last executing test programs: 6m10.262797288s ago: executing program 3 (id=846): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x8050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x9}, 0x8) 6m10.076560919s ago: executing program 3 (id=849): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x5e, 0xcf, 0x98, 0x40, 0x12d1, 0x142f, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x56, 0xf, 0x0, 0xff, 0x2, 0x6f, 0x8}}]}}]}}, 0x0) socket$inet(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6m6.425342075s ago: executing program 3 (id=857): syz_io_uring_setup(0x81d, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000001c0)="8f00000014006b05c84e21000ab16d8b230675f802000000040002005817530461bc24eeb556a705251e6182149a36c23d3b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500"], 0xc8) ptrace(0x10, 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r5, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xb0, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7635}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0xb0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @private2, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) sendfile(r6, r6, 0x0, 0x6) 6m2.727301929s ago: executing program 3 (id=861): r0 = eventfd2(0x76, 0x1) epoll_create1(0x80000) read$eventfd(r0, &(0x7f0000000080), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x2, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c) getresgid(0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 6m0.644886002s ago: executing program 3 (id=867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x2, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xf, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xfff, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bf, 0x5, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30f, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0xd, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x4, 0x408, 0x8000, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xb25, 0x20000008, 0x4, 0x6d01, 0x5, 0x2, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x8005, 0x9, 0xac8, 0xa, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x8, 0x2, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x5, 0xfffffff9, 0xffff, 0x2000a620, 0x8, 0x5, 0x4, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000007, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x4a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @func={0xd, 0x0, 0x0, 0xc, 0x2}]}}, &(0x7f0000000680)=""/229, 0x32, 0xe5, 0x1, 0x0, 0x0, @void, @value}, 0x28) 5m59.703765062s ago: executing program 3 (id=870): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close(r3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000009c0)=""/225, 0x4}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) ioctl(r4, 0xd, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x204000000) mkdir(&(0x7f0000000000)='./mnt\x00', 0x10a) 5m44.508837063s ago: executing program 32 (id=870): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close(r3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000009c0)=""/225, 0x4}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) ioctl(r4, 0xd, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x204000000) mkdir(&(0x7f0000000000)='./mnt\x00', 0x10a) 18.012929676s ago: executing program 5 (id=1711): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x15}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x5) 13.835305952s ago: executing program 5 (id=1718): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, &(0x7f0000001880), 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) 13.439056171s ago: executing program 5 (id=1719): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair(0x23, 0x80009, 0x88, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b00"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0xcb23c9c9931e99e9, 0x70bd2c, 0x0, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12.89951829s ago: executing program 1 (id=1723): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1e, 0x1, 0x0) r1 = epoll_create(0x10000e9) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 11.873010702s ago: executing program 1 (id=1725): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r3, 0x0, 0x0, 0x80800) close(r3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd04", 0xe, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x8001) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) 10.871291866s ago: executing program 2 (id=1727): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/64, 0x40) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.529218826s ago: executing program 0 (id=1730): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, &(0x7f0000001880), 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) 8.517003827s ago: executing program 1 (id=1731): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r4) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00'}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x9, 0x8001, 0x7, 0x6, 0x9}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x24, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33976a3f6fe6e98a3d70"}, &(0x7f0000000200)=0x2c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206fe"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x8050) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000280)={r7, 0xa508}, &(0x7f0000000340)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ae3000/0x2000)=nil, 0x2000, 0x3) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 8.493584926s ago: executing program 2 (id=1732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001"], 0x34}}, 0x84) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x0, 0x4000014) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0x1000a, 0x4) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 7.523326383s ago: executing program 0 (id=1734): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x554, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x540, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x4d0, 0x2, 0x0, 0x0, {{0xb}, {0x4a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0xffff, 0x2, 0x101, 0x7, 0x6, 0x1, 0x8, 0x8, 0x3, 0x5, 0x4b, 0x7, 0x9, 0x4f2, 0x200, 0xff, 0x8, 0x8, 0x1, 0x9, 0x4, 0xa, 0xfff, 0xafa, 0x7, 0x5, 0x168, 0x5, 0x9b, 0x2, 0x9, 0xf8, 0x1, 0xa8fc, 0x1ff, 0x1, 0x6, 0xb7, 0x1, 0x6, 0xf8, 0x7, 0x2000, 0x6, 0x1, 0xe, 0x4, 0xa661, 0x1, 0xfffffffa, 0xd60d, 0x2199, 0x3, 0x3, 0x3, 0xa, 0x81, 0x5, 0xc8e7, 0x7, 0x80000000, 0xff9d667, 0x7f, 0x8000, 0x7fffffff, 0x2, 0x7, 0x9, 0x4, 0x7fff, 0xa, 0xfffffffd, 0xd1, 0x5a, 0xaba, 0x8, 0x1000, 0x10, 0x2, 0xe, 0x800, 0xc00, 0x8000, 0x5, 0x7, 0xf24f, 0x0, 0x5, 0x8, 0x9, 0x3, 0x6, 0x5, 0x8, 0x6, 0x8, 0x9, 0x100, 0x81, 0x4, 0x1000, 0x2, 0x80000001, 0x9, 0x8, 0x5, 0x8, 0xe8e, 0x1, 0x7, 0x4, 0xfff, 0xb, 0x8, 0x2, 0x7f, 0x9, 0xa, 0x48, 0x9, 0x9, 0x8001, 0x6, 0x7, 0x1, 0x3, 0xa68e, 0x10, 0x5, 0xa2, 0x40, 0x1, 0x6fb88d20, 0x4, 0xffffff23, 0x5, 0x1ff, 0x9, 0x1, 0xd, 0x8000, 0x4, 0x100, 0x3ff, 0x7, 0x9f43, 0xfff, 0x953c, 0x9, 0x6d9, 0xc3ce, 0x5, 0x9, 0x3, 0x1ff, 0x28c, 0x401, 0x0, 0x3ff, 0x1, 0xb, 0xfff, 0x0, 0x8001, 0x4268, 0x1, 0x2020, 0x2, 0x2, 0x0, 0x80, 0xfffffc01, 0xffff, 0x8, 0x5, 0x1, 0x1, 0xf6f, 0x18, 0xfffffff7, 0x5, 0x0, 0x8, 0x1, 0x200, 0xd, 0x6, 0x1, 0x4, 0x0, 0x401, 0xda, 0x8, 0xfffff801, 0x7fff, 0x1, 0x400, 0x7, 0xfffffffc, 0x8, 0x3, 0x2, 0xef, 0x80, 0x27a6, 0x8, 0xffffffff, 0xfffffff9, 0x1, 0x1, 0x5, 0xf8, 0x5, 0x4, 0x3, 0x2, 0x5, 0x10000, 0x84, 0xfffff8f2, 0x7, 0x7, 0x7, 0xd, 0x6, 0x3, 0x1ff, 0xfffffffa, 0xb98, 0xf, 0xffff000, 0x3, 0x7, 0x7, 0x4, 0x76e9, 0x2baf, 0x9, 0x3, 0xfffffffa, 0x10000, 0x1ff, 0x8, 0x78a, 0x80, 0x1, 0x1, 0xfffffff9, 0x0, 0xbf51, 0x30000, 0x5, 0x3, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x1, 0xf40, 0x0, 0x16a3, {0x0, 0x1, 0x2, 0x1, 0x8, 0x6}, {0x1, 0x2, 0x4, 0x6, 0x1, 0xd17}, 0xffff58ba, 0x6, 0x8001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7cfd}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x554}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') 6.550477941s ago: executing program 4 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) 6.215586064s ago: executing program 1 (id=1736): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 5.256643213s ago: executing program 5 (id=1737): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 5.210311319s ago: executing program 0 (id=1738): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc01c7c02, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="3663ff3ac7333d1d", 0x8}, {&(0x7f0000000280)="e02584eeb69ae6b342b68d8be5414b8bad9da292edc320246d439cbe99d5435fcc9f629a115737e05b", 0x29}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x2004001) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r6, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0x41}]) socket$alg(0x26, 0x5, 0x0) 5.20157131s ago: executing program 4 (id=1739): socket(0x2a, 0x5, 0xf7f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xffffffffffffff33, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) io_setup(0x40000000008, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x8444, 0x13580}, &(0x7f0000000100), &(0x7f0000000140)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000000)=0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x44, 0x0, &(0x7f00000015c0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000500)="844beea1"}) io_uring_enter(r3, 0xe85, 0x0, 0x0, 0x0, 0x0) 4.809386927s ago: executing program 1 (id=1740): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12d302, 0x0) mmap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x40005) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x10}}, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x1, @rand_addr=0x64010100}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000c2f6c6823a22e4009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf256f00000008000300", @ANYRES32=r10], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x80) 4.778337531s ago: executing program 2 (id=1741): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x554, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x540, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x4d0, 0x2, 0x0, 0x0, {{0xb}, {0x4a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0xffff, 0x2, 0x101, 0x7, 0x6, 0x1, 0x8, 0x8, 0x3, 0x5, 0x4b, 0x7, 0x9, 0x4f2, 0x200, 0xff, 0x8, 0x8, 0x1, 0x9, 0x4, 0xa, 0xfff, 0xafa, 0x7, 0x5, 0x168, 0x5, 0x9b, 0x2, 0x9, 0xf8, 0x1, 0xa8fc, 0x1ff, 0x1, 0x6, 0xb7, 0x1, 0x6, 0xf8, 0x7, 0x2000, 0x6, 0x1, 0xe, 0x4, 0xa661, 0x1, 0xfffffffa, 0xd60d, 0x2199, 0x3, 0x3, 0x3, 0xa, 0x81, 0x5, 0xc8e7, 0x7, 0x80000000, 0xff9d667, 0x7f, 0x8000, 0x7fffffff, 0x2, 0x7, 0x9, 0x4, 0x7fff, 0xa, 0xfffffffd, 0xd1, 0x5a, 0xaba, 0x8, 0x1000, 0x10, 0x2, 0xe, 0x800, 0xc00, 0x8000, 0x5, 0x7, 0xf24f, 0x0, 0x5, 0x8, 0x9, 0x3, 0x6, 0x5, 0x8, 0x6, 0x8, 0x9, 0x100, 0x81, 0x4, 0x1000, 0x2, 0x80000001, 0x9, 0x8, 0x5, 0x8, 0xe8e, 0x1, 0x7, 0x4, 0xfff, 0xb, 0x8, 0x2, 0x7f, 0x9, 0xa, 0x48, 0x9, 0x9, 0x8001, 0x6, 0x7, 0x1, 0x3, 0xa68e, 0x10, 0x5, 0xa2, 0x40, 0x1, 0x6fb88d20, 0x4, 0xffffff23, 0x5, 0x1ff, 0x9, 0x1, 0xd, 0x8000, 0x4, 0x100, 0x3ff, 0x7, 0x9f43, 0xfff, 0x953c, 0x9, 0x6d9, 0xc3ce, 0x5, 0x9, 0x3, 0x1ff, 0x28c, 0x401, 0x0, 0x3ff, 0x1, 0xb, 0xfff, 0x0, 0x8001, 0x4268, 0x1, 0x2020, 0x2, 0x2, 0x0, 0x80, 0xfffffc01, 0xffff, 0x8, 0x5, 0x1, 0x1, 0xf6f, 0x18, 0xfffffff7, 0x5, 0x0, 0x8, 0x1, 0x200, 0xd, 0x6, 0x1, 0x4, 0x0, 0x401, 0xda, 0x8, 0xfffff801, 0x7fff, 0x1, 0x400, 0x7, 0xfffffffc, 0x8, 0x3, 0x2, 0xef, 0x80, 0x27a6, 0x8, 0xffffffff, 0xfffffff9, 0x1, 0x1, 0x5, 0xf8, 0x5, 0x4, 0x3, 0x2, 0x5, 0x10000, 0x84, 0xfffff8f2, 0x7, 0x7, 0x7, 0xd, 0x6, 0x3, 0x1ff, 0xfffffffa, 0xb98, 0xf, 0xffff000, 0x3, 0x7, 0x7, 0x4, 0x76e9, 0x2baf, 0x9, 0x3, 0xfffffffa, 0x10000, 0x1ff, 0x8, 0x78a, 0x80, 0x1, 0x1, 0xfffffff9, 0x0, 0xbf51, 0x30000, 0x5, 0x3, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x1, 0xf40, 0x0, 0x16a3, {0x0, 0x1, 0x2, 0x1, 0x8, 0x6}, {0x1, 0x2, 0x4, 0x6, 0x1, 0xd17}, 0xffff58ba, 0x6, 0x8001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7cfd}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x554}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') 4.160545215s ago: executing program 0 (id=1742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4070bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044048}, 0x20004804) 4.019648904s ago: executing program 4 (id=1743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.503494295s ago: executing program 2 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x97) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) syz_emit_ethernet(0x306, &(0x7f0000000a40)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2d0, 0x3a, 0x0, @remote, @local, {[@hopopts={0x4, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x10, {0x1, 0x2, 0x80, 0x1, [0x7]}}, @generic={0xc, 0x2b, "2d7fbfa01387dd83b926068210b5565b0c0ab7d7fa958986f83ed986ef16e75b4604403840fd93d025a927"}, @jumbo={0xc2, 0x4, 0x28}, @calipso={0x7, 0x48, {0x3, 0x10, 0xe, 0x4, [0xc, 0x10001, 0x899e, 0xfffffffffffffbff, 0x20000000, 0x8, 0x6, 0x800]}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1}]}, @routing={0x11, 0x2, 0x1, 0x10, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}, @dstopts={0xf3, 