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000200)={0x20, 0x0, 0x1b, {0x19, "0ca6d2c9f01d4c6a0c96dcee12844385b66b3e587a2e047dcd"}}, &(0x7f0000000240)={0x20, 0x1, 0x1, 0xcc}, &(0x7f0000000280)={0x20, 0x0, 0x1, 0x89}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000000000000000000000000000000000000000000000000000014000d"], 0x3c}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x500200) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000740)={&(0x7f0000000600)=[{0x3, 0x1201, 0xf2, &(0x7f0000000340)="1abeb13f8c8b14fb41be9222ebe551215209343b5022511e31dc64657c25f6a36d9b6b29143ae329baea3bcbbeef13b62626bfdda1cafd816c32d870a1a160c7afbcdcaf33d25ac3cf5a406d45cd5f8db3a84e83f0a00ccf3259b8f461142cfb79af9947ad1bbaa27d5fe3b790c754951ee18f7fba4baa134e4ff24e8b3bc2baccec813c626c56bb9f4918b9b0e4ca31e642a30aa8c17be1f37f12c402dd1bb7ede1afbd80ebaaa5daa00c02c963b5ae39230d22559fdf9b074e18489aeb8a7851d239f6ee695e7c302f7581cf87745bdf90f9227f2694cc18c7e03194e962ac07b86c545a84b353163aab47e911ab239b7b"}, {0x8, 0x800, 0x26, &(0x7f0000000440)="cf4262fc9c8c9deaf0ffc387e89eb652b811e35045c271be976903117e94741cc537a9e3b3a9"}, {0x8, 0x5400, 0x44, &(0x7f0000000480)="32b6d489efc69cb21dab10b5aa9c6da8e9d2019f0b4a4e83fdc7025affb8a73acf282fae55c82efc253e8fd9002603c069081879ea70f28895185f074beb3c78678eb37d"}, {0xad8b, 0x2600, 0xed, &(0x7f0000000500)="32ce464170a641f399813814574b4c930b70d9c20f4d5c47afb88cf6b93f486c1227c6f19634bf39acf1ed427e30ddaa77f91acd062b1599fb1156aa33af3fdc778067cb19d98ccd679608e42d9ba1803f9a193db0da11f0f2ac9068afc4b7a3abd53d51fb975b2995fe4316e35be308a7d65a99e5678687c7ac035fc0dab410d2ab03d07632e8fb51c583c8ce95350aeb7ee9e2d053abf2ebb8508b88e7bdecf80810771b954cc6f5bff1556faea5f48bea9cd73e62bd80f169adde6a1932dbecbf504ad6da97f908c1ec22a38c8cf07a38e29118514d44706c3e65a229b60d76b4e513842c6cbed2494216aa"}, {0x9, 0x1201, 0x8d, &(0x7f0000000800)="08d2f1372ea1db1cc93110b31125f33a2d756b77470cbb0a206f2b08fec50f9b43878193de8af3b645ace2dfd287fce33bcebaf39877647b56307381d139442a105b187971c3ba237173db556dc0e6a8cce70bb7586e2049d7bd9c84b6ca92b89332127965dccfe260a79b76f731e3168cb1cee65c597a1051884ec602b8f722852e474e10f063a525509dc6b5"}], 0x5}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0), &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x4}}) syz_usb_disconnect(r0) 3.848985441s ago: executing program 1 (id=3108): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d000000000000000000000004"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff058500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80801, 0x0) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000040)="4172d1a4", 0x4}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) fchdir(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.848636518s ago: executing program 2 (id=3109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x13, r4}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0xc, 0x8, 0x0, '\x00', 0x3}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) 3.774658876s ago: executing program 0 (id=3110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd020303009c000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21"], 0xd2) 3.021339779s ago: executing program 0 (id=3111): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87e9", @ANYBLOB="18d23ec2551e8a4dccae7bdccd100b8860655c239fb954ca039ab4451bad62e21caae5c6fb1f03adf90baa787f9f101414bb35786560aa6542", @ANYRES64, @ANYRES32], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x2000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/140) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000180)={0x2, 0x10, 0x401, 0xb, 0x7, 0x8}) 2.812240938s ago: executing program 1 (id=3112): recvmmsg(0xffffffffffffffff, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/62, 0x3e}], 0x1}, 0x9}], 0x1, 0x40005083, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setpipe(r3, 0x407, 0x7fff) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x412080, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000280)=""/154, 0x1d, 0x9a}, 0x28) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES64=r4]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x2000000, 0x3a3}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x24048011}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000340)=@req3={0x7, 0x9, 0x1, 0x7, 0x121, 0xc0000000, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='rose0\x00', 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="12010003e15d841044061f4cff046501fda30f8081093000090491873ba1fa00c7"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2.809472801s ago: executing program 2 (id=3113): socket$inet6(0xa, 0x3, 0xff) (async) r0 = socket$inet6(0xa, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = gettid() socket$nl_audit(0x10, 0x3, 0x9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8, 0x210600) recvmmsg$unix(r3, &(0x7f0000001e80)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/83, 0x53}, {&(0x7f0000001780)=""/139, 0x8b}], 0x8, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/10, 0xa}, {&(0x7f0000001a40)=""/144, 0x90}, {&(0x7f0000001b00)=""/7, 0x7}, {&(0x7f0000001b40)=""/84, 0x54}, {&(0x7f0000001bc0)=""/241, 0xf1}], 0x5, &(0x7f0000001d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x3, 0x100, &(0x7f0000001f40)={0x0, 0x989680}) (async) recvmmsg$unix(r3, &(0x7f0000001e80)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/83, 0x53}, {&(0x7f0000001780)=""/139, 0x8b}], 0x8, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/10, 0xa}, {&(0x7f0000001a40)=""/144, 0x90}, {&(0x7f0000001b00)=""/7, 0x7}, {&(0x7f0000001b40)=""/84, 0x54}, {&(0x7f0000001bc0)=""/241, 0xf1}], 0x5, &(0x7f0000001d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x3, 0x100, &(0x7f0000001f40)={0x0, 0x989680}) socket$inet6(0xa, 0x2, 0x3a) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r4, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x100}, 0x1c) socket$inet6(0xa, 0x1, 0x0) (async) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 2.689422351s ago: executing program 2 (id=3114): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x89) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0140, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x401c5820, &(0x7f0000000300)={@id={0x18, 0x0, @c}}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000028c0)=ANY=[@ANYBLOB="040000000000000004000000010000000100000000000000ff010000e90000000200000000fcffff000000000000000000000000000000000002000006000000010000000000000001000000feffffff0800000001000080000000000000000000000000000000000000000005000084452900000000000000000001000000060000000000000000000000000000000000000000000000000000000300000005000000000000000000000008000000000400"/203]) mount(0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)='usrquota') sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x2, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000002040)={{0x1, 0x1, 0x18, r4, {0x0, 0xee01}}, './file0\x00'}) r9 = syz_open_dev$sndpcmp(&(0x7f0000002080), 0x8, 0x80200) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r10, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x5, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) sendmmsg$unix(r4, &(0x7f0000002700)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="3db64a8e6469d2bd7f885d7fd37dc51fa1cc863630b5380933b632334c0108cebeb73ebdd9c4e3db524e5271b00400c23ea5871eb455634af3d37bda3d432875d6646288", 0x44}, {&(0x7f00000001c0)="f27fdafae94121a9934b3bf8dc69cae29756a371751152b233836c2192aca53920734d959844929f2408b5a9e1e533c502643d3f05136a7510e97a4bf19879", 0x3f}, {&(0x7f00000014c0)="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", 0xfc}, {&(0x7f00000015c0)="a482fedb39ca5758c1c801d482121a870c2767178e689e8fa858cd7005f6b1d93c6c07f24c422fc2252c13e64397e85094b818b4fdd9276eabcefdb8875ac4aec0806435619420", 0x47}], 0x5, 0x0, 0x0, 0x880}}, {{&(0x7f00000016c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000001740)="8f9fe3589f63a9721a0453c9af6e9a3491bf4107e24bc2a5f4695b3bfe36c44f16710fcb5d4f6a1e1c663beb68bffae873cee6e56923154640261c15c5cb7569b6206c1e030e2a5cb83b5cb92b0be2f90b8146b56fe3c0f8d7fedd263ff01449bb698cf754d7ac8b04a6190289b872140bf0c7389f63485f0f6edaa21f59a962a5b4d64417371573e03d0861bfcc7e9aceb2f24eaba0e45639b2273aa0bc17b23e2f4aed2d81080b211efbe8101a1f5c3b1e623f2ebd24508be4c20499610611a93837fbe9caa135373be78e077caee11944ff75b22f46bfbf8b7db75c9e2a505c469dfd302455b0e2ec4c5d28ec0086789fd6a5", 0xf4}, {&(0x7f0000001840)="30cf4458e2d35b05db8536dd6078e78d77da841e5874ad1e54a8669eabf615cd8b975bffa43a2e75f65c1b3ebdd335a3c6c7ffa0e9bb9e0058d4e6356658d59832caa0b8a69234f707503d4771ffc264d9e51c6be37b8319359746b58ffe7ef280036701ce400ebcf6", 0x69}, {&(0x7f00000018c0)="c3a0195c9ee3d1b1244cc8e6b88efad8c65f476a426f35bd376756080641b6fc0105453169c38d12583fd631023f2aa3114ede32087348d099deb9385f0c522cc080485d89a2889bba10f878d7deaaac40ce57fedc7841ab80a22c4ac68b30800f3dff6828", 0x65}], 0x3, 0x0, 0x0, 0x400c800}}, {{&(0x7f0000001940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001a80)=[{&(0x7f00000019c0)="4880099301abeadbc043f72f67d1453eb2e25fe0eefbc21d69eed56c09d1", 0x1e}, {&(0x7f0000001a00)="d135f795e0b510a1ea9661d02328b4cf2e444f39f34629f43543ad69a1325c4e21c44faa3c0336b96906fe84960d633ccc77aaa93efb411d9cff2d72fe11902cb1153995f278a9d57b9f54f2a8f10d855630b13ddb424eb5d58c470e63be51083e0daf5b1118fd299dc53616c96586a8ab2026f7613f7cd4289c6524", 0x7c}], 0x2, 0x0, 0x0, 0x40}}, {{&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001b40)="fca4", 0x2}, {&(0x7f0000001b80)="e153079ba441403401177be3028391443438154056b753692072865f77973313a4bdbfa2e3823658c3db9f995c660eef85c95908cd11bde7", 0x38}, {&(0x7f0000001c00)="a2c9e62a5979a7934f6a85e57563fb8628b23d446819ae210726fa228325ec8b22d12375e6f842f50c6b56a1e9be36aa06eb39645f3d7444c2cf54a060489017e2e8404ce6a0ee6443a370913373d1be5114499a7eec3baac27bd5900f0f43edc6dda895af4a05af198178fbfd7714ff75ec144a0a89e7b44720107426956ac034886884fb6be0b3d19f6af3925f7db22a8551a828c94d5c69ede35e041d0baffc2f266152b35aef698fba1c999b2888f4718efac41e5b3dead82fd93a482612f93e52459e430a61b747c84716a8b500df24063aa4fba491dcd02e1931024882bd523840c9ab8b411b820cb3546e66a4ef2305a98c527b1ffb1f05960961a6", 0xff}], 0x3, &(0x7f0000001dc0)=[@cred={{0x1c, 0x1, 0x2, {r3, r7, 0xee01}}}], 0x20, 0x2000}}, {{&(0x7f0000001e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001e80)="ab72a38d6886897b94204be5071938623d1ab9de2ba60bb19063dd9a94522e8097268582bfcdbf76e1882c79bf07759e46c8cc836f4d680648", 0x39}], 0x1, &(0x7f00000020c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r8}}}, @rights={{0x24, 0x1, 0x1, [r9, r1, r10, r2, r4]}}], 0x78, 0x20000800}}, {{&(0x7f0000002140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)}], 0x1, 0x0, 0x0, 0x4080}}, {{&(0x7f0000002240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002640)=[{&(0x7f00000022c0)="f5a07db3abc4f64001a557970983e0f2bc12e382b94ac2f772c2d9ec5e5d4f68f405234c7dabac2039ed67", 0x2b}, {&(0x7f0000002300)="e51df867ab9136ea1e775ecd98af5d", 0xf}, {&(0x7f0000002340)="1c3b3c649d5cab702e942b2de31e800db3017c96b1aafc893843e6d0c7ac9ff5b62f99e77e835d96b85181ef712b14fa0059285cfc5bc422022bcd9786135bbd026a8c7b30ab87e6f34055423cf4d6198c591c304237c969a94c8f916c758d6ac3bd6340a08a6583b04786413608dc54e5d3977986f2793b43d05ecadc682a55a83b4bc910587e9ead6c871304af", 0x8e}, {&(0x7f0000002400)="405816493ce5c80638fd09b8015b2606868da8a9bb123976ceb694da6b605cb93096a6155b", 0x25}, {&(0x7f0000001f00)="0d7ba2a3c1046421870b858cd67939c00be35888bae2013ad91f65b5212ed5176bb0116770324bad73289f41824ee8ca66b5372272907d8702af951b7651ab43c8fac51d1b9446364851601ddc14da5b41b2bbdb73f3a4bfa14f3f6400c123cc090775c9269fe9708fcba0fd659a9ab81e78f90343ce4ce453fe83a1e8ac70d12b81e44eb137dd7ea640f625eac11bceb9cd4e32", 0x94}, {&(0x7f0000002480)="6847e6fda76c3274f4a3c8e0dda1319967c55db89d83c3b6624abd29b33f14fe3ab36301742923200a6beccc5b315e04b9af6b8e89bd5d0074ed59c82f96bd662108f7faa3e5d3a63abf56cd76afa6bc", 0x50}, {&(0x7f0000002500)="c76793af6846e2f5fd833f53ddd72a4644d488a8172a8d1292e8f1deceff047885f8a3bf674e3fe53fb744ee68bec7ba3c113b7d4c789fc3ed0a8eb458ac101770430013b4a74d1d96125e7a534dfbaf6d52a69a62b93751ec8e5a2d30482bbf17c2873d7a57bc12fada4540747f9bf37be0d33e26291bf9931c9003a426780f5f593d259cc83e70da5430aeb67c8472d7328bf2570770f576a2602c0367dab6acd0542ae59cfb348f7d72fcaeedec1b58a82856ecff0e3c91a2f3680484a20f5fecca8540f4", 0xc6}, {&(0x7f0000002600)="83721235d60ebc488d1eafb957dffd68eda97f16a3914b6d84541be033eeeda5161e28", 0x23}, {&(0x7f0000002c80)="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", 0x1000}], 0x9, 0x0, 0x0, 0x20040814}}], 0x7, 0x2004c015) 1.783922617s ago: executing program 1 (id=3115): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xc, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4000003e, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x40060}, 0x400c044) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r5, &(0x7f0000000040), 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) 1.108451558s ago: executing program 0 (id=3116): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x9, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4811) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 1.060856342s ago: executing program 2 (id=3117): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = io_uring_setup(0x29bc, &(0x7f00000011c0)={0x0, 0x1a10, 0x80, 0x0, 0x9f}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x89901) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="79a3c074d3f75a9af76501"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000002500)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) 885.369372ms ago: executing program 3 (id=3118): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x10000004102008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10000, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x88c0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000035c328000000000006907864010101ac1414aa0000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 884.790698ms ago: executing program 0 (id=3119): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400000000000000000000000000000000000001fe8000", @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4000010, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f0000000040), 0x4) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080002010900680000800900456f009100660000401190780a010102ac1414aa4f204e22007d9078c10200169c79cb22459ff50866ff829694a603d3c443eead4100af7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5e155c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e3"], 