0x26, '\x00', [@generic={0x14, 0x3c, "7006567cb1b9af1ccaa4c621bc4bf8b96f6699fa26963ec488270c3c7cd4fc3e5afe687fe07e54202f904c48129e24dd81b8df8716409948fccdf78d"}, @ra={0x5, 0x2, 0xfff8}, @calipso={0x7, 0x10, {0x3, 0x2, 0xe, 0x3, [0x100]}}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x8, 0x7, [0x7, 0x126, 0x8, 0x8000000000000001, 0x8]}}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x58, {0x3, 0x14, 0x9, 0xeb6d, [0x9, 0x8d, 0xf, 0x9, 0x3, 0x4, 0x3, 0x9, 0x2, 0x3]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x7, 0x4, [0x92, 0x200, 0x0, 0xd376, 0x5, 0x9, 0x51ae, 0x3]}}, @enc_lim, @generic={0x5}]}, @hopopts={0x6c}, @fragment={0x6, 0x0, 0x9, 0x1, 0x0, 0x8, 0x64}, @hopopts={0x2b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x5, 0x8, [0x6, 0x2, 0x5b, 0x4, 0x200]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @routing={0x32, 0x6, 0x1, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @local, [@hopopts={0x2b, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="380100001a00010000f70000fddbdf25fc02580000f4ffffffffffffff0000000000000000000000000000000000000040080006000300030000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003300000000000000000000000000ffffe0000002fffffffffffffffffdffffffffffffff000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004800010073686132353600"/237], 0x138}}, 0x20000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RREADDIR(r6, &(0x7f0000000580)={0xce, 0x29, 0x1, {0x7fff, [{{0x2, 0x3}, 0x6, 0x10, 0x7, './file1'}, {{0x0, 0x2, 0x5}, 0x810, 0x4, 0x10, './file0/../file1'}, {{0x10, 0x3}, 0x1, 0x7, 0x7, './file1'}, {{0x2, 0x4, 0x1}, 0x5, 0x10, 0x7, './file0'}, {{0x40, 0x0, 0x2}, 0x80000000, 0x1, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x1, 0x96, 0x7, './file1'}]}}, 0xce) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 3.491631031s ago: executing program 4 (id=1745): syz_io_uring_setup(0x81d, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000001c0)="8f00000014006b05c84e21000ab16d8b230675f802000000040002005817530461bc24eeb556a705251e6182149a36c23d3b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500"], 0xc8) ptrace(0x10, 0x1) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xb0, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7635}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0xb0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @private2, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) sendfile(r7, r7, 0x0, 0x6) 3.437355741s ago: executing program 0 (id=1746): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create(0x10000e9) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 2.233190193s ago: executing program 2 (id=1747): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000180), 0x10000000000201, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr=0x9}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x9c) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0x7fffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) 1.805616128s ago: executing program 5 (id=1748): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12d302, 0x0) mmap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x40005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x10}}, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x1, @rand_addr=0x64010100}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000c2f6c6823a22e4009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf256f00000008000300", @ANYRES32=r10], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.802636239s ago: executing program 4 (id=1749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14}}, 0x6c}}, 0x0) 1.569993643s ago: executing program 0 (id=1750): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 954.957871ms ago: executing program 1 (id=1751): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001"], 0x34}}, 0x84) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x0, 0x4000014) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0x1000a, 0x4) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) 923.550699ms ago: executing program 4 (id=1752): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00'}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x9, 0x8001, 0x7, 0x6, 0x9}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x24, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33976a3f6fe6e98a3d70"}, &(0x7f0000000200)=0x2c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206fe"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x8050) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000280)={r7, 0xa508}, &(0x7f0000000340)=0x8) madvise(&(0x7f0000ae3000/0x2000)=nil, 0x2000, 0x3) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 850.074842ms ago: executing program 5 (id=1753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000, 0x0, 0x0, 0xa}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 0s ago: executing program 2 (id=1754): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1e, 0x1, 0x0) r1 = epoll_create(0x10000e9) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): ntext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 361.231914][ T990] bridge_slave_0: left promiscuous mode [ 361.263059][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.291071][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.311059][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.441448][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.459318][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.479467][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.601719][ T8464] netlink: 84 bytes leftover after parsing attributes in process `syz.4.685'. [ 362.004056][ T30] audit: type=1400 audit(2000000103.539:281): avc: denied { read } for pid=8465 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.103831][ T30] audit: type=1400 audit(2000000103.539:282): avc: denied { open } for pid=8465 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.328431][ T990] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 362.372546][ T990] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - d6:bc:07:47:25:22 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 362.585482][ T30] audit: type=1400 audit(2000000103.539:283): avc: denied { getattr } for pid=8465 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.713180][ T30] audit: type=1400 audit(2000000104.019:284): avc: denied { write } for pid=8463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.321232][ T8480] 9pnet_virtio: no channels available for device syz [ 363.696029][ T30] audit: type=1400 audit(2000000104.019:285): avc: denied { add_name } for pid=8463 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.718964][ T30] audit: type=1400 audit(2000000104.019:286): avc: denied { create } for pid=8463 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 363.804293][ T5126] Bluetooth: hci1: command tx timeout [ 363.916032][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.635441][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.085115][ T990] bond0 (unregistering): Released all slaves [ 365.227488][ T8494] netlink: 84 bytes leftover after parsing attributes in process `syz.3.690'. [ 365.616414][ T990] bond1 (unregistering): (slave veth5): Releasing backup interface [ 365.633314][ T990] bond1 (unregistering): Released all slaves [ 365.860585][ T5126] Bluetooth: hci1: command tx timeout [ 365.899792][ T8498] vlan3: entered promiscuous mode [ 365.906576][ T8498] vlan3: entered allmulticast mode [ 365.911895][ T8498] hsr_slave_1: entered allmulticast mode [ 365.968846][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 366.519357][ T8504] kvm: kvm [8499]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 366.539972][ T8504] kvm: kvm [8499]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 366.555895][ T8504] kvm: kvm [8499]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 366.676733][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 366.676747][ T30] audit: type=1400 audit(2000000108.179:291): avc: denied { read } for pid=8495 comm="syz.2.691" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.710634][ T30] audit: type=1400 audit(2000000108.189:292): avc: denied { open } for pid=8495 comm="syz.2.691" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.877040][ T8513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.890454][ T30] audit: type=1400 audit(2000000108.409:293): avc: denied { ioctl } for pid=8495 comm="syz.2.691" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.122871][ T30] audit: type=1400 audit(2000000108.409:294): avc: denied { ioctl } for pid=8495 comm="syz.2.691" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.359703][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 367.379696][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 367.393864][ T8523] netlink: 'syz.4.695': attribute type 5 has an invalid length. [ 367.422892][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.695'. [ 367.920565][ T990] hsr_slave_0: left promiscuous mode [ 367.942393][ T990] hsr_slave_1: left promiscuous mode [ 367.964357][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.004180][ T5126] Bluetooth: hci1: command tx timeout [ 368.042107][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.212257][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.240443][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.487354][ T990] veth1_macvtap: left promiscuous mode [ 369.495143][ T990] veth0_macvtap: left promiscuous mode [ 369.502281][ T990] veth1_vlan: left promiscuous mode [ 369.507726][ T990] veth0_vlan: left promiscuous mode [ 370.040579][ T5126] Bluetooth: hci1: command tx timeout [ 371.179065][ T8523] geneve3: entered promiscuous mode [ 371.187016][ T8523] geneve3: entered allmulticast mode [ 371.768373][ T8576] 9pnet_virtio: no channels available for device syz [ 372.280764][ T30] audit: type=1400 audit(2000000113.819:295): avc: denied { write } for pid=8574 comm="syz.4.708" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 372.397555][ T8458] chnl_net:caif_netlink_parms(): no params data found [ 372.600579][ T5859] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 372.646932][ T8591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 372.778030][ T30] audit: type=1400 audit(2000000114.309:296): avc: denied { ioctl } for pid=8589 comm="syz.1.712" path="socket:[16480]" dev="sockfs" ino=16480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 372.927805][ T8598] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 372.936720][ T8598] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 372.948529][ T8598] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 373.304612][ T5859] usb 5-1: config 2 has an invalid interface number: 86 but max is 0 [ 373.321091][ T5859] usb 5-1: config 2 has no interface number 0 [ 373.332059][ T5859] usb 5-1: config 2 interface 86 has no altsetting 0 [ 373.340623][ T5859] usb 5-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 373.351941][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.360067][ T5859] usb 5-1: Product: syz [ 373.369546][ T5859] usb 5-1: Manufacturer: syz [ 373.377946][ T5859] usb 5-1: SerialNumber: syz [ 373.518196][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.532926][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.543755][ T8458] bridge_slave_0: entered allmulticast mode [ 373.562758][ T8458] bridge_slave_0: entered promiscuous mode [ 373.601250][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.621103][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.628354][ T8458] bridge_slave_1: entered allmulticast mode [ 373.630749][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 373.643304][ T8603] netlink: 'syz.3.710': attribute type 5 has an invalid length. [ 373.659115][ T8603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.710'. [ 373.674624][ T8458] bridge_slave_1: entered promiscuous mode [ 373.697827][ T5859] usb-storage 5-1:2.86: USB Mass Storage device detected [ 373.972604][ T5859] option 5-1:2.86: GSM modem (1-port) converter detected [ 374.005536][ T8458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.007626][ T5859] usb 5-1: USB disconnect, device number 9 [ 374.028414][ T5859] option 5-1:2.86: device disconnected [ 374.276046][ T8458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.957999][ T8634] overlayfs: missing 'workdir' [ 375.726058][ T8458] team0: Port device team_slave_0 added [ 375.736807][ T8641] tipc: Started in network mode [ 375.743421][ T8641] tipc: Node identity 6, cluster identity 4711 [ 375.749782][ T8641] tipc: Node number set to 6 [ 375.792075][ T8458] team0: Port device team_slave_1 added [ 375.890006][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.902534][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.965760][ T8458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.131803][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.635010][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.770530][ T8458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.128935][ T8458] hsr_slave_0: entered promiscuous mode [ 377.152964][ T8458] hsr_slave_1: entered promiscuous mode [ 377.387150][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 377.445804][ T8652] netlink: 'syz.1.719': attribute type 5 has an invalid length. [ 377.542153][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'. [ 378.170035][ T8652] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 378.432657][ T8652] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 378.450609][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.522292][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8685 comm=syz.3.728 [ 378.971749][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.030961][ T8652] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 379.039921][ T8652] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 379.049986][ T8652] geneve2: entered promiscuous mode [ 379.056210][ T8652] geneve2: entered allmulticast mode [ 380.922284][ T30] audit: type=1400 audit(2000000122.459:297): avc: denied { name_bind } for pid=8718 comm="syz.3.739" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 381.018865][ T8725] netlink: 'syz.4.732': attribute type 4 has an invalid length. [ 381.353837][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 381.394278][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 381.442092][ T8735] netlink: 'syz.2.740': attribute type 4 has an invalid length. [ 381.744382][ T8730] ceph: No mds server is up or the cluster is laggy [ 381.775348][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 381.782697][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 381.872460][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 381.984276][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 382.961948][ T8458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.037326][ T8458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.244149][ T8458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.296411][ T8458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.460703][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 383.642781][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 383.642804][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 383.642824][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 383.642836][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.649070][ T8771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 383.651275][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.936245][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.095712][ T9] usb 4-1: USB disconnect, device number 6 [ 384.223549][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.275554][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.275613][ T6775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.292625][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.292680][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.669738][ T8790] netlink: 84 bytes leftover after parsing attributes in process `syz.1.750'. [ 385.430489][ T8458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.626962][ T8797] netlink: 'syz.1.752': attribute type 4 has an invalid length. [ 386.131395][ T8458] veth0_vlan: entered promiscuous mode [ 386.149924][ T8458] veth1_vlan: entered promiscuous mode [ 386.199111][ T8458] veth0_macvtap: entered promiscuous mode [ 386.212180][ T8458] veth1_macvtap: entered promiscuous mode [ 386.518907][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.518930][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.518940][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.518953][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.518962][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.518976][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.590475][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.594719][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.594740][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.594749][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.594763][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.594772][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.594785][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.595895][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.628238][ T8458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.628301][ T8458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.628327][ T8458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.628352][ T8458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.965263][ T6775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.965282][ T6775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.025330][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.025345][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.374327][ T30] audit: type=1400 audit(2000000128.579:298): avc: denied { mounton } for pid=8458 comm="syz-executor" path="/root/syzkaller.fZg24V/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 387.395665][ T30] audit: type=1400 audit(2000000128.929:299): avc: denied { mount } for pid=8458 comm="syz-executor" name="/" dev="gadgetfs" ino=6545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 388.791673][ T8838] vlan2: entered promiscuous mode [ 388.791764][ T8838] vlan2: entered allmulticast mode [ 388.791772][ T8838] hsr_slave_1: entered allmulticast mode [ 388.846190][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 389.644034][ T30] audit: type=1400 audit(2000000131.179:300): avc: denied { create } for pid=8848 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 390.489102][ T8863] netlink: 'syz.0.763': attribute type 2 has an invalid length. [ 390.763569][ T8866] ptrace attach of "./syz-executor exec"[8458] was attempted by "./syz-executor exec"[8866] [ 390.783624][ T8866] netlink: 'syz.0.763': attribute type 62 has an invalid length. [ 392.483405][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 392.492900][ T8894] netlink: 'syz.0.767': attribute type 5 has an invalid length. [ 392.506477][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.767'. [ 392.578842][ T8894] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 392.589285][ T8894] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 392.599497][ T5869] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 392.634597][ T8894] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 392.653665][ T8894] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 392.815784][ T47] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 392.840577][ T5859] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 392.841865][ T5869] usb 2-1: config 2 has an invalid interface number: 86 but max is 0 [ 392.886415][ T5869] usb 2-1: config 2 has no interface number 0 [ 392.923507][ T5869] usb 2-1: config 2 interface 86 has no altsetting 0 [ 392.987277][ T8894] geneve2: entered promiscuous mode [ 392.994833][ T5869] usb 2-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 393.004504][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 393.004917][ T5859] usb 3-1: config 2 has an invalid interface number: 86 but max is 0 [ 393.018192][ T8894] geneve2: entered allmulticast mode [ 393.025094][ T5859] usb 3-1: config 2 has no interface number 0 [ 393.030986][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.031422][ T5859] usb 3-1: config 2 interface 86 has no altsetting 0 [ 393.049045][ T47] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 393.057160][ T5859] usb 3-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 393.068477][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.091313][ T5869] usb 2-1: Product: syz [ 393.092362][ T5859] usb 3-1: Product: syz [ 393.116634][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.135871][ T5859] usb 3-1: Manufacturer: syz [ 393.140422][ T5869] usb 2-1: Manufacturer: syz [ 393.145062][ T5869] usb 2-1: SerialNumber: syz [ 393.148370][ T5859] usb 3-1: SerialNumber: syz [ 393.310404][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.326372][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.365029][ T47] usbtmc 5-1:16.0: bulk endpoints not found [ 393.387547][ T5859] usb-storage 3-1:2.86: USB Mass Storage device detected [ 393.430122][ T5859] option 3-1:2.86: GSM modem (1-port) converter detected [ 393.498053][ T5859] usb 3-1: USB disconnect, device number 7 [ 393.534363][ T5859] option 3-1:2.86: device disconnected [ 393.630471][ T5869] usb-storage 2-1:2.86: USB Mass Storage device detected [ 393.724815][ T5869] option 2-1:2.86: GSM modem (1-port) converter detected [ 393.780779][ T5869] usb 2-1: USB disconnect, device number 13 [ 393.826821][ T5869] option 2-1:2.86: device disconnected [ 394.168616][ T8926] netlink: 'syz.3.775': attribute type 4 has an invalid length. [ 394.300690][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 395.004482][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 395.021048][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 395.031365][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 395.044857][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.065678][ T8930] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 395.096218][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 395.278040][ T30] audit: type=1400 audit(2000000136.809:301): avc: denied { setopt } for pid=8955 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 395.455582][ T9] usb 5-1: USB disconnect, device number 10 [ 395.504490][ T10] usb 1-1: USB disconnect, device number 6 [ 395.744143][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 395.753436][ T8960] netlink: 'syz.2.779': attribute type 5 has an invalid length. [ 395.763221][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.779'. [ 395.958446][ T8960] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 396.071640][ T8960] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 396.081233][ T8960] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 396.090155][ T8960] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 396.099897][ T8960] geneve2: entered promiscuous mode [ 396.107548][ T8960] geneve2: entered allmulticast mode [ 396.273600][ T8964] overlayfs: missing 'lowerdir' [ 397.390531][ T8992] 9pnet_virtio: no channels available for device syz [ 398.200471][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 398.450511][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.450534][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 398.450556][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 398.450569][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.460069][ T8995] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 398.467362][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.559836][ T9008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 398.560037][ T9008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 399.634298][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 399.643422][ T9011] netlink: 'syz.0.788': attribute type 5 has an invalid length. [ 399.664758][ T9011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.788'. [ 399.776983][ T10] usb 2-1: USB disconnect, device number 14 [ 402.771935][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 402.790543][ T9068] netlink: 'syz.1.800': attribute type 5 has an invalid length. [ 402.819073][ T9068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.800'. [ 402.919178][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'. [ 405.469133][ T9090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.934892][ T9095] netlink: 84 bytes leftover after parsing attributes in process `syz.0.808'. [ 406.703863][ T9100] 9pnet_virtio: no channels available for device syz [ 407.694128][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 407.707698][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 408.121470][ T9121] netlink: 84 bytes leftover after parsing attributes in process `syz.0.816'. [ 408.268384][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 408.281120][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 408.354539][ T5126] Bluetooth: hci1: link tx timeout [ 408.360077][ T5126] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 408.458983][ T30] audit: type=1400 audit(2000000149.959:302): avc: denied { read } for pid=9123 comm="syz.3.817" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 408.541073][ T9128] netlink: 'syz.0.818': attribute type 2 has an invalid length. [ 408.760445][ T30] audit: type=1400 audit(2000000149.959:303): avc: denied { open } for pid=9123 comm="syz.3.817" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 408.813554][ T9130] ptrace attach of "./syz-executor exec"[8458] was attempted by "./syz-executor exec"[9130] [ 408.826623][ T9130] netlink: 'syz.0.818': attribute type 62 has an invalid length. [ 409.203389][ T30] audit: type=1400 audit(2000000150.739:304): avc: denied { write } for pid=9131 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 409.211894][ T9132] lo speed is unknown, defaulting to 1000 [ 409.293313][ T9132] lo speed is unknown, defaulting to 1000 [ 409.327188][ T9132] lo speed is unknown, defaulting to 1000 [ 409.507740][ T9132] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 409.701931][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 409.709570][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 409.983861][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 409.990668][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 