0x9f) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x6, @empty}]}, &(0x7f0000000180)=0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) 0s ago: executing program 0 (id=3120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) shmdt(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0x299, {}, {0xee01}, 0x6, 0x4e}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x67, 0xfffc, 0x80, 0x5e55b37311de6d89, 0x0, @broadcast, @local}}}}) dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) kernel console output (not intermixed with test programs): d [ 405.209045][ T30] audit: type=1326 audit(1753849491.448:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.2.1527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0375d8e9a9 code=0x0 [ 405.651231][T11541] overlayfs: failed to clone upperpath [ 405.856414][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 407.062857][T11579] fuse: Unknown parameter ' roup_id' [ 407.088732][T11579] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1547'. [ 407.170281][ T5836] Bluetooth: hci1: unexpected event 0x1d length: 36 > 5 [ 407.204924][T11584] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1550'. [ 407.221056][T11584] 0: renamed from hsr0 [ 407.227918][T11584] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 407.238607][T11584] 0: entered allmulticast mode [ 407.243494][T11584] hsr_slave_0: entered allmulticast mode [ 407.249953][T11584] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 407.256462][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 407.884693][ T30] audit: type=1800 audit(1753849494.128:835): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1554" name="nullb0" dev="tmpfs" ino=1599 res=0 errno=0 [ 407.906526][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.748325][ T30] audit: type=1400 audit(1753849494.988:836): avc: denied { map } for pid=11610 comm="syz.2.1559" path="socket:[26731]" dev="sockfs" ino=26731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 408.772979][T11611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1306 sclass=netlink_route_socket pid=11611 comm=syz.2.1559 [ 408.989934][ T5836] Bluetooth: hci3: unexpected event 0x1d length: 36 > 5 [ 409.325311][T11628] lo speed is unknown, defaulting to 1000 [ 409.688865][ T30] audit: type=1400 audit(1753849495.928:837): avc: denied { accept } for pid=11638 comm="syz.4.1570" path="socket:[26032]" dev="sockfs" ino=26032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.931204][T11647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11647 comm=syz.0.1564 [ 410.019545][T11647] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 410.024080][T11645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.039497][T11645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.332900][T11645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.343214][T11645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.397726][T11645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.408586][T11645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.482649][T11645] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.492165][T11645] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.566437][T11645] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.575131][T11645] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.588979][T11645] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.597189][T11645] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.610651][T11645] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.618951][T11645] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.631469][T11645] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.639730][T11645] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.414753][T11723] fuse: Bad value for 'fd' [ 413.501261][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1593'. [ 413.511549][T11730] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1593'. [ 413.635610][T11728] netlink: 'syz.3.1592': attribute type 21 has an invalid length. [ 413.645166][T11728] netlink: 'syz.3.1592': attribute type 6 has an invalid length. [ 413.653665][T11728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1592'. [ 414.306989][T11738] sctp: [Deprecated]: syz.4.1595 (pid 11738) Use of int in max_burst socket option. [ 414.306989][T11738] Use struct sctp_assoc_value instead [ 414.422220][ T30] audit: type=1400 audit(1753849500.548:838): avc: denied { setopt } for pid=11733 comm="syz.4.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 414.874725][T11751] bad cache= option: no%e [ 414.874725][T11751] [ 414.881311][T11751] CIFS: VFS: bad cache= option: no%e [ 415.568277][T11762] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1604'. [ 415.765791][T11780] xt_l2tp: unknown flags: 17 [ 416.125438][T11796] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1615'. [ 417.223445][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 417.273736][T11810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 417.300241][T11810] netlink: 'syz.4.1619': attribute type 7 has an invalid length. [ 417.366536][T11810] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11810 comm=syz.4.1619 [ 417.405753][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 417.504436][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 417.523084][T11813] netlink: 'syz.4.1619': attribute type 7 has an invalid length. [ 417.873834][ T5836] Bluetooth: hci0: unexpected event 0x1d length: 36 > 5 [ 418.790140][T11835] pim6reg: entered allmulticast mode [ 418.821149][T11835] pim6reg: left allmulticast mode [ 420.774417][T11857] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1635'. [ 420.910649][T11862] netlink: 'syz.4.1636': attribute type 10 has an invalid length. [ 421.086855][T11867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.112749][ T5836] Bluetooth: hci3: unexpected event 0x1d length: 36 > 5 [ 422.827450][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 422.857377][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 423.290419][ T5836] Bluetooth: hci3: unexpected event 0x1d length: 36 > 5 [ 424.239201][T11926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11926 comm=syz.1.1657 [ 425.079740][T11955] overlayfs: failed to clone upperpath [ 425.421380][ T5836] Bluetooth: hci3: unexpected event 0x1d length: 36 > 5 [ 426.817395][ T5836] Bluetooth: hci0: Malformed LE Event: 0x02 [ 428.235323][T12008] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1677'. [ 428.454078][T12010] lo speed is unknown, defaulting to 1000 [ 429.075042][T12006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.652988][T12097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1705'. [ 435.646520][T12129] netlink: 'syz.4.1710': attribute type 10 has an invalid length. [ 435.666433][T12129] batman_adv: batadv0: Adding interface: wlan0 [ 436.498555][T12129] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.601820][T12129] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 436.668146][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 438.367549][T12168] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1728'. [ 438.399480][T12170] tmpfs: Unknown parameter 'qrquotabl>ޱ' [ 438.518032][ T30] audit: type=1400 audit(1753849524.758:839): avc: denied { read } for pid=12173 comm="syz.0.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 439.207528][ T5836] Bluetooth: hci0: unexpected event 0x1d length: 36 > 5 [ 439.486888][T12195] overlayfs: failed to resolve './file0': -2 [ 439.825831][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.868394][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.170059][T12197] overlayfs: failed to clone upperpath [ 440.377646][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 440.392410][ T30] audit: type=1400 audit(1753849526.628:840): avc: denied { nlmsg_read } for pid=12205 comm="syz.1.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 440.645818][ T30] audit: type=1326 audit(1753849526.838:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 440.773197][ T30] audit: type=1326 audit(1753849526.838:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 440.837003][ T30] audit: type=1326 audit(1753849526.838:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 441.001322][ T30] audit: type=1326 audit(1753849526.838:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 441.035870][ T30] audit: type=1326 audit(1753849526.838:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 441.059241][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.066033][ T30] audit: type=1326 audit(1753849526.838:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 441.089393][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.097169][ T30] audit: type=1326 audit(1753849526.838:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 441.120561][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.180767][ T30] audit: type=1326 audit(1753849526.838:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 441.204222][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.627447][T12230] ipip0: left allmulticast mode [ 443.317610][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1753'. [ 443.327789][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 443.380776][T12247] IPVS: Error joining to the multicast group [ 443.425473][T12249] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 445.307666][ T5897] IPVS: starting estimator thread 0... [ 446.013399][T12271] IPVS: using max 40 ests per chain, 96000 per kthread [ 446.166281][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 446.166297][ T30] audit: type=1326 audit(1753849532.408:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 446.459541][ T30] audit: type=1326 audit(1753849532.438:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 446.557306][ T30] audit: type=1326 audit(1753849532.438:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 446.580960][ T30] audit: type=1326 audit(1753849532.438:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 446.622192][ T30] audit: type=1326 audit(1753849532.438:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 446.742011][ T30] audit: type=1326 audit(1753849532.438:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 446.839692][ T30] audit: type=1326 audit(1753849532.438:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f322158d310 code=0x7ffc0000 [ 446.867740][ T30] audit: type=1326 audit(1753849532.438:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 446.896959][ T30] audit: type=1326 audit(1753849532.448:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f322158e5ab code=0x7ffc0000 [ 447.005861][ T30] audit: type=1326 audit(1753849532.448:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 447.308537][T12309] lo speed is unknown, defaulting to 1000 [ 448.514295][T12328] xt_cgroup: invalid path, errno=-2 [ 449.571671][T12355] lo speed is unknown, defaulting to 1000 [ 450.652538][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 451.234352][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 451.234369][ T30] audit: type=1326 audit(1753849537.378:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 451.302851][ T30] audit: type=1326 audit(1753849537.378:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 451.444766][ T30] audit: type=1326 audit(1753849537.378:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 451.497098][T12388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1796'. [ 451.529506][ T30] audit: type=1326 audit(1753849537.378:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 451.751834][ T30] audit: type=1326 audit(1753849537.378:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 452.283671][ T30] audit: type=1326 audit(1753849537.378:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 452.306930][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.332779][T12399] lo speed is unknown, defaulting to 1000 [ 452.441140][ T30] audit: type=1326 audit(1753849537.468:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 452.999797][ T30] audit: type=1326 audit(1753849537.468:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 453.023205][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.193229][ T30] audit: type=1326 audit(1753849537.468:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 453.262226][ T30] audit: type=1326 audit(1753849537.468:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 453.285711][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.881196][T12423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.451639][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 454.491204][T12443] 9pnet_fd: Insufficient options for proto=fd [ 454.508260][T12443] netlink: 'syz.0.1813': attribute type 10 has an invalid length. [ 454.526630][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.556532][T12443] team0: Port device bond0 added [ 455.936776][T12479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1826'. [ 455.955861][T12479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1826'. [ 455.986927][ T5836] Bluetooth: hci0: unexpected event 0x1d length: 36 > 5 [ 457.982834][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 460.423969][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 460.424001][ T30] audit: type=1400 audit(1753849546.668:1044): avc: denied { bind } for pid=12532 comm="syz.2.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 460.670961][ T30] audit: type=1326 audit(1753849546.908:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12540 comm="syz.4.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 460.703405][ T30] audit: type=1326 audit(1753849546.938:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12540 comm="syz.4.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 460.996348][ T30] audit: type=1326 audit(1753849546.938:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12540 comm="syz.4.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 461.019825][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.030538][ T30] audit: type=1326 audit(1753849546.938:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12540 comm="syz.4.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 461.054019][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.502302][ T30] audit: type=1326 audit(1753849546.938:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12540 comm="syz.4.