410.003638][ T9132] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 410.204084][ T9136] ceph: No mds server is up or the cluster is laggy [ 410.425319][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 410.698132][ T9132] lo speed is unknown, defaulting to 1000 [ 410.742641][ T9132] lo speed is unknown, defaulting to 1000 [ 410.753657][ T9132] lo speed is unknown, defaulting to 1000 [ 410.760314][ T9132] lo speed is unknown, defaulting to 1000 [ 410.768808][ T9132] lo speed is unknown, defaulting to 1000 [ 413.662199][ T9172] tty tty2: ldisc open failed (-12), clearing slot 1 [ 413.674416][ T30] audit: type=1400 audit(2000000154.959:305): avc: denied { bind } for pid=9165 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.737958][ T9175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.947710][ T9201] netlink: 'syz.3.838': attribute type 2 has an invalid length. [ 416.399500][ T9211] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[9211] [ 416.407328][ T9211] netlink: 'syz.3.838': attribute type 62 has an invalid length. [ 418.114506][ T9222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.174564][ T9241] ceph: No mds server is up or the cluster is laggy [ 421.194112][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 421.201767][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 421.491169][ T9250] lo speed is unknown, defaulting to 1000 [ 421.497309][ T9250] lo speed is unknown, defaulting to 1000 [ 421.507384][ T9250] lo speed is unknown, defaulting to 1000 [ 421.574141][ T9250] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 421.982015][ T9250] lo speed is unknown, defaulting to 1000 [ 421.989529][ T9250] lo speed is unknown, defaulting to 1000 [ 421.996255][ T9250] lo speed is unknown, defaulting to 1000 [ 422.002785][ T9250] lo speed is unknown, defaulting to 1000 [ 422.009220][ T9250] lo speed is unknown, defaulting to 1000 [ 422.045660][ T9251] block nbd1: shutting down sockets [ 422.204928][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 422.402349][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 422.468580][ T24] usb 4-1: config 2 has an invalid interface number: 86 but max is 0 [ 422.492616][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 422.498892][ T24] usb 4-1: config 2 has no interface number 0 [ 422.821568][ T24] usb 4-1: config 2 interface 86 has no altsetting 0 [ 422.830821][ T24] usb 4-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 422.890015][ T9261] ceph: No mds server is up or the cluster is laggy [ 422.994924][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.464928][ T24] usb 4-1: Product: syz [ 423.470514][ T24] usb 4-1: Manufacturer: syz [ 423.479740][ T24] usb 4-1: SerialNumber: syz [ 423.616519][ T24] usb-storage 4-1:2.86: USB Mass Storage device detected [ 424.280878][ T9285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9285 comm=syz.0.855 [ 426.371261][ T9287] netlink: 'syz.3.857': attribute type 2 has an invalid length. [ 426.439130][ T24] option 4-1:2.86: GSM modem (1-port) converter detected [ 426.451991][ T24] usb 4-1: USB disconnect, device number 7 [ 426.460258][ T24] option 4-1:2.86: device disconnected [ 426.869854][ T9295] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[9295] [ 427.185409][ T9291] ceph: No mds server is up or the cluster is laggy [ 427.206203][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 427.219031][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 428.449874][ T9307] ubi31: attaching mtd0 [ 428.468475][ T30] audit: type=1400 audit(2000000169.979:306): avc: denied { append } for pid=9306 comm="syz.2.863" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 428.486671][ T9307] ubi31: scanning is finished [ 428.498143][ T9307] ubi31: empty MTD device detected [ 429.155036][ T9307] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 429.155053][ T9307] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 429.155062][ T9307] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 429.155071][ T9307] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 429.155080][ T9307] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 429.155088][ T9307] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 429.155097][ T9307] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 842522781 [ 429.155107][ T9307] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 429.156630][ T9313] ubi31: background thread "ubi_bgt31d" started, PID 9313 [ 429.419255][ T9321] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 430.238714][ T9324] veth3: entered promiscuous mode [ 430.255965][ T9324] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 431.378530][ T9334] tty tty2: ldisc open failed (-12), clearing slot 1 [ 435.024654][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 435.039445][ T9373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.878'. [ 437.487610][ T9391] vivid-007: kernel_thread() failed [ 438.554979][ T9405] siw: device registration error -23 [ 438.934425][ T9409] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 439.110569][ T9407] block nbd0: Device being setup by another task [ 439.118057][ T9408] block nbd0: NBD_DISCONNECT [ 439.124471][ T9408] block nbd0: Send disconnect failed -107 [ 439.169178][ T9399] block nbd0: Disconnected due to user request. [ 439.175958][ T9399] block nbd0: shutting down sockets [ 439.186575][ T30] audit: type=1400 audit(2000000180.659:307): avc: denied { write } for pid=9399 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.360095][ T9413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.426446][ T9418] binder: 9414:9418 ioctl c018620b 0 returned -14 [ 439.689232][ T9412] veth11: entered promiscuous mode [ 439.717513][ T9412] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 439.865429][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.960294][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.471048][ T9423] netlink: 'syz.0.890': attribute type 2 has an invalid length. [ 441.672058][ T9435] ptrace attach of "./syz-executor exec"[8458] was attempted by "./syz-executor exec"[9435] [ 441.705253][ T9435] netlink: 'syz.0.890': attribute type 62 has an invalid length. [ 443.012951][ T9444] siw: device registration error -23 [ 443.566319][ T9446] block nbd4: NBD_DISCONNECT [ 443.571082][ T9446] block nbd4: Send disconnect failed -107 [ 443.576881][ T9446] block nbd4: Disconnected due to user request. [ 443.583178][ T9446] block nbd4: shutting down sockets [ 443.883914][ T30] audit: type=1400 audit(2000000185.399:308): avc: denied { bind } for pid=9449 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 444.244416][ T9457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.074371][ T9465] siw: device registration error -23 [ 445.812150][ T30] audit: type=1400 audit(2000000187.339:309): avc: denied { getopt } for pid=9466 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.139438][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 449.186866][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 449.520645][ T9492] ceph: No mds server is up or the cluster is laggy [ 449.530423][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 449.548832][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.559484][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.567729][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.580550][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.590563][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.696462][ T9496] lo speed is unknown, defaulting to 1000 [ 449.752048][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 449.765045][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 449.791912][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 449.846958][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.952954][ T9490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 449.984983][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.031105][ T9496] lo speed is unknown, defaulting to 1000 [ 450.902504][ T24] usb 2-1: USB disconnect, device number 15 [ 450.905185][ T9496] chnl_net:caif_netlink_parms(): no params data found [ 451.416163][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.427676][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.442728][ T9496] bridge_slave_0: entered allmulticast mode [ 451.452657][ T9496] bridge_slave_0: entered promiscuous mode [ 451.465994][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.475406][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.483146][ T9496] bridge_slave_1: entered allmulticast mode [ 451.532847][ T9496] bridge_slave_1: entered promiscuous mode [ 451.588831][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.605100][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.701521][ T5817] Bluetooth: hci5: command tx timeout [ 451.721044][ T9496] team0: Port device team_slave_0 added [ 451.758736][ T9496] team0: Port device team_slave_1 added [ 452.032315][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.305108][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.332000][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.345580][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.352832][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.379209][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.072416][ T9496] hsr_slave_0: entered promiscuous mode [ 453.079674][ T9496] hsr_slave_1: entered promiscuous mode [ 453.087083][ T9496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.095695][ T9496] Cannot create hsr debugfs directory [ 454.143174][ T5817] Bluetooth: hci5: command tx timeout [ 454.323914][ T9496] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 454.382822][ T9496] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 454.419887][ T9496] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 454.453122][ T9496] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 454.772800][ T9496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.889865][ T9496] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.918358][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.925494][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.553718][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.560869][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.082110][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.180391][ T5126] Bluetooth: hci5: command tx timeout [ 457.080496][ T9582] siw: device registration error -23 [ 457.623425][ T9584] block nbd4: NBD_DISCONNECT [ 457.637113][ T9584] block nbd4: Send disconnect failed -107 [ 457.643180][ T9584] block nbd4: Disconnected due to user request. [ 457.649397][ T9584] block nbd4: shutting down sockets [ 458.260404][ T5126] Bluetooth: hci5: command tx timeout [ 458.370439][ T5919] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 458.610521][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 458.624824][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 458.801274][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 458.814452][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 458.839051][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 458.956814][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.981468][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.997030][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.030407][ T9496] veth0_vlan: entered promiscuous mode [ 459.089260][ T5919] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 459.134994][ T9496] veth1_vlan: entered promiscuous mode [ 459.161697][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 459.175257][ T9607] netlink: 'syz.0.930': attribute type 5 has an invalid length. [ 459.183505][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.930'. [ 459.212855][ T9496] veth0_macvtap: entered promiscuous mode [ 459.347518][ T9496] veth1_macvtap: entered promiscuous mode [ 460.072297][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.086667][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.170270][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.330448][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.354454][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.428493][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.485118][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.531225][ T9619] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 460.549601][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.599489][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.722956][ T9621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.886082][ T9624] veth7: entered promiscuous mode [ 460.894251][ T9624] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 460.905915][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.945529][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.960547][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.971607][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.981946][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.992844][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.017755][ T9496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.029613][ T9496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.068625][ T5919] usb 2-1: USB disconnect, device number 16 [ 461.118220][ T9496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.299616][ T9496] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.321339][ T9496] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.330935][ T9496] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.339804][ T9496] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.401488][ T9645] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 462.410192][ T9645] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.945'. [ 462.419815][ T9645] nbd: must specify a device to reconfigure [ 462.449932][ T6775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.462419][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.580827][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.593051][ T6775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.570571][ T9652] block nbd4: Device being setup by another task [ 463.578136][ T9652] block nbd4: shutting down sockets [ 464.982753][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.902'. [ 464.993116][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.5.902'. [ 465.846628][ T9683] netlink: 'syz.4.955': attribute type 2 has an invalid length. [ 466.115940][ T9688] netlink: 'syz.4.955': attribute type 62 has an invalid length. [ 468.907809][ T9714] netlink: 'syz.2.963': attribute type 1 has an invalid length. [ 470.929875][ T9726] openvswitch: netlink: Message has 24 unknown bytes. [ 470.962244][ T9716] veth7: entered promiscuous mode [ 471.490366][ T9737] openvswitch: netlink: Message has 24 unknown bytes. [ 474.032431][ T9762] netlink: 'syz.0.976': attribute type 2 has an invalid length. [ 474.050717][ T9759] block nbd5: Device being setup by another task [ 474.112456][ T9755] block nbd5: shutting down sockets [ 474.431538][ T9764] ptrace attach of "./syz-executor exec"[8458] was attempted by "./syz-executor exec"[9764] [ 474.463170][ T9764] netlink: 'syz.0.976': attribute type 62 has an invalid length. [ 475.271523][ T9772] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 475.922943][ T9772] veth9: entered promiscuous mode [ 475.938071][ T9775] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 475.947506][ T9775] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 475.957654][ T9775] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 476.016671][ T30] audit: type=1400 audit(2000000217.489:310): avc: denied { firmware_load } for pid=9766 comm="syz.5.978" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 476.471334][ T9786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 477.131377][ T9790] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 477.131405][ T9790] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 477.131434][ T9790] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 477.384744][ T9796] siw: device registration error -23 [ 479.508640][ T9813] netlink: 84 bytes leftover after parsing attributes in process `syz.5.990'. [ 481.006792][ T9831] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 482.858827][ T9860] netlink: 'syz.1.1005': attribute type 2 has an invalid length. [ 483.856093][ T9865] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[9865] [ 483.889265][ T9865] netlink: 'syz.1.1005': attribute type 62 has an invalid length. [ 484.637237][ T9870] openvswitch: netlink: Message has 24 unknown bytes. [ 486.370733][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 486.478703][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 486.535487][ T9889] ceph: No mds server is up or the cluster is laggy [ 486.657353][ T9900] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 489.575035][ T9900] veth13: entered promiscuous mode [ 490.850503][ T5919] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 491.234227][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 491.254209][ T30] audit: type=1400 audit(2000000232.719:311): avc: denied { map } for pid=9935 comm="syz.4.1027" path="socket:[20408]" dev="sockfs" ino=20408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 491.443679][ T5919] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 491.914814][ T5919] usb 1-1: config 0 has no interface number 0 [ 491.950773][ T5919] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 492.000585][ T5919] usb 1-1: config 0 interface 1 has no altsetting 0 [ 492.006053][ T30] audit: type=1400 audit(2000000233.539:312): avc: denied { bind } for pid=9943 comm="syz.4.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 492.161484][ T5919] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 492.610816][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.618857][ T5919] usb 1-1: Product: syz [ 492.625332][ T5919] usb 1-1: Manufacturer: syz [ 492.629958][ T5919] usb 1-1: SerialNumber: syz [ 492.644488][ T5919] usb 1-1: config 0 descriptor?? [ 493.222002][ T5919] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 493.263548][ T5919] cx231xx 1-1:0.1: Failed to read PCB config [ 493.287344][ T5919] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 494.270012][ T5919] usb 1-1: USB disconnect, device number 7 [ 494.430861][ T9963] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 494.935803][ T9963] veth15: entered promiscuous mode [ 498.417948][T10008] siw: device registration error -23 [ 499.062168][T10008] block nbd5: shutting down sockets [ 499.416036][T10017] 9pnet_virtio: no channels available for device syz [ 499.889538][T10022] tipc: Started in network mode [ 499.904671][T10022] tipc: Node identity 6, cluster identity 4711 [ 499.914733][T10022] tipc: Node number set to 6 [ 499.964881][T10029] netlink: 'syz.5.1055': attribute type 2 has an invalid length. [ 500.212372][T10032] ptrace attach of "./syz-executor exec"[9496] was attempted by "./syz-executor exec"[10032] [ 500.251086][T10032] netlink: 'syz.5.1055': attribute type 62 has an invalid length. [ 501.038094][T10044] netlink: 'syz.5.1059': attribute type 2 has an invalid length. [ 501.402488][T10051] ptrace attach of "./syz-executor exec"[9496] was attempted by "./syz-executor exec"[10051] [ 501.439362][T10051] netlink: 'syz.5.1059': attribute type 62 has an invalid length. [ 501.463734][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.479743][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.920883][T10054] dlm: no local IP address has been set [ 501.927002][T10054] dlm: cannot start dlm midcomms -107 [ 505.179171][T10076] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[10076] [ 505.211025][T10076] netlink: 'syz.1.1066': attribute type 62 has an invalid length. [ 513.838705][T10161] netlink: 'syz.4.1092': attribute type 1 has an invalid length. [ 514.042770][T10160] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1092'. [ 514.044252][T10160] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.450133][T10171] openvswitch: netlink: Message has 24 unknown bytes. [ 514.831784][T10161] veth11: entered promiscuous mode [ 515.739046][T10185] lo speed is unknown, defaulting to 1000 [ 515.740504][T10185] lo speed is unknown, defaulting to 1000 [ 516.492785][ T5811] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 516.612884][ T5811] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 518.377000][T10219] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 518.466264][T10219] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1106'. [ 518.480067][T10219] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.547062][T10219] veth13: entered promiscuous mode [ 518.597292][T10219] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 519.091649][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 519.120633][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 519.548703][T10238] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1110'. [ 521.291754][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 521.568284][T10253] netlink: 'syz.4.1115': attribute type 5 has an invalid length. [ 522.118460][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1115'. [ 522.384970][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 522.530436][T10264] hsr_slave_1 (unregistering): left promiscuous mode [ 522.727583][T10267] syzkaller0: entered promiscuous mode [ 522.734677][T10267] syzkaller0: entered allmulticast mode [ 523.018023][T10275] syz_tun: entered allmulticast mode [ 523.149284][ T30] audit: type=1400 audit(2000000264.649:313): avc: denied { create } for pid=10274 comm="syz.2.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 523.997129][T10282] openvswitch: netlink: Message has 24 unknown bytes. [ 526.273884][T10297] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1128'. [ 527.312409][ T30] audit: type=1400 audit(2000000268.829:314): avc: denied { accept } for pid=10299 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 529.124767][ T5869] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 529.141208][ T30] audit: type=1400 audit(2000000270.669:315): avc: denied { read } for pid=10317 comm="syz.4.1138" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 529.336378][ T30] audit: type=1400 audit(2000000270.699:316): avc: denied { open } for pid=10317 comm="syz.4.1138" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 529.385444][ T5869] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 529.531941][ T30] audit: type=1400 audit(2000000270.709:317): avc: denied { ioctl } for pid=10317 comm="syz.4.1138" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 531.360956][T10346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.883135][T10356] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[10356] [ 531.915526][T10356] netlink: 'syz.1.1145': attribute type 62 has an invalid length. [ 533.782021][T10372] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1150'. [ 534.191424][T10374] ptrace attach of "./syz-executor exec"[9496] was attempted by "./syz-executor exec"[10374] [ 534.404220][T10374] netlink: 'syz.5.1151': attribute type 62 has an invalid length. [ 534.536590][T10357] Bluetooth: hci1: command 0x0406 tx timeout [ 535.933658][T10391] 9pnet_virtio: no channels available for device syz [ 536.360417][ T5919] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 536.574167][T10396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1158'. [ 536.608689][ T5919] usb 1-1: config 1 interface 0 has no altsetting 0 [ 536.631719][ T5919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 536.658646][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.689800][ T5919] usb 1-1: Product: syz [ 536.703838][ T5919] usb 1-1: Manufacturer: syz [ 536.737184][ T5919] usb 1-1: SerialNumber: syz [ 536.777408][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1154'. [ 536.787514][T10392] netlink: 'syz.5.1154': attribute type 5 has an invalid length. [ 536.812058][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1154'. [ 537.045036][T10392] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 537.056060][T10392] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 537.075960][T10392] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 537.111293][T10392] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 537.151204][T10392] geneve2: entered promiscuous mode [ 537.170535][T10392] geneve2: entered allmulticast mode [ 537.502466][ T5919] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 537.877800][ T30] audit: type=1400 audit(2000000279.379:318): avc: denied { read write } for pid=10386 comm="syz.0.1155" name="lp0" dev="devtmpfs" ino=3045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 537.937610][ T30] audit: type=1400 audit(2000000279.379:319): avc: denied { open } for pid=10386 comm="syz.0.1155" path="/dev/usb/lp0" dev="devtmpfs" ino=3045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 537.962059][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.195393][T10412] siw: device registration error -23 [ 538.854009][T10410] block nbd4: shutting down sockets [ 538.977437][ T5919] usb 1-1: USB disconnect, device number 8 [ 539.034538][ T5919] usblp0: removed [ 544.354086][ T30] audit: type=1400 audit(2000000285.759:320): avc: denied { ioctl } for pid=10471 comm="syz.1.1182" path="socket:[23441]" dev="sockfs" ino=23441 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 544.402558][ T6773] Bluetooth: hci0: Frame reassembly failed (-84) [ 544.634202][ T30] audit: type=1400 audit(2000000285.869:321): avc: denied { bind } for pid=10471 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 545.413497][T10484] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1186'. [ 545.550838][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 546.525526][T10357] Bluetooth: hci0: command 0x1003 tx timeout [ 546.533434][ T5126] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 548.052108][T10507] veth17: entered promiscuous mode [ 549.540581][ T5817] Bluetooth: hci0: command 0x1003 tx timeout [ 549.654843][ T5126] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 549.715731][T10527] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1196'. [ 550.667573][T10526] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1197'. [ 551.714186][T10544] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 552.362717][T10555] openvswitch: netlink: Message has 24 unknown bytes. [ 552.709191][T10544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.067502][T10544] veth5: entered promiscuous mode [ 