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 461.526034][ T30] audit: type=1326 audit(1753849546.938:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12540 comm="syz.4.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50e0d8d310 code=0x7ffc0000 [ 461.563799][ T30] audit: type=1326 audit(1753849546.938:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12540 comm="syz.4.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 461.587266][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.606378][ T30] audit: type=1326 audit(1753849546.938:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12540 comm="syz.4.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50e0d8e5ab code=0x7ffc0000 [ 461.711201][ T30] audit: type=1326 audit(1753849546.938:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12540 comm="syz.4.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 461.818992][T12558] lo speed is unknown, defaulting to 1000 [ 463.650005][T12578] overlayfs: failed to resolve './file0': -2 [ 464.216722][T12581] syz_tun: entered allmulticast mode [ 464.226256][T12580] syz_tun: left allmulticast mode [ 464.398311][T12586] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1854'. [ 464.519715][T12587] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 464.592879][T12587] overlayfs: failed to resolve './file1': -2 [ 464.696136][ T5836] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 464.919756][T12590] tmpfs: Unknown parameter 'usrquota' [ 465.615337][T12596] lo speed is unknown, defaulting to 1000 [ 465.647056][T12593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.674836][ T5836] Bluetooth: hci3: unexpected event 0x1d length: 36 > 5 [ 465.680389][T12593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.406780][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 466.406797][ T30] audit: type=1326 audit(1753849552.648:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 466.436659][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.447744][ T30] audit: type=1326 audit(1753849552.648:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 466.471213][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.504379][ T30] audit: type=1326 audit(1753849552.648:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 466.536896][ T30] audit: type=1326 audit(1753849552.648:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 466.616616][ T30] audit: type=1326 audit(1753849552.648:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 466.640963][ T30] audit: type=1326 audit(1753849552.648:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 466.665238][ T30] audit: type=1326 audit(1753849552.648:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 466.702552][ T30] audit: type=1326 audit(1753849552.648:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 466.860736][T12621] overlayfs: failed to resolve './file0': -2 [ 467.489401][ T30] audit: type=1326 audit(1753849552.648:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 468.250419][ T30] audit: type=1326 audit(1753849552.648:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12614 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 468.291052][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1864'. [ 468.497492][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1867'. [ 468.686461][T12640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12640 comm=syz.0.1865 [ 469.154958][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 470.390058][T12664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12664 comm=syz.2.1872 [ 471.172296][T12677] lo speed is unknown, defaulting to 1000 [ 471.705349][T12683] bridge0: port 3(syz_tun) entered blocking state [ 471.712005][T12683] bridge0: port 3(syz_tun) entered disabled state [ 471.718767][T12683] syz_tun: entered allmulticast mode [ 471.725996][T12683] syz_tun: entered promiscuous mode [ 472.018875][T12685] netlink: 'syz.0.1882': attribute type 4 has an invalid length. [ 472.052993][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1882'. [ 472.096043][T12685] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1882'. [ 473.727308][T12722] netlink: 'syz.4.1892': attribute type 10 has an invalid length. [ 473.740290][T12722] team0: Device hsr_slave_0 failed to register rx_handler [ 474.137545][T12728] netlink: 'syz.2.1896': attribute type 21 has an invalid length. [ 474.145963][T12728] netlink: 'syz.2.1896': attribute type 6 has an invalid length. [ 474.154240][T12728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1896'. [ 475.667446][ T5836] Bluetooth: hci3: Malformed LE Event: 0x02 [ 475.745653][T12752] lo speed is unknown, defaulting to 1000 [ 475.972125][T12760] 9pnet_fd: Insufficient options for proto=fd [ 476.667989][T12768] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1909'. [ 477.060744][T12779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1913'. [ 477.070416][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1913'. [ 477.079837][T12779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1913'. [ 477.088951][T12779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1913'. [ 477.344405][T12777] lo speed is unknown, defaulting to 1000 [ 477.473752][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 477.473768][ T30] audit: type=1326 audit(1753849564.723:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz.3.1912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8dc38e9a9 code=0x0 [ 478.592085][ T30] audit: type=1400 audit(1753849565.833:1117): avc: denied { watch_sb } for pid=12796 comm="syz.3.1918" path="/426" dev="tmpfs" ino=2255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 478.651033][T12800] lo speed is unknown, defaulting to 1000 [ 479.028380][T12809] lo speed is unknown, defaulting to 1000 [ 479.995486][ T30] audit: type=1400 audit(1753849567.243:1118): avc: denied { map } for pid=12819 comm="syz.3.1925" path="socket:[29811]" dev="sockfs" ino=29811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 480.018706][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.867573][T12829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.881158][T12829] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 481.677295][T12835] 9pnet_fd: Insufficient options for proto=fd [ 482.262757][T12850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1933'. [ 482.271774][T12850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1933'. [ 482.280803][T12850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1933'. [ 482.290699][T12850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1933'. [ 482.330431][ T30] audit: type=1400 audit(1753849569.573:1119): avc: denied { create } for pid=12855 comm="syz.3.1937" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 482.353986][T12856] fuse: Unknown parameter '' [ 482.426877][ T30] audit: type=1400 audit(1753849569.603:1120): avc: denied { mounton } for pid=12855 comm="syz.3.1937" path="/431/file0" dev="tmpfs" ino=2286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 483.041353][T12864] overlayfs: failed to clone upperpath [ 483.380953][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 486.248386][T12922] netlink: 'syz.1.1962': attribute type 30 has an invalid length. [ 487.522656][ T5836] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 487.684070][ T30] audit: type=1400 audit(1753849574.923:1121): avc: denied { setopt } for pid=12960 comm="syz.4.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 488.185762][T12976] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 490.225876][T13006] lo speed is unknown, defaulting to 1000 [ 490.412184][ T30] audit: type=1326 audit(1753849577.653:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.1987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x0 [ 490.435148][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.538933][T13021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.171091][T13060] lo speed is unknown, defaulting to 1000 [ 492.380456][ T5836] Bluetooth: hci3: Malformed LE Event: 0x0b [ 492.774611][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2005'. [ 492.939556][T13055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.955554][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2005'. [ 493.401450][T13089] overlayfs: failed to resolve './file0': -2 [ 494.147630][T13091] overlayfs: failed to resolve './file0': -2 [ 495.250108][ T30] audit: type=1400 audit(1753849582.493:1123): avc: denied { name_bind } for pid=13108 comm="syz.2.2019" src=16386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 495.355759][ T30] audit: type=1400 audit(1753849582.493:1124): avc: denied { node_bind } for pid=13108 comm="syz.2.2019" saddr=::1 src=16386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 495.638044][ T30] audit: type=1400 audit(1753849582.793:1125): avc: denied { execmem } for pid=13120 comm="syz.2.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 495.680441][T13127] dummy0: entered allmulticast mode [ 495.687256][T13127] dummy0: left allmulticast mode [ 496.580938][T13140] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 497.821384][T13165] netlink: 'syz.3.2037': attribute type 33 has an invalid length. [ 498.451852][ T30] audit: type=1400 audit(1753849585.693:1126): avc: denied { create } for pid=13180 comm="syz.0.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 498.552418][ T30] audit: type=1400 audit(1753849585.703:1127): avc: denied { write } for pid=13180 comm="syz.0.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 498.577632][ T30] audit: type=1400 audit(1753849585.703:1128): avc: denied { nlmsg_write } for pid=13180 comm="syz.0.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 498.615604][ T30] audit: type=1400 audit(1753849585.703:1129): avc: denied { nlmsg_read } for pid=13180 comm="syz.0.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 498.636219][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.682562][ T30] audit: type=1400 audit(1753849585.703:1130): avc: denied { ioctl } for pid=13180 comm="syz.0.2043" path="socket:[30954]" dev="sockfs" ino=30954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 498.708051][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.852732][T13190] lo speed is unknown, defaulting to 1000 [ 500.060781][ T30] audit: type=1800 audit(1753849587.303:1131): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2054" name="nullb0" dev="tmpfs" ino=367 res=0 errno=0 [ 500.082714][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.135466][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.142210][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.901007][T13231] overlayfs: missing 'lowerdir' [ 502.341688][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 502.423880][T13239] lo speed is unknown, defaulting to 1000 [ 502.834414][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2067'. [ 502.896468][T13253] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 503.032532][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 503.330617][T13269] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2074'. [ 504.679431][T13301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2085'. [ 504.705230][T13303] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 504.747457][ T5836] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 504.829030][T13307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2088'. [ 505.898464][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 506.475975][ T30] audit: type=1400 audit(1753849593.723:1132): avc: denied { bind } for pid=13335 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 508.314037][T13365] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2104'. [ 508.860493][T13383] macsec1: entered promiscuous mode [ 508.869121][T13383] macsec1: entered allmulticast mode [ 510.309874][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036ab4400: rx timeout, send abort [ 510.318528][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888036ab7c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 510.700250][T13414] ipvlan0: entered promiscuous mode [ 510.818214][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036ab4400: abort rx timeout. Force session deactivation [ 512.097548][ T5836] Bluetooth: hci0: unexpected event 0x1d length: 36 > 5 [ 512.149775][T13441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2132'. [ 513.475328][T13473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2145'. [ 513.494527][T13469] SET target dimension over the limit! [ 514.308722][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2149'. [ 514.479742][ T30] audit: type=1400 audit(1753849601.716:1133): avc: denied { read } for pid=13496 comm="syz.0.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 514.499073][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.090694][T13506] 9pnet_fd: Insufficient options for proto=fd [ 517.910110][T13551] 9pnet_fd: Insufficient options for proto=fd [ 518.463977][T13565] lo speed is unknown, defaulting to 1000 [ 520.169330][T13605] lo speed is unknown, defaulting to 1000 [ 520.938820][T13611] wireguard: wg1: Could not create IPv4 socket [ 520.950000][T13616] ipip0: entered allmulticast mode [ 521.336918][ T30] audit: type=1400 audit(1753849608.566:1134): avc: denied { ioctl } for pid=13621 comm="syz.3.2197" path="socket:[31603]" dev="sockfs" ino=31603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 521.621213][ T30] audit: type=1326 audit(1753849608.856:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13639 comm="syz.1.2202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x0 [ 521.933230][T13644] overlayfs: failed to resolve './file0': -2 [ 522.211803][ T30] audit: type=1400 audit(1753849609.446:1136): avc: denied { getopt } for pid=13647 comm="syz.3.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.232409][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.299800][T13656] lo speed is unknown, defaulting to 1000 [ 522.549271][T13661] xt_CT: No such helper "pptp" [ 522.926527][T13677] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 522.936026][T13677] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 523.463591][T13681] fuse: Unknown parameter 'E [ 523.463591][T13681] L-v?!tο.S]hGw~NqClq)t(r)|z [ 523.463591][T13681] _0' [ 523.790373][T13696] lo speed is unknown, defaulting to 1000 [ 524.218994][T13705] IPVS: Error connecting to the multicast addr [ 524.526152][ T30] audit: type=1400 audit(1753849611.756:1137): avc: denied { create } for pid=13717 comm="syz.2.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 525.612739][T13737] lo speed is unknown, defaulting to 1000 [ 526.380615][ T30] audit: type=1326 audit(1753849613.616:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 526.404117][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.415858][ T30] audit: type=1326 audit(1753849613.616:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 526.517392][ T30] audit: type=1326 audit(1753849613.646:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 526.542622][ T30] audit: type=1326 audit(1753849613.646:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 526.565999][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.588055][ T30] audit: type=1326 audit(1753849613.646:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 526.613786][ T30] audit: type=1326 audit(1753849613.646:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1a4b8d310 code=0x7ffc0000 [ 526.637248][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.926430][ T30] audit: type=1326 audit(1753849613.646:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 526.950007][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.957481][ T30] audit: type=1326 audit(1753849613.646:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1a4b8e5ab code=0x7ffc0000 [ 526.980863][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.987292][ T30] audit: type=1326 audit(1753849613.646:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 527.028682][ T30] audit: type=1326 audit(1753849613.646:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13745 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 527.052064][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.442453][T13768] netlink: 'syz.4.2241': attribute type 10 has an invalid length. [ 527.475546][T13768] team0: Port device wlan1 added [ 527.820889][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 527.907824][T13777] lo speed is unknown, defaulting to 1000 [ 528.380155][T13783] lo speed is unknown, defaulting to 1000 [ 528.621310][T13790] IPVS: Error connecting to the multicast addr [ 528.636886][T13786] xt_CT: No such helper "pptp" [ 528.936824][T13799] tipc: Enabling of bearer rejected, already enabled [ 528.946554][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2249'. [ 528.957309][T13799] tipc: Disabling bearer [ 529.021573][T13806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2251'. [ 531.925277][T13853] overlayfs: failed to resolve './file0': -2 [ 532.825066][T13854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2264'. [ 533.554742][T13879] overlayfs: failed to clone upperpath [ 535.567840][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 535.567857][ T30] audit: type=1326 audit(1753849622.806:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 535.598522][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.607077][ T30] audit: type=1326 audit(1753849622.846:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 535.630607][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.657931][ T30] audit: type=1326 audit(1753849622.846:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 535.681475][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.838356][ T30] audit: type=1326 audit(1753849622.846:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 535.863566][ T30] audit: type=1326 audit(1753849622.856:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 535.887737][ T30] audit: type=1326 audit(1753849622.856:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 535.924569][ T30] audit: type=1326 audit(1753849622.856:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 535.948079][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.416161][ T30] audit: type=1326 audit(1753849622.856:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0375d8d310 code=0x7ffc0000 [ 536.456403][ T30] audit: type=1326 audit(1753849622.856:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 536.550058][ T30] audit: type=1326 audit(1753849622.856:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13919 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0375d8e5ab code=0x7ffc0000 [ 537.002496][T13946] netlink: 'syz.3.2295': attribute type 2 has an invalid length. [ 537.004693][T13945] overlayfs: failed to clone upperpath [ 537.013470][T13946] netlink: 'syz.3.2295': attribute type 1 has an invalid length. [ 537.044041][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 537.057117][T13946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2295'. [ 539.175701][T13983] netlink: 'syz.1.2307': attribute type 8 has an invalid length. [ 540.453841][T13999] overlayfs: failed to clone upperpath [ 540.955286][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 540.955303][ T30] audit: type=1400 audit(1753849628.196:1243): avc: denied { audit_write } for pid=14012 comm="syz.0.2317" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 540.982603][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.605583][ T5836] Bluetooth: hci0: unexpected event 0x1d length: 36 > 5 [ 541.765002][ T30] audit: type=1326 audit(1753849628.996:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 541.849729][ T30] audit: type=1326 audit(1753849628.996:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 541.877198][ T30] audit: type=1326 audit(1753849629.086:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 541.904179][ T30] audit: type=1326 audit(1753849629.086:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 542.017219][ T30] audit: type=1326 audit(1753849629.086:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 542.041331][ T30] audit: type=1326 audit(1753849629.116:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 542.065732][ T30] audit: type=1326 audit(1753849629.116:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 542.180198][ T30] audit: type=1326 audit(1753849629.116:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 542.206928][ T30] audit: type=1326 audit(1753849629.116:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.4.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 542.861988][T14031] overlayfs: failed to clone upperpath [ 543.250028][T14041] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2325'. [ 543.426904][T14043] xt_hashlimit: max too large, truncated to 1048576 [ 543.626597][T14045] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 543.633526][T14045] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 544.665405][ T5836] Bluetooth: hci1: unexpected event 0x1d length: 36 > 5 [ 544.812714][T14060] fuse: Bad value for 'fd' [ 544.932080][T14066] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2333'. [ 544.965588][T14068] lo speed is unknown, defaulting to 1000 [ 546.874933][T14105] overlayfs: failed to resolve './file0': -2 [ 548.230979][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 548.230994][ T30] audit: type=1804 audit(1753849635.466:1255): pid=14112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2347" name="file0" dev="tmpfs" ino=2408 res=1 errno=0 [ 548.293027][ T30] audit: type=1400 audit(1753849635.526:1256): avc: denied { setattr } for pid=14116 comm="syz.1.2348" path="socket:[33828]" dev="sockfs" ino=33828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 548.427489][T14123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.701632][T14132] netlink: 'syz.0.2353': attribute type 12 has an invalid length. [ 548.721060][T14132] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2353'. [ 549.745141][T14155] overlayfs: failed to resolve './file0': -2 [ 550.197847][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 550.304809][T14175] overlayfs: failed to clone upperpath [ 550.803085][T14189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2371'. [ 551.695308][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c181800: rx timeout, send abort [ 551.704418][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c181800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 551.944280][T14210] 9pnet_fd: Insufficient options for proto=fd [ 551.967775][ T5836] Bluetooth: hci1: unexpected event 0x1d length: 36 > 5 [ 551.978781][T14210] netlink: 'syz.3.2379': attribute type 10 has an invalid length. [ 552.729504][T14230] overlayfs: failed to resolve './file0': -2 [ 554.028520][ T30] audit: type=1326 audit(1753849641.256:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 554.033686][T14256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'. [ 554.052050][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.087005][ T30] audit: type=1326 audit(1753849641.256:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 554.139811][T14256] netlink: 'syz.4.2390': attribute type 14 has an invalid length. [ 554.208872][T14256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'. [ 554.243796][ T30] audit: type=1326 audit(1753849641.256:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 554.267390][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.291832][T14256] netlink: 'syz.4.2390': attribute type 14 has an invalid length. [ 554.298047][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 554.407961][T14263] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.2391'. [ 554.434904][ T30] audit: type=1326 audit(1753849641.256:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 554.540295][ T30] audit: type=1326 audit(1753849641.256:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 554.563824][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.606596][ T30] audit: type=1326 audit(1753849641.266:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 554.630127][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.709729][ T30] audit: type=1326 audit(1753849641.266:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 554.734299][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.772424][ T30] audit: type=1326 audit(1753849641.266:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 554.795920][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.830490][ T30] audit: type=1326 audit(1753849641.266:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 554.901043][ T30] audit: type=1326 audit(1753849641.266:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14255 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 555.290175][T14279] overlayfs: failed to resolve './file0': -2 [ 556.043798][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 558.237671][T14331] overlayfs: failed to resolve './file0': -2 [ 558.699930][ T5836] Bluetooth: hci3: unexpected event 0x1d length: 36 > 5 [ 559.613928][T14346] ipvlan0: entered promiscuous mode [ 560.843642][T14377] overlayfs: failed to resolve './file0': -2 [ 561.363253][T14364] xt_socket: unknown flags 0xc [ 562.593452][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.602809][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.653172][ T5836] Bluetooth: hci3: unexpected event 0x1d length: 36 > 5 [ 562.974199][ T5836] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 563.476528][T14439] netlink: 'syz.4.2451': attribute type 21 has an invalid length. [ 563.903484][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 563.958718][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 563.958735][ T30] audit: type=1400 audit(1753849651.196:1287): avc: denied { audit_read } for pid=14446 comm="syz.1.2454" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 564.133210][T14457] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 564.171267][T14459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.089702][ T5836] Bluetooth: hci1: unexpected event 0x1d length: 36 > 5 [ 570.033965][T14552] fuse: Unknown parameter 'f' [ 570.225435][T14558] overlayfs: failed to resolve './file0': -2 [ 570.945879][T14567] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2488'. [ 570.956081][T14567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2488'. [ 571.114606][T14571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2489'. [ 571.848801][T14582] lo speed is unknown, defaulting to 1000 [ 571.947558][ T5836] Bluetooth: hci1: unexpected event 0x1d length: 36 > 5 [ 572.612414][T14601] overlayfs: failed to resolve './file0': -2 [ 574.552928][T14635] netlink: 'syz.1.2510': attribute type 4 has an invalid length. [ 574.577711][T14636] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2511'. [ 575.404377][T14643] overlayfs: failed to resolve './file0': -2 [ 576.809665][T14680] overlayfs: failed to resolve './file0': -2 [ 577.675764][T14690] overlayfs: failed to clone upperpath [ 578.179443][T14695] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 578.192976][T14695] Error validating options; rc = [-22] [ 578.476648][T14697] virtio-fs: tag not found [ 579.536357][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2535'. [ 580.139936][T14726] overlayfs: failed to resolve './file0': -2 [ 581.780843][ T30] audit: type=1400 audit(1753849669.016:1288): avc: denied { bind } for pid=14759 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 581.805978][T14761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2549'. [ 582.094222][T14771] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 582.945958][T14761] overlayfs: failed to clone upperpath [ 582.975257][T14783] overlayfs: failed to clone upperpath [ 582.985851][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2554'. [ 583.477687][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2554'. [ 583.880043][T14793] overlayfs: failed to resolve './file0': -2 [ 585.506901][ T5831] Bluetooth: hci1: unexpected event 0x1d length: 36 > 5 [ 587.156377][T14841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2571'. [ 587.259016][T14846] overlayfs: failed to resolve './file0': -2 [ 588.909774][T14883] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 589.228089][ T30] audit: type=1326 audit(1753849676.466:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dc38e9a9 code=0x7ffc0000 [ 589.254227][ T30] audit: type=1326 audit(1753849676.496:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dc38e9a9 code=0x7ffc0000 [ 589.277695][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.757500][ T30] audit: type=1326 audit(1753849676.496:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8dc38e9a9 code=0x7ffc0000 [ 589.781025][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.811518][ T30] audit: type=1326 audit(1753849676.496:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dc38e9a9 code=0x7ffc0000 [ 589.845303][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.861066][ T30] audit: type=1326 audit(1753849676.496:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dc38e9a9 code=0x7ffc0000 [ 589.894604][ T30] audit: type=1326 audit(1753849676.496:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8dc38d310 code=0x7ffc0000 [ 589.922916][ T30] audit: type=1326 audit(1753849676.496:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dc38e9a9 code=0x7ffc0000 [ 589.946468][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.044582][ T30] audit: type=1326 audit(1753849676.496:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8dc38e5ab code=0x7ffc0000 [ 590.079832][ T30] audit: type=1326 audit(1753849676.496:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8dc38e9a9 code=0x7ffc0000 [ 590.113469][ T30] audit: type=1326 audit(1753849676.496:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8dc38e9a9 code=0x7ffc0000 [ 590.183615][T14902] overlayfs: failed to resolve './file0': -2 [ 591.350875][T14923] sctp: [Deprecated]: syz.2.2596 (pid 14923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.350875][T14923] Use struct sctp_sack_info instead [ 592.954653][T14954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2606'. [ 594.079599][T14973] netlink: 'syz.4.2614': attribute type 1 has an invalid length. [ 594.767385][T14989] team0: No ports can be present during mode change [ 594.838474][T14993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2621'. [ 595.293282][T15007] overlayfs: failed to resolve './file0': -2 [ 596.171706][T15028] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2631'. [ 596.708055][T15036] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2634'. [ 597.954480][T15056] lo speed is unknown, defaulting to 1000 [ 598.574557][T15068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2641'. [ 598.897410][T15082] overlayfs: failed to resolve './file0': -2 [ 599.653552][T15090] lo speed is unknown, defaulting to 1000 [ 600.653939][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 600.653955][ T30] audit: type=1400 audit(1753849687.896:1316): avc: denied { read } for pid=15105 comm="syz.0.