553.104788][T10544] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 554.055195][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1208'. [ 554.286659][T10572] veth17: entered promiscuous mode [ 554.498690][T10575] lo speed is unknown, defaulting to 1000 [ 554.507594][T10575] lo speed is unknown, defaulting to 1000 [ 556.452054][T10605] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1217'. [ 556.505830][T10608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1219'. [ 557.011988][T10614] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 558.061404][T10618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1222'. [ 558.153447][T10618] veth19: entered promiscuous mode [ 558.335123][T10625] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 559.288244][T10634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.347275][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1224'. [ 559.757777][T10625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 560.034727][T10625] veth15: entered promiscuous mode [ 560.052282][T10625] bond6: (slave veth15): Enslaving as a backup interface with a down link [ 561.635459][ T30] audit: type=1400 audit(2000000303.129:322): avc: denied { ioctl } for pid=10654 comm="syz.0.1233" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 563.319496][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.334822][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.645407][T10671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'. [ 564.325782][ T75] Bluetooth: hci0: Frame reassembly failed (-84) [ 564.363302][T10674] veth17: entered promiscuous mode [ 565.276388][T10686] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 565.364103][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 565.689931][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 566.041681][T10686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.064284][T10695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.184394][T10686] veth7: entered promiscuous mode [ 566.214341][T10698] trusted_key: syz.5.1243 sent an empty control message without MSG_MORE. [ 566.264079][ T5817] Bluetooth: hci0: command 0x1003 tx timeout [ 566.278027][T10686] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 566.310541][ T5126] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 569.720464][ T5859] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 571.140501][T10740] binder: 10736:10740 ioctl c018620b 0 returned -14 [ 571.147534][T10739] netlink: 'syz.5.1257': attribute type 1 has an invalid length. [ 571.363598][T10746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.922335][T10739] veth3: entered promiscuous mode [ 571.938377][T10739] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 572.059534][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 572.068579][T10754] netlink: 'syz.2.1255': attribute type 5 has an invalid length. [ 572.079341][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1255'. [ 572.398915][T10767] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[10767] [ 572.434381][T10767] netlink: 'syz.4.1261': attribute type 62 has an invalid length. [ 574.216412][T10784] ptrace attach of "./syz-executor exec"[9496] was attempted by "./syz-executor exec"[10784] [ 574.461342][T10784] netlink: 'syz.5.1264': attribute type 62 has an invalid length. [ 575.746995][T10796] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[10796] [ 575.783525][T10796] netlink: 'syz.1.1268': attribute type 62 has an invalid length. [ 577.190585][T10805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8 sclass=netlink_tcpdiag_socket pid=10805 comm=syz.0.1272 [ 579.495987][T10824] siw: device registration error -23 [ 579.758453][T10829] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[10829] [ 579.790554][T10829] netlink: 'syz.1.1279': attribute type 62 has an invalid length. [ 580.180502][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 580.566512][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 580.750619][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 581.113276][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 581.134015][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.159474][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 581.187876][ T24] pvrusb2: ********** [ 581.195197][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 581.218357][ T24] pvrusb2: Important functionality might not be entirely working. [ 581.239374][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 581.252029][ T24] pvrusb2: ********** [ 581.426073][ T30] audit: type=1400 audit(2000000322.959:323): avc: denied { append } for pid=10845 comm="syz.1.1286" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 581.454131][ T2332] pvrusb2: Invalid write control endpoint [ 581.461207][ T30] audit: type=1400 audit(2000000322.979:324): avc: denied { shutdown } for pid=10845 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 581.470424][ T5919] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 581.940521][T10849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.403487][ T5919] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.412008][ T5869] usb 1-1: USB disconnect, device number 10 [ 582.423805][ T5919] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.479177][ T5919] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.490226][ T2332] pvrusb2: Invalid write control endpoint [ 582.495113][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.506404][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 582.535954][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 582.548558][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 582.559821][ T2332] pvrusb2: Device being rendered inoperable [ 582.568333][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 582.576083][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 582.594857][ T2332] pvrusb2: Attached sub-driver cx25840 [ 582.600969][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 582.611596][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 582.680033][T10852] netlink: 'syz.1.1287': attribute type 4 has an invalid length. [ 582.729496][ T5919] usb 3-1: usb_control_msg returned -32 [ 582.739367][ T5919] usbtmc 3-1:16.0: can't read capabilities [ 583.353510][T10861] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1290'. [ 584.891768][ T10] usb 3-1: USB disconnect, device number 8 [ 588.171790][ T30] audit: type=1400 audit(2000000329.449:325): avc: denied { mount } for pid=10901 comm="syz.0.1303" name="/" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 588.370638][T10906] block nbd2: Device being setup by another task [ 588.380252][T10904] block nbd2: shutting down sockets [ 588.426142][ T30] audit: type=1400 audit(2000000329.459:326): avc: denied { search } for pid=10901 comm="syz.0.1303" name="/" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 588.580528][ T30] audit: type=1400 audit(2000000329.469:327): avc: denied { read } for pid=10901 comm="syz.0.1303" name="/" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 588.603105][ T30] audit: type=1400 audit(2000000329.469:328): avc: denied { open } for pid=10901 comm="syz.0.1303" path="/" dev="configfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 588.698507][T10911] openvswitch: netlink: Message has 24 unknown bytes. [ 589.736006][T10919] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1307'. [ 591.957826][T10941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10941 comm=syz.4.1313 [ 592.780197][ T10] libceph: connect (1)[c::]:6789 error -101 [ 592.797703][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 593.044740][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 593.056593][T10957] netlink: 'syz.1.1312': attribute type 5 has an invalid length. [ 593.065895][T10957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1312'. [ 593.228511][ T10] libceph: connect (1)[c::]:6789 error -101 [ 593.424209][T10947] ceph: No mds server is up or the cluster is laggy [ 593.698380][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 595.907817][ T5811] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 597.261860][ T5811] usb 3-1: config 2 has an invalid interface number: 86 but max is 0 [ 597.273446][ T5811] usb 3-1: config 2 has no interface number 0 [ 597.279531][ T5811] usb 3-1: config 2 interface 86 has no altsetting 0 [ 597.290681][ T5811] usb 3-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 597.303742][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.772647][ T5811] usb 3-1: Product: syz [ 597.780865][ T5811] usb 3-1: Manufacturer: syz [ 597.785844][ T5811] usb 3-1: SerialNumber: syz [ 597.789914][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 597.803619][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 598.072208][T10999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10999 comm=syz.1.1326 [ 598.307147][ T5811] usb-storage 3-1:2.86: USB Mass Storage device detected [ 598.592094][ T5126] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 598.651801][ T5811] option 3-1:2.86: GSM modem (1-port) converter detected [ 598.667760][ T5811] usb 3-1: USB disconnect, device number 9 [ 598.674855][ T5811] option 3-1:2.86: device disconnected [ 599.170571][ T5859] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 599.178308][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 599.772155][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 599.783902][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 599.797255][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.806196][ T5859] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 599.819103][ T10] usb 6-1: Product: syz [ 599.823657][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.831932][ T10] usb 6-1: Manufacturer: syz [ 599.840166][ T10] usb 6-1: SerialNumber: syz [ 599.885805][ T10] usb 6-1: config 0 descriptor?? [ 599.898934][ T5859] pvrusb2: Hardware description: Terratec Grabster AV400 [ 599.913265][ T5859] pvrusb2: ********** [ 599.926899][ T5859] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 599.966913][ T5859] pvrusb2: Important functionality might not be entirely working. [ 600.200661][ T5859] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 600.299852][ T10] usb 6-1: USB disconnect, device number 2 [ 600.453224][ T5859] pvrusb2: ********** [ 600.580920][ T2332] pvrusb2: Invalid write control endpoint [ 600.810739][ T5811] usb 2-1: USB disconnect, device number 17 [ 601.013593][ T2332] pvrusb2: Invalid write control endpoint [ 601.041122][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.140660][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 602.370024][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 602.528568][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 602.745027][ T2332] pvrusb2: Device being rendered inoperable [ 602.853406][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 603.006475][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 603.064162][ T2332] pvrusb2: Attached sub-driver cx25840 [ 603.069655][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 603.080579][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 609.885679][T11090] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1348'. [ 610.185441][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1349'. [ 610.186242][T11081] veth1_macvtap: left promiscuous mode [ 610.267466][ T30] audit: type=1804 audit(2000000351.799:329): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1353" name="/newroot/281/file0" dev="tmpfs" ino=1585 res=1 errno=0 [ 610.426871][T11093] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 610.450885][T11093] ref_ctr increment failed for inode: 0x631 offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff88802f68ee00 [ 610.690653][ T5811] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 610.947671][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 610.954450][T11093] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 610.963000][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 610.965845][T11093] ref_ctr decrement failed for inode: 0x631 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802f68ee00 [ 610.982128][T11093] uprobe: syz.2.1353:11093 failed to unregister, leaking uprobe [ 611.664326][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 611.772488][ T5811] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 611.781815][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.804982][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 611.820744][ T5811] pvrusb2: ********** [ 611.824899][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 611.835200][ T5811] pvrusb2: Important functionality might not be entirely working. [ 612.015228][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 612.339271][ T5811] pvrusb2: ********** [ 612.351520][ T2332] pvrusb2: Invalid write control endpoint [ 612.402468][ T2332] pvrusb2: Invalid write control endpoint [ 612.408367][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 612.418131][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 612.429579][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 612.445945][ T2332] pvrusb2: Device being rendered inoperable [ 612.466355][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 