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 600.740246][T15111] batadv1: entered promiscuous mode [ 600.867508][T15111] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 601.684644][T15125] tmpfs: Bad value for 'mpol' [ 601.696001][ T30] audit: type=1400 audit(1753849688.926:1317): avc: denied { getopt } for pid=15124 comm="syz.0.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 601.765337][T15127] wg1 speed is unknown, defaulting to 1000 [ 601.771204][T15127] wg1 speed is unknown, defaulting to 1000 [ 601.778462][T15127] wg1 speed is unknown, defaulting to 1000 [ 601.790047][T15127] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 601.805025][T15127] wg1 speed is unknown, defaulting to 1000 [ 601.811518][T15127] wg1 speed is unknown, defaulting to 1000 [ 601.818096][T15127] wg1 speed is unknown, defaulting to 1000 [ 601.824612][T15127] wg1 speed is unknown, defaulting to 1000 [ 601.831128][T15127] wg1 speed is unknown, defaulting to 1000 [ 601.837691][T15127] wg1 speed is unknown, defaulting to 1000 [ 601.844258][T15127] wg1 speed is unknown, defaulting to 1000 [ 602.103749][T15130] tipc: Enabling of bearer rejected, failed to enable media [ 602.126225][T15134] ceph: No mds server is up or the cluster is laggy [ 602.127083][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'. [ 602.133565][ T2148] libceph: connect (1)[c::]:6789 error -101 [ 602.150741][T15140] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 602.601395][ T2148] libceph: mon0 (1)[c::]:6789 connect error [ 602.664502][T15140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.399856][T15164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2668'. [ 603.535900][T15164] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2668'. [ 603.888495][T15171] lo speed is unknown, defaulting to 1000 [ 603.895553][T15171] wg1 speed is unknown, defaulting to 1000 [ 604.834528][T15177] lo speed is unknown, defaulting to 1000 [ 604.847454][T15177] wg1 speed is unknown, defaulting to 1000 [ 605.553632][T15184] lo speed is unknown, defaulting to 1000 [ 605.560692][T15184] wg1 speed is unknown, defaulting to 1000 [ 606.578341][T15206] lo speed is unknown, defaulting to 1000 [ 606.585574][T15206] wg1 speed is unknown, defaulting to 1000 [ 608.596553][T15257] lo speed is unknown, defaulting to 1000 [ 608.603044][T15257] wg1 speed is unknown, defaulting to 1000 [ 609.105327][T15264] netlink: 'syz.3.2696': attribute type 1 has an invalid length. [ 609.143472][T15264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.179033][T15264] vlan2: entered allmulticast mode [ 609.186357][T15264] bond3: (slave vlan2): Opening slave failed [ 609.943669][ T30] audit: type=1326 audit(1753849697.186:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15271 comm="syz.3.2699" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8dc38e9a9 code=0x0 [ 610.030770][ T30] audit: type=1400 audit(1753849697.266:1319): avc: denied { accept } for pid=15277 comm="syz.4.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 610.487023][T15295] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 610.825521][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2707'. [ 611.316048][T15307] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.323261][T15307] bridge0: port 2(bridge_slave_1) entered listening state [ 611.330672][T15307] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.337900][T15307] bridge0: port 1(bridge_slave_0) entered listening state [ 611.381341][T15307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.507117][T15307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 612.109512][ T8436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.142828][ T8436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.265814][T15328] overlayfs: failed to resolve './file0': -2 [ 613.251411][ T30] audit: type=1400 audit(1753849700.486:1320): avc: denied { read } for pid=15342 comm="syz.1.2722" path="socket:[37031]" dev="sockfs" ino=37031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 613.275496][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.299501][T15350] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2722'. [ 613.635452][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 613.645958][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 613.655677][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 613.663971][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 613.676242][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 613.794686][T12245] syz_tun (unregistering): left allmulticast mode [ 613.812162][ T30] audit: type=1400 audit(1753849701.046:1321): avc: denied { map } for pid=15360 comm="syz.2.2727" path="socket:[37047]" dev="sockfs" ino=37047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 613.835768][T12245] syz_tun (unregistering): left promiscuous mode [ 613.842451][T12245] bridge0: port 3(syz_tun) entered disabled state [ 613.931380][T15353] lo speed is unknown, defaulting to 1000 [ 613.939505][T15353] wg1 speed is unknown, defaulting to 1000 [ 614.177750][T15371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2729'. [ 614.407636][T15376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15376 comm=syz.4.2729 [ 614.543010][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2731'. [ 614.605208][T15353] chnl_net:caif_netlink_parms(): no params data found [ 615.168247][T15353] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.175815][T15353] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.183169][T15353] bridge_slave_0: entered allmulticast mode [ 615.190511][T15353] bridge_slave_0: entered promiscuous mode [ 615.258922][T15353] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.295474][T15353] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.306192][T15353] bridge_slave_1: entered allmulticast mode [ 615.315022][T15353] bridge_slave_1: entered promiscuous mode [ 615.421048][T15353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.435719][T15353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.537052][T15353] team0: Port device team_slave_0 added [ 615.548928][T15353] team0: Port device team_slave_1 added [ 615.772476][ T5831] Bluetooth: hci5: command tx timeout [ 615.853494][T15353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.861210][T15353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.986584][T15353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.005361][T15353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.018181][T15353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.044168][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.052666][T15353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.120958][T15353] hsr_slave_0: entered promiscuous mode [ 616.130174][T15353] hsr_slave_1: entered promiscuous mode [ 616.139000][T15353] debugfs: 'hsr0' already exists in 'hsr' [ 616.145923][T15353] Cannot create hsr debugfs directory [ 616.534901][T15353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 616.547465][T15353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 616.557107][T15353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 616.566594][T15353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 616.646939][T15353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.668423][T15353] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.682029][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.689257][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.707059][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.714304][ T8436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.881769][T15417] uprobe: syz.1.2739:15417 failed to unregister, leaking uprobe [ 617.135654][ T30] audit: type=1400 audit(1753849704.376:1322): avc: denied { accept } for pid=15434 comm="syz.2.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 617.220291][T15353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.282591][T15442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=15442 comm=syz.0.2744 [ 617.383365][T15353] veth0_vlan: entered promiscuous mode [ 617.395720][T15353] veth1_vlan: entered promiscuous mode [ 617.422056][T15353] veth0_macvtap: entered promiscuous mode [ 617.815261][T15353] veth1_macvtap: entered promiscuous mode [ 617.849614][T15353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.853312][ T5831] Bluetooth: hci5: command tx timeout [ 617.872106][T15353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.889729][T15353] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.899598][T15353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.908831][T15353] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.920724][T15353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.989678][ T8441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.002837][ T8441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.030425][ T8441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.043937][ T8441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.121642][ T30] audit: type=1400 audit(1753849705.356:1323): avc: denied { mounton } for pid=15353 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 618.843055][T15463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2750'. [ 619.932436][ T5831] Bluetooth: hci5: command tx timeout [ 621.498387][ T5831] Bluetooth: hci4: unexpected event 0x1d length: 36 > 5 [ 621.869765][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 622.012347][ T5831] Bluetooth: hci5: command tx timeout [ 623.882566][ T5831] Bluetooth: hci5: unexpected event 0x1d length: 36 > 5 [ 624.027183][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.041333][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.197180][ T30] audit: type=1400 audit(1753849712.436:1324): avc: denied { read } for pid=5187 comm="acpid" name="event9" dev="devtmpfs" ino=2929 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 625.261849][ T30] audit: type=1400 audit(1753849712.436:1325): avc: denied { open } for pid=5187 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2929 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 625.326881][ T30] audit: type=1400 audit(1753849712.436:1326): avc: denied { ioctl } for pid=5187 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=2929 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 625.718320][T15593] loop2: detected capacity change from 0 to 7 [ 626.138454][T15593] Dev loop2: unable to read RDB block 7 [ 626.144175][T15593] loop2: unable to read partition table [ 626.150006][T15593] loop2: partition table beyond EOD, truncated [ 626.156238][T15593] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 626.426726][T15598] overlayfs: failed to resolve './file0': -2 [ 627.547298][T15620] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 628.037407][T15632] kAFS: No cell specified [ 628.567274][ T974] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 628.784304][ T974] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 628.808968][ T974] usb 4-1: config 0 has no interface number 0 [ 628.827388][ T974] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.932422][ T974] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.947758][ T974] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 628.957132][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.966327][ T974] usb 4-1: config 0 descriptor?? [ 629.191431][T15655] fuse: Bad value for 'fd' [ 630.937687][ T974] usbhid 4-1:0.1: can't add hid device: -71 [ 630.944056][ T974] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 630.955590][ T974] usb 4-1: USB disconnect, device number 11 [ 631.980899][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2820'. [ 633.692541][ T5834] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 634.372381][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 634.378996][ T5834] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 634.391223][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.414080][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 634.442490][ T5831] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 634.442620][ T5834] usb 4-1: config 0 descriptor?? [ 634.593353][T15746] batadv_slave_0: entered promiscuous mode [ 635.158256][T15752] veth1_to_bond: entered allmulticast mode [ 635.181180][T15741] uprobe: syz.2.2834:15741 failed to unregister, leaking uprobe [ 635.292048][ T5910] usb 4-1: USB disconnect, device number 12 [ 635.431185][T15760] overlayfs: failed to clone upperpath [ 636.634061][T15789] overlayfs: failed to resolve './file0': -2 [ 638.053927][T15548] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 638.272387][T15548] usb 4-1: Using ep0 maxpacket: 32 [ 638.290185][T15548] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 638.300371][T15548] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.314572][T15548] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 638.327354][T15548] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 638.336356][T15548] usb 4-1: Product: syz [ 638.344498][T15548] usb 4-1: Manufacturer: syz [ 638.350830][T15548] usb 4-1: SerialNumber: syz [ 638.426392][ T30] audit: type=1400 audit(1753849725.596:1327): avc: denied { connect } for pid=15819 comm="syz.4.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 638.426913][T15548] usb 4-1: config 0 descriptor?? [ 639.269555][T15548] ldusb 4-1:0.0: Interrupt in endpoint not found [ 639.292647][ T30] audit: type=1400 audit(1753849725.596:1328): avc: denied { write } for pid=15819 comm="syz.4.2860" path="socket:[39025]" dev="sockfs" ino=39025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 639.504934][T15548] usb 4-1: USB disconnect, device number 13 [ 639.735490][T15848] overlayfs: failed to resolve './file0': -2 [ 640.448186][T15855] wireguard: wg1: Could not create IPv4 socket [ 640.629231][T15863] Lens A: ================= START STATUS ================= [ 640.636773][T15863] Lens A: Focus, Absolute: 0 [ 640.642813][T15863] Lens A: ================== END STATUS ================== [ 641.934117][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 641.942605][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 642.550337][T15893] overlayfs: failed to resolve './file0': -2 [ 643.254529][T15899] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2881'. [ 643.284345][T15902] syz_tun: entered allmulticast mode [ 643.290273][T15901] syz_tun: left allmulticast mode [ 643.837329][T15911] netlink: 'syz.2.2888': attribute type 10 has an invalid length. [ 645.349693][T15948] fuse: Unknown parameter '29' [ 645.936327][ T30] audit: type=1326 audit(1753849733.106:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 645.959819][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.996072][ T30] audit: type=1326 audit(1753849733.106:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 646.042634][ T30] audit: type=1326 audit(1753849733.106:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 646.108120][ T30] audit: type=1326 audit(1753849733.106:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 646.224514][ T30] audit: type=1326 audit(1753849733.106:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50e0d8d310 code=0x7ffc0000 [ 646.251373][ T30] audit: type=1326 audit(1753849733.106:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 646.274878][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.284544][ T30] audit: type=1326 audit(1753849733.106:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 646.308006][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.388310][ T30] audit: type=1326 audit(1753849733.106:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50e0d8e5ab code=0x7ffc0000 [ 646.411725][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.514113][ T30] audit: type=1326 audit(1753849733.106:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 646.575136][ T30] audit: type=1326 audit(1753849733.106:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.4.2901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 647.594582][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 647.659957][T15967] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 647.699528][T15967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.718609][T15967] bond3: (slave geneve2): making interface the new active one [ 647.728141][T15967] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 647.740724][T15967] bond3: entered promiscuous mode [ 647.745951][T15967] geneve2: entered promiscuous mode [ 648.367696][T15978] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 648.561197][T15978] netlink: 'syz.3.2909': attribute type 32 has an invalid length. [ 648.887440][T15989] netlink: 'syz.2.2910': attribute type 4 has an invalid length. [ 648.991571][T15989] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2910'. [ 648.992996][T15990] binder: 15987:15990 ioctl c018620b 200000000000 returned -14 [ 649.297533][T15994] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2914'. [ 649.549041][T15999] fuse: Unknown parameter '0x0000000000000006' [ 649.922496][ T5910] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 650.647093][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 650.655822][ T5910] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 650.665615][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 650.681637][ T5910] usb 4-1: Product: syz [ 650.685955][ T5910] usb 4-1: Manufacturer: syz [ 650.690579][ T5910] usb 4-1: SerialNumber: syz [ 650.699863][ T5910] usb 4-1: config 0 descriptor?? [ 651.190720][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 651.190736][ T30] audit: type=1326 audit(1753849738.426:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 651.210362][ T5910] usb 4-1: USB disconnect, device number 14 [ 651.283985][ T30] audit: type=1326 audit(1753849738.466:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 651.289474][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.440053][ T30] audit: type=1326 audit(1753849738.466:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 651.517839][ T30] audit: type=1326 audit(1753849738.466:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50e0d8d310 code=0x7ffc0000 [ 651.582471][ T30] audit: type=1326 audit(1753849738.466:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 651.642342][ T30] audit: type=1326 audit(1753849738.466:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 651.682724][ T30] audit: type=1326 audit(1753849738.466:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50e0d8e5ab code=0x7ffc0000 [ 651.713636][ T30] audit: type=1326 audit(1753849738.466:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 651.739483][ T30] audit: type=1326 audit(1753849738.466:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 651.765042][ T30] audit: type=1326 audit(1753849738.466:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16023 comm="syz.4.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e0d8e9a9 code=0x7ffc0000 [ 655.108808][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2935'. [ 655.171096][T16061] SELinux: security_context_str_to_sid (lRl^) failed with errno=-22 [ 655.185093][T16061] overlayfs: failed to clone upperpath [ 655.483776][T16069] netlink: 'syz.3.2940': attribute type 4 has an invalid length. [ 655.491699][T16069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2940'. [ 655.552003][T16069] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2940'. [ 655.579793][T16069] tmpfs: Unknown parameter '01777777777777777777777' [ 656.774278][ T5937] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 657.432299][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 657.482257][ T5937] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 657.498884][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.535191][ T5937] usb 4-1: Product: syz [ 657.548377][ T5937] usb 4-1: Manufacturer: syz [ 657.560361][ T5937] usb 4-1: SerialNumber: syz [ 657.580389][ T5937] usb 4-1: config 0 descriptor?? [ 657.601006][ T5937] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 657.878169][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 657.878183][ T30] audit: type=1326 audit(1753849745.116:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 657.972418][ T30] audit: type=1326 audit(1753849745.146:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 658.009910][ T30] audit: type=1326 audit(1753849745.146:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 658.063184][ T30] audit: type=1326 audit(1753849745.146:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 658.103943][T16135] No such timeout policy "syz1" [ 658.119415][ T30] audit: type=1326 audit(1753849745.146:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 658.171169][ T30] audit: type=1326 audit(1753849745.146:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1a4b8d310 code=0x7ffc0000 [ 659.184823][ T5937] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 659.197601][ T30] audit: type=1326 audit(1753849745.146:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 659.348833][ T30] audit: type=1326 audit(1753849745.146:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 659.372452][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.487984][ T30] audit: type=1326 audit(1753849745.146:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1a4b8e5ab code=0x7ffc0000 [ 659.511398][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.521151][ T30] audit: type=1326 audit(1753849745.146:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16126 comm="syz.0.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4b8e9a9 code=0x7ffc0000 [ 659.544640][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.556516][T16150] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2963'. [ 659.710945][T16159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2966'. [ 660.084085][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 660.093089][T16173] IPVS: Unknown mcast interface: vcan0 [ 661.842133][ T5896] usb 4-1: USB disconnect, device number 15 [ 664.524791][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 664.524809][ T30] audit: type=1326 audit(1753849751.756:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 664.612510][ T30] audit: type=1326 audit(1753849751.766:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 664.667114][ T30] audit: type=1326 audit(1753849751.856:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 664.690516][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.759344][ T30] audit: type=1326 audit(1753849751.856:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 664.942325][ T30] audit: type=1326 audit(1753849751.856:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 665.090676][ T30] audit: type=1326 audit(1753849751.856:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 665.153360][T16235] overlayfs: failed to resolve './file1': -2 [ 665.234760][ T30] audit: type=1326 audit(1753849751.856:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 665.258277][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.392563][ T30] audit: type=1326 audit(1753849751.856:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 665.691648][T16239] netlink: 'syz.3.2991': attribute type 3 has an invalid length. [ 665.699586][T16239] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2991'. [ 665.779556][ T30] audit: type=1326 audit(1753849751.856:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16222 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 667.490573][T16282] 9pnet_fd: Insufficient options for proto=fd [ 667.550725][T16286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3006'. [ 667.956201][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.972422][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 668.212587][ T5834] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 668.417635][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 668.469386][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 668.477714][ T5834] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 668.490961][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.501317][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 668.509384][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 668.536432][ T5834] pvrusb2: Hardware description: Terratec Grabster AV400 [ 668.551969][ T5834] pvrusb2: ********** [ 668.562955][ T5834] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 668.578415][T16296] lo speed is unknown, defaulting to 1000 [ 668.584615][ T5834] pvrusb2: Important functionality might not be entirely working. [ 668.594130][T16296] wg1 speed is unknown, defaulting to 1000 [ 668.689014][ T5834] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 668.759339][ T5834] pvrusb2: ********** [ 668.797443][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 669.308412][ T2335] pvrusb2: Invalid write control endpoint [ 669.321707][ T5834] usb 4-1: USB disconnect, device number 16 [ 669.354212][ T2335] pvrusb2: Invalid write control endpoint [ 669.366769][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 669.381307][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 669.389320][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 669.404050][ T2335] pvrusb2: Device being rendered inoperable [ 669.410195][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 669.421977][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 669.432870][ T2335] pvrusb2: Attached sub-driver cx25840 [ 669.438429][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 669.449261][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 669.573123][T16296] chnl_net:caif_netlink_parms(): no params data found [ 669.618257][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3015'. [ 669.722074][T16296] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.732526][T16296] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.739853][T16296] bridge_slave_0: entered allmulticast mode [ 669.747475][T16296] bridge_slave_0: entered promiscuous mode [ 669.755835][T16296] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.763192][T16296] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.770553][T16296] bridge_slave_1: entered allmulticast mode [ 669.778967][T16296] bridge_slave_1: entered promiscuous mode [ 669.846559][T16296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.864199][T16296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.897790][T16296] team0: Port device team_slave_0 added [ 669.906821][T16296] team0: Port device team_slave_1 added [ 670.202633][T16296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.271633][T16296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.376914][ T30] audit: type=1326 audit(1753849757.606:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc0d8e9a9 code=0x7ffc0000 [ 670.405650][T16296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.418349][T16296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.427891][ T30] audit: type=1326 