612.488835][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 612.565936][ T2332] pvrusb2: Attached sub-driver cx25840 [ 612.574053][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 612.584910][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 612.762543][ T5126] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 612.763301][ T5817] Bluetooth: hci0: command 0x1003 tx timeout [ 612.783906][ T5811] usb 2-1: USB disconnect, device number 18 [ 613.467412][ T30] audit: type=1804 audit(2000000354.999:330): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1362" name="/newroot/284/file0" dev="tmpfs" ino=1601 res=1 errno=0 [ 613.745835][T11128] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 613.764827][T11128] ref_ctr increment failed for inode: 0x641 offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff888033422800 [ 613.807045][ T30] audit: type=1804 audit(2000000355.339:331): pid=11131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1362" name="/newroot/284/file0" dev="tmpfs" ino=1601 res=1 errno=0 [ 613.832205][T11128] uprobe: syz.2.1362:11128 failed to unregister, leaking uprobe [ 613.845168][T11128] uprobe: syz.2.1362:11128 failed to unregister, leaking uprobe [ 614.028467][T11135] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1363'. [ 614.300666][ T5919] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 614.452440][ T5919] usb 3-1: config 1 interface 0 has no altsetting 0 [ 614.462482][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 614.471913][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.479917][ T5919] usb 3-1: Product: syz [ 614.484269][ T5919] usb 3-1: Manufacturer: syz [ 614.488879][ T5919] usb 3-1: SerialNumber: syz [ 616.214044][T11152] lo speed is unknown, defaulting to 1000 [ 616.228921][T11152] lo speed is unknown, defaulting to 1000 [ 617.695410][T11163] openvswitch: netlink: Message has 24 unknown bytes. [ 617.928698][ T5919] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 619.316255][ T5919] usb 3-1: USB disconnect, device number 10 [ 619.331885][ T5919] usblp0: removed [ 621.063853][T11189] netlink: 'syz.4.1379': attribute type 2 has an invalid length. [ 621.290870][ T30] audit: type=1400 audit(2000000362.819:332): avc: denied { create } for pid=11193 comm="syz.0.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 621.368526][T11195] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[11195] [ 621.404654][T11195] netlink: 'syz.4.1379': attribute type 62 has an invalid length. [ 622.211767][T11197] vivid-000: kernel_thread() failed [ 622.677118][T11204] lo speed is unknown, defaulting to 1000 [ 622.688725][T11204] lo speed is unknown, defaulting to 1000 [ 623.292330][ T5919] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 623.844620][ T5919] usb 6-1: config 1 interface 0 has no altsetting 0 [ 623.846271][ T5919] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 623.928152][T11220] netlink: 'syz.4.1385': attribute type 2 has an invalid length. [ 623.936054][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.966284][ T5919] usb 6-1: Product: syz [ 623.973762][ T5919] usb 6-1: Manufacturer: syz [ 623.994779][ T5919] usb 6-1: SerialNumber: syz [ 624.001952][T11215] veth19: entered promiscuous mode [ 624.009799][T11215] bond5: (slave veth19): Enslaving as an active interface with an up link [ 624.186754][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.193245][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.266553][T11222] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[11222] [ 624.278814][T11222] netlink: 'syz.4.1385': attribute type 62 has an invalid length. [ 625.172099][T11231] netlink: 'syz.1.1388': attribute type 2 has an invalid length. [ 626.032456][T11231] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[11231] [ 626.045747][T11231] netlink: 'syz.1.1388': attribute type 62 has an invalid length. [ 626.275285][ T5919] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 626.528628][ T5919] usb 6-1: USB disconnect, device number 3 [ 626.667248][ T5919] usblp0: removed [ 631.250541][ T30] audit: type=1804 audit(2000000372.779:333): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1398" name="/newroot/83/file0" dev="tmpfs" ino=459 res=1 errno=0 [ 631.276628][T11277] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 631.381055][T11277] ref_ctr increment failed for inode: 0x1cb offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff88807b513c00 [ 631.584060][T11283] netlink: 'syz.1.1397': attribute type 2 has an invalid length. [ 631.628808][T11283] þ: entered promiscuous mode [ 631.695150][ T30] audit: type=1400 audit(2000000373.199:334): avc: denied { getopt } for pid=11275 comm="syz.1.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 631.723875][ T30] audit: type=1804 audit(2000000373.249:335): pid=11284 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1398" name="/newroot/83/file0" dev="tmpfs" ino=459 res=1 errno=0 [ 631.770901][T11277] uprobe: syz.5.1398:11277 failed to unregister, leaking uprobe [ 631.782572][T11277] uprobe: syz.5.1398:11277 failed to unregister, leaking uprobe [ 631.945586][ T5126] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 633.081388][ T5866] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 633.310495][ T5817] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 633.562144][ T5866] usb 6-1: config 1 interface 0 has no altsetting 0 [ 633.571232][ T5866] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 633.640419][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.668778][ T5866] usb 6-1: Product: syz [ 633.674431][ T5866] usb 6-1: Manufacturer: syz [ 633.874570][ T5866] usb 6-1: SerialNumber: syz [ 636.217354][ T5866] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 636.274754][ T5866] usb 6-1: USB disconnect, device number 4 [ 636.345257][ T5866] usblp0: removed [ 637.242018][ T5866] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 637.550395][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 637.558478][ T5866] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 637.572824][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.966173][ T5811] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 638.042406][ T5866] pvrusb2: Hardware description: Terratec Grabster AV400 [ 638.086033][ T5866] pvrusb2: ********** [ 638.105983][ T5866] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 638.130275][ T5866] pvrusb2: Important functionality might not be entirely working. [ 638.138975][ T5866] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 638.151934][ T5866] pvrusb2: ********** [ 638.237516][ T2332] pvrusb2: Invalid write control endpoint [ 638.340030][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 638.369455][ T5811] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 638.389820][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.515348][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 638.522508][ T5811] pvrusb2: ********** [ 638.526745][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 638.540442][ T5811] pvrusb2: Important functionality might not be entirely working. [ 638.548273][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 639.440649][ T5811] pvrusb2: ********** [ 639.446385][ T2332] pvrusb2: Invalid write control endpoint [ 639.511401][T11354] ptrace attach of "./syz-executor exec"[8458] was attempted by "./syz-executor exec"[11354] [ 639.525937][T11354] netlink: 'syz.0.1417': attribute type 62 has an invalid length. [ 639.814698][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 639.824818][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 639.836341][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 639.851197][ T2332] pvrusb2: Device being rendered inoperable [ 639.857498][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 639.866948][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 639.875425][ T2332] pvrusb2: Attached sub-driver cx25840 [ 639.888856][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 639.897780][ T5866] usb 6-1: USB disconnect, device number 5 [ 640.059993][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 640.069219][ T5859] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 640.251638][ T2332] pvrusb2: Invalid write control endpoint [ 640.526520][T11335] pvrusb2: Attempted to execute control transfer when device not ok [ 640.567448][ T5919] usb 3-1: USB disconnect, device number 11 [ 640.659307][ T2332] pvrusb2: Invalid write control endpoint [ 640.670414][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 640.670503][ T5859] usb 5-1: config 1 interface 0 has no altsetting 0 [ 640.686903][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 640.695626][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 640.699049][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 640.714820][T11358] netlink: 'syz.1.1416': attribute type 5 has an invalid length. [ 640.723367][ T2332] pvrusb2: Device being rendered inoperable [ 640.750885][ T5859] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 640.770236][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.786729][ T2332] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 640.811562][T11358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1416'. [ 640.878634][ T5859] usb 5-1: Product: syz [ 640.903989][ T2332] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 640.918999][ T5859] usb 5-1: Manufacturer: syz [ 640.944725][ T5859] usb 5-1: SerialNumber: syz [ 640.960015][ T2332] pvrusb2: Attached sub-driver cx25840 [ 640.978008][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 641.011910][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 641.240872][T11368] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1422'. [ 641.914979][T11373] virtio-fs: tag not found [ 643.088333][T11379] openvswitch: netlink: Message has 24 unknown bytes. [ 643.692449][ T5859] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 643.718034][ T5859] usb 5-1: USB disconnect, device number 11 [ 643.848198][ T5859] usblp0: removed [ 644.737655][ T30] audit: type=1400 audit(2000000386.259:336): avc: denied { block_suspend } for pid=11398 comm="syz.2.1433" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 646.180403][T11274] Bluetooth: hci5: command 0x0406 tx timeout [ 648.907146][T11420] netlink: 'syz.1.1437': attribute type 2 has an invalid length. [ 649.200488][ T5859] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 649.375417][ T5859] usb 6-1: config 1 interface 0 has no altsetting 0 [ 649.477263][ T5859] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 649.627708][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.647451][ T5859] usb 6-1: Product: syz [ 649.652153][ T5859] usb 6-1: Manufacturer: syz [ 649.656822][ T5859] usb 6-1: SerialNumber: syz [ 650.194459][T11433] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1441'. [ 651.805214][ T5859] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 652.010727][ T5859] usb 6-1: USB disconnect, device number 6 [ 652.021434][ T5859] usblp0: removed [ 652.120494][ T5919] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 653.347450][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 653.370386][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.444413][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 653.512920][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.620688][ T970] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 653.970540][ T5919] usb 2-1: usb_control_msg returned -32 [ 653.976162][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 653.982212][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 653.996365][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.724835][ T970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 654.753817][ T970] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 654.763904][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.782186][ T970] usb 1-1: config 0 descriptor?? [ 655.022424][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1450'. [ 655.044449][T11475] netlink: 'syz.5.1450': attribute type 5 has an invalid length. [ 655.052894][T11475] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1450'. [ 655.295066][ T970] usbhid 1-1:0.0: can't add hid device: -71 [ 655.386256][ T970] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 655.571964][ T970] usb 1-1: USB disconnect, device number 11 [ 655.612702][ T5859] usb 2-1: USB disconnect, device number 19 [ 655.653019][T11479] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 656.223357][T11479] veth21: entered promiscuous mode [ 656.233113][T11479] bond6: (slave veth21): Enslaving as a backup interface with a down link [ 656.650766][ T970] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 656.811482][T11499] binder: 11493:11499 ioctl c018620b 0 returned -14 [ 656.871997][ T970] usb 2-1: config 1 interface 0 has no altsetting 0 [ 656.880820][ T970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 656.893701][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.907469][ T970] usb 2-1: Product: syz [ 656.912410][ T970] usb 2-1: Manufacturer: syz [ 656.917120][ T970] usb 2-1: SerialNumber: syz [ 657.871360][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880301ee400: rx timeout, send abort [ 657.921695][ T30] audit: type=1400 