audit(1753849757.606:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fc0d8e9a9 code=0x7ffc0000 [ 670.452463][T16296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.478365][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.485955][ T30] audit: type=1326 audit(1753849757.606:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc0d8e9a9 code=0x7ffc0000 [ 670.509403][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.517091][T16296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.529991][ T30] audit: type=1326 audit(1753849757.606:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fc0d8d310 code=0x7ffc0000 [ 670.582106][ T5831] Bluetooth: hci0: command tx timeout [ 670.651185][ T30] audit: type=1326 audit(1753849757.606:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc0d8e5ab code=0x7ffc0000 [ 670.674819][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.683494][T15548] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 670.712168][ T30] audit: type=1326 audit(1753849757.606:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc0d8e5ab code=0x7ffc0000 [ 670.737334][ T30] audit: type=1326 audit(1753849757.616:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc0d8e5ab code=0x7ffc0000 [ 670.765035][ T30] audit: type=1326 audit(1753849757.616:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc0d8e5ab code=0x7ffc0000 [ 670.793475][T16296] hsr_slave_0: entered promiscuous mode [ 670.799939][T16296] hsr_slave_1: entered promiscuous mode [ 670.807004][T16296] debugfs: 'hsr0' already exists in 'hsr' [ 670.813143][T16296] Cannot create hsr debugfs directory [ 670.829981][ T30] audit: type=1326 audit(1753849757.726:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc0d8e5ab code=0x7ffc0000 [ 670.863983][ T30] audit: type=1326 audit(1753849757.866:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16325 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fc0d8e5ab code=0x7ffc0000 [ 670.867451][T15548] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 670.901727][T15548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.923708][T15548] usb 4-1: config 0 descriptor?? [ 671.957397][T16296] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.996034][T16296] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.012399][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.019647][ C1] bridge0: topology change detected, propagating [ 672.026406][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.033640][ C1] bridge0: topology change detected, propagating [ 672.597781][T16296] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.650164][T16296] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.652407][ T5831] Bluetooth: hci0: command tx timeout [ 672.714675][T16365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3029'. [ 672.735237][T16296] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.745267][T16296] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.780094][T16365] SELinux: Context system_u:object_r:audisp_var_run_t:s0 is not valid (left unmapped). [ 672.798459][T16296] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.811550][T16296] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.898881][T16369] overlayfs: missing 'workdir' [ 673.134264][T16296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 673.149480][T16296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 673.163604][T16296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 673.176946][T16296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 673.257295][ T5883] IPVS: starting estimator thread 0... [ 673.352636][T16384] IPVS: using max 39 ests per chain, 93600 per kthread [ 673.362749][T16296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.396570][T16296] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.410841][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.418153][ T8469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.434863][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.442415][ T8443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.454342][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3035'. [ 673.779959][T15548] usb 4-1: Cannot set MAC address [ 673.807286][T15548] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 673.883964][T15548] usb 4-1: USB disconnect, device number 17 [ 674.039874][T16296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.133135][T16296] veth0_vlan: entered promiscuous mode [ 674.157688][T16296] veth1_vlan: entered promiscuous mode [ 674.305472][T16296] veth0_macvtap: entered promiscuous mode [ 674.320461][T16296] veth1_macvtap: entered promiscuous mode [ 674.893042][ T5831] Bluetooth: hci0: command tx timeout [ 674.893856][T15548] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 674.935644][T16415] bridge0: port 3(team0) entered blocking state [ 674.942045][T16415] bridge0: port 3(team0) entered disabled state [ 674.948466][T16415] team0: entered allmulticast mode [ 674.953851][T16415] C: entered allmulticast mode [ 674.958627][T16415] team_slave_1: entered allmulticast mode [ 674.964397][T16415] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 674.972683][T16415] team0: entered promiscuous mode [ 674.977718][T16415] C: entered promiscuous mode [ 674.982568][T16415] team_slave_1: entered promiscuous mode [ 674.988290][T16415] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 675.009413][T16296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.056581][T16296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.111500][T15548] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 675.201494][T16296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.216233][T15548] usb 4-1: config 0 has no interface number 0 [ 675.217346][T16296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.231285][T16296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.268246][T15548] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.272601][T16296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.316634][T15548] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.385675][T15548] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 675.424861][T15548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.441210][T15548] usb 4-1: config 0 descriptor?? [ 675.704059][ T8479] bridge_slave_1: left allmulticast mode [ 675.709861][ T8479] bridge_slave_1: left promiscuous mode [ 675.882481][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.011913][ T8479] bridge_slave_0: left allmulticast mode [ 676.018595][ T8479] bridge_slave_0: left promiscuous mode [ 676.040779][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.959885][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 676.959908][ T30] audit: type=1326 audit(1753849764.196:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 676.972352][ T5831] Bluetooth: hci0: command tx timeout [ 676.989756][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.010206][ T30] audit: type=1326 audit(1753849764.246:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 677.043605][ T30] audit: type=1326 audit(1753849764.276:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 677.083766][ T8479] bond3 (unregistering): (slave gretap1): Releasing active interface [ 677.106411][ T30] audit: type=1326 audit(1753849764.276:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 677.158927][ T30] audit: type=1326 audit(1753849764.276:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0375d8d310 code=0x7ffc0000 [ 677.188761][ T30] audit: type=1326 audit(1753849764.276:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 677.218963][ T30] audit: type=1326 audit(1753849764.276:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0375d8e5ab code=0x7ffc0000 [ 677.242354][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.254963][ T30] audit: type=1326 audit(1753849764.276:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 677.280905][ T30] audit: type=1326 audit(1753849764.276:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 677.337717][ T30] audit: type=1326 audit(1753849764.276:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16444 comm="syz.2.3045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0375d8e9a9 code=0x7ffc0000 [ 677.361224][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.540686][ T8479] team0: Port device bond0 removed [ 677.548019][ T8479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.559583][ T8479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.571256][ T8479] bond0 (unregistering): Released all slaves [ 677.671093][ T8479] bond1 (unregistering): Released all slaves [ 677.804329][ T8479] bond2 (unregistering): Released all slaves [ 677.975079][ T8479] bond3 (unregistering): Released all slaves [ 678.025866][T15548] usbhid 4-1:0.1: can't add hid device: -71 [ 678.032059][T15548] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 678.047274][T15548] usb 4-1: USB disconnect, device number 18 [ 678.238633][ T8455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.348872][ T8455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.971634][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.998851][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.634820][ T8479] hsr_slave_0: left promiscuous mode [ 679.738609][ T8479] hsr_slave_1: left promiscuous mode [ 679.750858][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.778917][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.806674][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.827993][ T8479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.900371][ T8479] veth1_macvtap: left promiscuous mode [ 679.917022][ T8479] veth0_macvtap: left promiscuous mode [ 680.042495][ T5896] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 680.085209][ T5883] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 680.216957][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 680.231768][T16490] xt_l2tp: missing protocol rule (udp|l2tpip) [ 680.242744][ T5896] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 680.255874][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 680.278205][ T5896] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 680.289992][ T5883] usb 1-1: not running at top speed; connect to a high speed hub [ 680.315561][ T5883] usb 1-1: config 8 has an invalid interface number: 24 but max is 0 [ 680.339513][ T5883] usb 1-1: config 8 has no interface number 0 [ 680.362443][ T5896] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 680.373657][ T5896] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 680.379686][ T5883] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 680.396322][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 680.406445][ T5896] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 680.428114][ T5896] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 680.456976][ T5883] usb 1-1: config 8 interface 24 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.460287][ T5896] usb 4-1: Product: syz [ 680.476513][ T5896] usb 4-1: Manufacturer: syz [ 680.487904][ T5883] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 680.487961][ T5896] usb 4-1: SerialNumber: syz [ 680.509408][ T5896] usb 4-1: config 0 descriptor?? [ 680.527380][ T5896] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 680.527613][ T5883] usb 1-1: config 8 interface 24 has no altsetting 0 [ 680.581278][ T5896] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 680.581429][ T5883] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 680.618135][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.632758][ T5883] usb 1-1: Product: syz [ 680.646761][ T5883] usb 1-1: Manufacturer: 薻ḍ懿펱༼柛庇喗䷆ⓥſ慪 [ 680.662616][ T5883] usb 1-1: SerialNumber: syz [ 680.676564][T16487] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 680.689837][T16487] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 680.981290][ T5896] usb 4-1: USB disconnect, device number 19 [ 681.034467][ T5896] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 681.425493][ T5883] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 681.471140][ T5883] usb 1-1: USB disconnect, device number 22 [ 681.667701][ T8479] team0 (unregistering): Port device team_slave_1 removed [ 682.294782][ T8479] team0 (unregistering): Port device team_slave_0 removed [ 682.316206][T16512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3063'. [ 683.207120][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 683.207135][ T30] audit: type=1400 audit(1753849770.446:1542): avc: denied { read } for pid=16520 comm="syz.0.3065" path="socket:[41991]" dev="sockfs" ino=41991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 683.615959][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3066'. [ 683.703918][T16525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.706252][T16526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3066'. [ 683.729157][T16525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.746246][T16525] batman_adv: batadv0: Removing interface: wlan0 [ 683.760854][T16525] bond0: (slave batadv0): Releasing backup interface [ 683.768051][T16525] batadv0 (unregistering): left allmulticast mode [ 684.704417][T16537] netlink: 'syz.2.3070': attribute type 4 has an invalid length. [ 684.712646][T16537] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3070'. [ 684.724411][T16537] : renamed from bond0 [ 685.052447][ T5831] Bluetooth: hci5: unexpected event 0x1d length: 36 > 5 [ 685.650819][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.674015][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.017322][ T30] audit: type=1400 audit(1753849773.256:1543): avc: denied { open } for pid=16557 comm="syz.3.3078" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 686.054421][T16558] netlink: 'syz.3.3078': attribute type 10 has an invalid length. [ 686.067898][T16558] syz_tun: entered promiscuous mode [ 686.081470][T16558] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 686.101388][T16560] /dev/nullb0: Can't lookup blockdev [ 686.469235][T16564] Invalid source name [ 686.482595][T16564] UBIFS error (pid: 16564): cannot open "ubifs", error -22 [ 686.607436][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 686.681363][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 686.709496][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 686.826440][T16577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.296790][T16612] raw_sendmsg: syz.2.3093 forgot to set AF_INET. Fix it! [ 688.409961][T16620] netlink: 'syz.1.3095': attribute type 153 has an invalid length. [ 689.804270][ T30] audit: type=1326 audit(1753849777.046:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16636 comm="syz.2.3100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0375d8e9a9 code=0x0 [ 690.923354][ T5831] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 690.932563][ T5831] Bluetooth: hci0: Injecting HCI hardware error event [ 690.943154][ T5836] Bluetooth: hci0: hardware error 0x00 [ 691.667154][ T5883] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 691.751621][T15355] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 691.767748][T15355] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 691.777218][T15355] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 691.788413][T15355] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 691.796573][T15355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 691.875777][T16667] lo speed is unknown, defaulting to 1000 [ 691.884030][T16667] wg1 speed is unknown, defaulting to 1000 [ 691.918765][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.055608][ T30] audit: type=1326 audit(1753849779.186:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 692.164497][T16672] lo speed is unknown, defaulting to 1000 [ 692.177906][T16672] wg1 speed is unknown, defaulting to 1000 [ 692.356721][ T30] audit: type=1326 audit(1753849779.186:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 692.360030][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 692.384380][ T30] audit: type=1326 audit(1753849779.186:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 692.419979][ T30] audit: type=1326 audit(1753849779.186:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 692.443446][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.450197][ T30] audit: type=1326 audit(1753849779.186:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 692.473655][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.481163][ T30] audit: type=1326 audit(1753849779.186:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 692.504570][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.537212][ T30] audit: type=1326 audit(1753849779.186:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 692.560886][ T30] audit: type=1326 audit(1753849779.186:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 692.586234][ T30] audit: type=1326 audit(1753849779.186:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.1.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f322158e9a9 code=0x7ffc0000 [ 692.609681][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.622297][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 692.661266][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 692.693122][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 692.723462][ T5883] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 692.732983][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 692.741094][ T5883] usb 4-1: Product: syz [ 692.745416][ T5883] usb 4-1: Manufacturer: syz [ 692.750035][ T5883] usb 4-1: SerialNumber: syz [ 692.757855][ T5883] usb 4-1: config 0 descriptor?? [ 692.841441][T16667] chnl_net:caif_netlink_parms(): no params data found [ 692.866936][ T8455] team0: left allmulticast mode [ 692.873949][ T8455] C: left allmulticast mode [ 692.878823][ T8455] team_slave_1: left allmulticast mode [ 692.885580][ T8455] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 692.893388][ T8455] team0: left promiscuous mode [ 692.932322][ T5910] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 692.976129][ T8455] C: left promiscuous mode [ 692.981537][ T8455] team_slave_1: left promiscuous mode [ 692.989937][ T8455] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 692.998310][ T8455] bridge0: port 3(team0) entered disabled state [ 693.007368][ T8455] bridge_slave_1: left allmulticast mode [ 693.013293][ T8455] bridge_slave_1: left promiscuous mode [ 693.019128][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.021537][ T5883] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 693.040338][ T8455] bridge_slave_0: left allmulticast mode [ 693.046166][ T8455] bridge_slave_0: left promiscuous mode [ 693.053408][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.212599][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 693.443233][ T5883] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 693.461601][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 693.470613][ T5910] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 210, changing to 11 [ 693.481990][ T5910] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.497876][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 693.508623][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 693.517214][ T5910] usb 1-1: Product: syz [ 693.521476][ T5910] usb 1-1: Manufacturer: syz [ 693.526177][ T5910] usb 1-1: SerialNumber: syz [ 693.537750][ T5910] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 693.553866][ T8455] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 693.754400][ T974] usb 1-1: USB disconnect, device number 23 [ 693.785506][ T974] appletouch 1-1:1.0: input: appletouch disconnected [ 693.852373][ T5836] Bluetooth: hci1: command tx timeout [ 694.069164][ T5883] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 694.081660][ T5883] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 694.099777][ T5883] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 694.174958][ T8455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.185931][ T8455] bond_slave_0: left allmulticast mode [ 694.192148][ T8455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.202080][ T8455] bond_slave_1: left allmulticast mode [ 694.207839][ T8455] bond0 (unregistering): Released all slaves [ 694.287465][ T8455] bond1 (unregistering): Released all slaves [ 694.305549][ T8455] bond2 (unregistering): Released all slaves [ 694.396527][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3116'. [ 694.570227][ T5883] usb 4-1: USB disconnect, device number 20 [ 695.105418][T16711] TCP: TCP_TX_DELAY enabled [ 695.369463][T16667] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.376899][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.385494][T16667] bridge_slave_0: entered allmulticast mode [ 695.392369][T16667] bridge_slave_0: entered promiscuous mode [ 695.425563][T16667] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.445684][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.464985][T16667] bridge_slave_1: entered allmulticast mode [ 695.478813][T16667] bridge_slave_1: entered promiscuous mode [ 695.541656][ T8455] [ 695.544041][ T8455] ====================================================== [ 695.551058][ T8455] WARNING: possible circular locking dependency detected [ 695.558085][ T8455] 6.16.0-syzkaller-00857-gced1b9e0392d #0 Not tainted [ 695.564844][ T8455] ------------------------------------------------------ [ 695.571860][ T8455] kworker/u8:38/8455 is trying to acquire lock: [ 695.578097][ T8455] ffff88803421ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x31/0x1b0 [ 695.587706][ T8455] [ 695.587706][ T8455] but task is already holding lock: [ 695.595075][ T8455] ffff888029728768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf0/0x720 [ 695.605358][ T8455] [ 695.605358][ T8455] which lock already depends on the new lock. [ 695.605358][ T8455] [ 695.615767][ T8455] [ 695.615767][ T8455] the existing dependency chain (in reverse order) is: [ 695.624770][ T8455] [ 695.624770][ T8455] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 695.632490][ T8455] __mutex_lock+0x199/0xb90 [ 695.637507][ T8455] ieee80211_open+0x132/0x210 [ 695.642692][ T8455] __dev_open+0x2e7/0x7d0 [ 695.647531][ T8455] netif_open+0xf2/0x160 [ 695.652285][ T8455] dev_open+0xb2/0x260 [ 695.656898][ T8455] team_add_slave+0xaf0/0x21a0 [ 695.662188][ T8455] do_set_master+0x40c/0x730 [ 695.667301][ T8455] do_setlink.constprop.0+0xbd8/0x4380 [ 695.673272][ T8455] rtnl_newlink+0x1446/0x2000 [ 695.678456][ T8455] rtnetlink_rcv_msg+0x95b/0xe90 [ 695.683898][ T8455] netlink_rcv_skb+0x155/0x420 [ 695.689171][ T8455] netlink_unicast+0x58d/0x850 [ 695.694448][ T8455] netlink_sendmsg+0x8d1/0xdd0 [ 695.699720][ T8455] ____sys_sendmsg+0xa95/0xc70 [ 695.704994][ T8455] ___sys_sendmsg+0x134/0x1d0 [ 695.710173][ T8455] __sys_sendmsg+0x16d/0x220 [ 695.715268][ T8455] do_syscall_64+0xcd/0x4c0 [ 695.720309][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.726723][ T8455] [ 695.726723][ T8455] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 695.734880][ T8455] __lock_acquire+0x126f/0x1c90 [ 695.740242][ T8455] lock_acquire+0x179/0x350 [ 695.745251][ T8455] __mutex_lock+0x199/0xb90 [ 695.750260][ T8455] team_del_slave+0x31/0x1b0 [ 695.755356][ T8455] team_device_event+0xd0/0x770 [ 695.760713][ T8455] notifier_call_chain+0xbc/0x410 [ 695.766244][ T8455] call_netdevice_notifiers_info+0xbe/0x140 [ 695.772653][ T8455] unregister_netdevice_many_notify+0xf9d/0x2700 [ 695.779490][ T8455] unregister_netdevice_queue+0x305/0x3f0 [ 695.785717][ T8455] _cfg80211_unregister_wdev+0x64b/0x830 [ 695.791873][ T8455] ieee80211_remove_interfaces+0x34e/0x720 [ 695.798190][ T8455] ieee80211_unregister_hw+0x55/0x3a0 [ 695.804074][ T8455] hwsim_exit_net+0x3ac/0x7d0 [ 695.809277][ T8455] ops_undo_list+0x2eb/0xab0 [ 695.814375][ T8455] cleanup_net+0x408/0x890 [ 695.819297][ T8455] process_one_work+0x9cc/0x1b70 [ 695.824762][ T8455] worker_thread+0x6c8/0xf10 [ 695.829857][ T8455] kthread+0x3c5/0x780 [ 695.834431][ T8455] ret_from_fork+0x5d4/0x6f0 [ 695.839527][ T8455] ret_from_fork_asm+0x1a/0x30 [ 695.844800][ T8455] [ 695.844800][ T8455] other info that might help us debug this: [ 695.844800][ T8455] [ 695.855008][ T8455] Possible unsafe locking scenario: [ 695.855008][ T8455] [ 695.862437][ T8455] CPU0 CPU1 [ 695.867782][ T8455] ---- ---- [ 695.873126][ T8455] lock(&rdev->wiphy.mtx); [ 695.877612][ T8455] lock(team->team_lock_key#2); [ 695.885055][ T8455] lock(&rdev->wiphy.mtx); [ 695.892058][ T8455] lock(team->team_lock_key#2); [ 695.896994][ T8455] [ 695.896994][ T8455] *** DEADLOCK *** [ 695.896994][ T8455] [ 695.905122][ T8455] 5 locks held by kworker/u8:38/8455: [ 695.910498][ T8455] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 695.920846][ T8455] #1: ffffc90003207d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 695.930751][ T8455] #2: ffffffff9034add0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 695.940050][ T8455] #3: ffffffff90360e28 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x3a0 [ 695.949887][ T8455] #4: ffff888029728768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf0/0x720 [ 695.960572][ T8455] [ 695.960572][ T8455] stack backtrace: [ 695.966450][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: kworker/u8:38 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 695.966469][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 695.966479][ T8455] Workqueue: netns cleanup_net [ 695.966501][ T8455] Call Trace: [ 695.966507][ T8455] [ 695.966512][ T8455] dump_stack_lvl+0x116/0x1f0 [ 695.966531][ T8455] print_circular_bug+0x275/0x350 [ 695.966545][ T8455] check_noncircular+0x14c/0x170 [ 695.966558][ T8455] ? __pfx___up_read+0x10/0x10 [ 695.966575][ T8455] __lock_acquire+0x126f/0x1c90 [ 695.966591][ T8455] lock_acquire+0x179/0x350 [ 695.966603][ T8455] ? team_del_slave+0x31/0x1b0 [ 695.966624][ T8455] ? __pfx___might_resched+0x10/0x10 [ 695.966642][ T8455] ? __pfx___mutex_trylock_common+0x10/0x10 [ 695.966657][ T8455] __mutex_lock+0x199/0xb90 [ 695.966675][ T8455] ? team_del_slave+0x31/0x1b0 [ 695.966693][ T8455] ? team_del_slave+0x31/0x1b0 [ 695.966711][ T8455] ? xsk_notifier+0x167/0x280 [ 695.966722][ T8455] ? __pfx___mutex_lock+0x10/0x10 [ 695.966741][ T8455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.966758][ T8455] ? rt_flush_dev+0x480/0x6a0 [ 695.966775][ T8455] ? team_del_slave+0x31/0x1b0 [ 695.966792][ T8455] team_del_slave+0x31/0x1b0 [ 695.966811][ T8455] team_device_event+0xd0/0x770 [ 695.966830][ T8455] notifier_call_chain+0xbc/0x410 [ 695.966850][ T8455] ? __pfx_team_device_event+0x10/0x10 [ 695.966870][ T8455] call_netdevice_notifiers_info+0xbe/0x140 [ 695.966891][ T8455] unregister_netdevice_many_notify+0xf9d/0x2700 [ 695.966913][ T8455] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 695.966936][ T8455] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 695.966952][ T8455] ? find_held_lock+0x2b/0x80 [ 695.966970][ T8455] unregister_netdevice_queue+0x305/0x3f0 [ 695.966992][ T8455] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 695.967013][ T8455] _cfg80211_unregister_wdev+0x64b/0x830 [ 695.967036][ T8455] ieee80211_remove_interfaces+0x34e/0x720 [ 695.967052][ T8455] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 695.967070][ T8455] ieee80211_unregister_hw+0x55/0x3a0 [ 695.967090][ T8455] hwsim_exit_net+0x3ac/0x7d0 [ 695.967105][ T8455] ? __pfx_hwsim_exit_net+0x10/0x10 [ 695.967118][ T8455] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 695.967137][ T8455] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 695.967154][ T8455] ? __pfx_hwsim_exit_net+0x10/0x10 [ 695.967167][ T8455] ops_undo_list+0x2eb/0xab0 [ 695.967186][ T8455] ? __pfx_ops_undo_list+0x10/0x10 [ 695.967203][ T8455] ? __local_bh_enable_ip+0xa4/0x120 [ 695.967221][ T8455] cleanup_net+0x408/0x890 [ 695.967239][ T8455] ? __pfx_cleanup_net+0x10/0x10 [ 695.967258][ T8455] ? rcu_is_watching+0x12/0xc0 [ 695.967276][ T8455] process_one_work+0x9cc/0x1b70 [ 695.967294][ T8455] ? __pfx_process_one_work+0x10/0x10 [ 695.967311][ T8455] ? assign_work+0x1a0/0x250 [ 695.967324][ T8455] worker_thread+0x6c8/0xf10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 695.967342][ T8455] ? __pfx_worker_thread+0x10/0x10 [ 695.967356][ T8455] kthread+0x3c5/0x780 [ 695.967369][ T8455] ? __pfx_kthread+0x10/0x10 [ 695.967382][ T8455] ? rcu_is_watching+0x12/0xc0 [ 695.967399][ T8455] ? __pfx_kthread+0x10/0x10 [ 695.967412][ T8455] ret_from_fork+0x5d4/0x6f0 [ 695.967424][ T8455] ? __pfx_kthread+0x10/0x10 [ 695.967436][ T8455] ret_from_fork_asm+0x1a/0x30 [ 695.967455][ T8455] [ 696.299895][ T5836] Bluetooth: hci1: command tx timeout [ 696.380990][ T8455] team0: Port device wlan1 removed [ 697.014245][ T8455] hsr_slave_0: left promiscuous mode [ 697.243615][ T8455] team0 (unregistering): Port device team_slave_1 removed [ 697.270369][ T8455] team0 (unregistering): Port device C removed [ 697.714686][T16712] bond0: (slave syz_tun): Releasing backup interface