audit(2000000399.429:337): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 657.943902][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.600698][ T5919] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 659.382896][ T30] audit: type=1400 audit(2000000399.429:338): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.468430][ T30] audit: type=1400 audit(2000000399.439:339): avc: denied { write } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.497973][ T970] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 659.511886][ T970] usb 2-1: USB disconnect, device number 20 [ 659.523646][ T5919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 659.536470][ T970] usblp0: removed [ 659.544212][ T5919] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.561913][ T5919] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 659.575017][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.593049][ T30] audit: type=1400 audit(2000000399.439:340): avc: denied { add_name } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.628341][ T30] audit: type=1400 audit(2000000399.439:341): avc: denied { create } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 659.753868][ T30] audit: type=1400 audit(2000000399.449:342): avc: denied { append open } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 659.777336][ T30] audit: type=1400 audit(2000000399.449:343): avc: denied { getattr } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 659.800660][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 659.808435][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 659.826613][ T5919] usb 6-1: usb_control_msg returned -32 [ 659.845569][ T5919] usbtmc 6-1:16.0: can't read capabilities [ 660.373118][ T970] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 660.411706][ T5919] usb 6-1: USB disconnect, device number 7 [ 660.415077][ T24] usb 5-1: device descriptor read/64, error -32 [ 660.563025][ T970] usb 2-1: config 2 has an invalid interface number: 86 but max is 0 [ 660.571364][ T970] usb 2-1: config 2 has no interface number 0 [ 660.585346][ T970] usb 2-1: config 2 interface 86 has no altsetting 0 [ 660.616896][ T970] usb 2-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 660.628431][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.656184][ T970] usb 2-1: Product: syz [ 660.680549][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 660.699893][ T970] usb 2-1: Manufacturer: syz [ 660.720436][ T970] usb 2-1: SerialNumber: syz [ 660.850433][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 660.984416][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.146588][ T970] usb-storage 2-1:2.86: USB Mass Storage device detected [ 661.166782][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 661.203979][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 661.204755][ T970] option 2-1:2.86: GSM modem (1-port) converter detected [ 661.214806][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.255439][ T24] usb 5-1: config 0 descriptor?? [ 661.287890][T11540] ref_ctr_offset mismatch. inode: 0x6b5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 661.404195][ T970] usb 2-1: USB disconnect, device number 21 [ 661.412215][ T970] option 2-1:2.86: device disconnected [ 661.499389][T11543] ptrace attach of "./syz-executor exec"[9496] was attempted by "./syz-executor exec"[11543] [ 661.514496][T11543] netlink: 'syz.5.1471': attribute type 62 has an invalid length. [ 662.263994][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 662.270178][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 662.486458][T11551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11551 comm=syz.2.1473 [ 663.205962][ T24] usb 5-1: USB disconnect, device number 13 [ 663.684916][ T5919] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 664.690542][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 664.697817][ T5919] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 664.707526][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.722094][ T5919] pvrusb2: Hardware description: Terratec Grabster AV400 [ 664.730425][ T5919] pvrusb2: ********** [ 664.736702][ T5919] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 664.758123][ T5919] pvrusb2: Important functionality might not be entirely working. [ 664.766622][ T5919] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 664.778598][ T5919] pvrusb2: ********** [ 664.800569][ T970] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 664.890541][ T5811] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 664.925898][ T2332] pvrusb2: Invalid write control endpoint [ 664.963078][ T970] usb 2-1: config 1 interface 0 has no altsetting 0 [ 664.979950][ T970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 664.995368][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.004615][ T970] usb 2-1: Product: syz [ 665.008926][ T970] usb 2-1: Manufacturer: syz [ 665.015963][ T970] usb 2-1: SerialNumber: syz [ 665.027302][ T2332] pvrusb2: Invalid write control endpoint [ 665.038419][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 665.048347][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 665.051903][ T5811] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.092902][ T5811] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.114874][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 665.116675][ T5811] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 665.146844][ T2332] pvrusb2: Device being rendered inoperable [ 665.170479][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.205708][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 665.206351][T11556] pvrusb2: Attempted to execute control transfer when device not ok [ 665.244091][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 665.309166][ T2332] pvrusb2: Attached sub-driver cx25840 [ 665.329052][ T5859] usb 6-1: USB disconnect, device number 8 [ 665.337344][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 665.353074][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 665.455493][ T5811] usb 5-1: usb_control_msg returned -32 [ 665.464776][ T5811] usbtmc 5-1:16.0: can't read capabilities [ 665.513035][ T5811] usb 5-1: USB disconnect, device number 14 [ 666.852788][ T6773] Bluetooth: hci0: Frame reassembly failed (-84) [ 667.656597][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 667.735559][ T970] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 667.771742][T11595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11595 comm=syz.4.1486 [ 668.002926][ T970] usb 2-1: USB disconnect, device number 22 [ 668.164540][ T970] usblp0: removed [ 668.168394][T11591] netlink: 'syz.0.1485': attribute type 5 has an invalid length. [ 668.200500][T11591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1485'. [ 668.909945][ T5817] Bluetooth: hci0: command 0x1003 tx timeout [ 668.916729][T11274] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 669.025294][ T30] audit: type=1400 audit(2000000410.559:344): avc: denied { allowed } for pid=11588 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 669.490455][ T5859] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 670.509985][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 670.533068][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.553416][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.710581][ T5859] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 670.733371][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.757384][ T5859] usb 5-1: config 0 descriptor?? [ 671.192980][ T5859] usbhid 5-1:0.0: can't add hid device: -71 [ 671.209779][ T5859] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 671.225502][ T5859] usb 5-1: USB disconnect, device number 15 [ 671.280790][ T5919] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 671.310637][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 671.460839][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 671.474072][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 671.490273][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.524756][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 671.535143][ T24] pvrusb2: ********** [ 671.539237][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 671.558560][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 671.560320][ T24] pvrusb2: Important functionality might not be entirely working. [ 671.571420][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.593178][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 671.605412][ T24] pvrusb2: ********** [ 671.605814][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 671.620921][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.746034][ T2332] pvrusb2: Invalid write control endpoint [ 671.760711][ T5811] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 671.839717][ T2332] pvrusb2: Invalid write control endpoint [ 671.856824][ T5919] usb 2-1: usb_control_msg returned -32 [ 671.864202][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 671.881112][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 671.905082][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 671.913086][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 671.923329][ T2332] pvrusb2: Device being rendered inoperable [ 671.939760][ T5919] usb 2-1: USB disconnect, device number 23 [ 671.954567][ T5811] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 671.990452][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 672.048981][ T30] audit: type=1400 audit(2000000413.509:345): avc: denied { create } for pid=11628 comm="syz.4.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 672.064305][T11623] pvrusb2: Attempted to execute control transfer when device not ok [ 672.079356][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.086228][ T9] usb 3-1: USB disconnect, device number 12 [ 672.087567][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 672.101286][ T5811] usb 6-1: Product: syz [ 672.120421][ T5811] usb 6-1: Manufacturer: syz [ 672.131017][ T2332] pvrusb2: Attached sub-driver cx25840 [ 672.150632][ T30] audit: type=1400 audit(2000000413.539:346): avc: denied { ioctl } for pid=11628 comm="syz.4.1497" path="socket:[27632]" dev="sockfs" ino=27632 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 672.175711][ T5811] usb 6-1: SerialNumber: syz [ 672.190544][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 672.217670][ T5811] usb 6-1: config 0 descriptor?? [ 672.230510][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 672.250793][ T970] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 672.452676][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 43722, setting to 1024 [ 672.471775][ T970] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 672.488368][ T970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.501745][ T970] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.614441][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.823824][ T5811] usb 6-1: USB disconnect, device number 9 [ 673.827124][ T970] usb 5-1: config 0 descriptor?? [ 673.866450][T11629] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 673.888690][ T970] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 674.104954][T11641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11641 comm=syz.2.1499 [ 674.638343][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 675.245894][T11644] veth11: entered promiscuous mode [ 676.633755][ T24] usb 5-1: USB disconnect, device number 16 [ 677.751503][T11677] vivid-000: disconnect [ 680.622791][ T24] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 680.901403][T11689] lo speed is unknown, defaulting to 1000 [ 680.919233][T11689] lo speed is unknown, defaulting to 1000 [ 681.180945][ T30] audit: type=1400 audit(2000000422.289:347): avc: denied { watch watch_reads } for pid=11686 comm="syz.0.1512" path="/161" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 682.004702][T11693] netlink: 'syz.4.1513': attribute type 1 has an invalid length. [ 682.161358][T11693] veth17: entered promiscuous mode [ 682.178002][T11669] vivid-000: reconnect [ 682.389965][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 682.647678][T11706] veth23: entered promiscuous mode [ 684.908816][T11741] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1525'. [ 685.582724][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 685.748645][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.755135][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.932465][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 685.932486][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.932509][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 685.932521][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.270520][ T5866] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 686.483273][T11752] lo speed is unknown, defaulting to 1000 [ 686.492160][T11752] lo speed is unknown, defaulting to 1000 [ 686.810597][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 686.812264][ T5866] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 686.812292][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.851235][ T9] usb 2-1: usb_control_msg returned -32 [ 686.851279][ T9] usbtmc 2-1:16.0: can't read capabilities [ 686.851945][ T5866] pvrusb2: Hardware description: Terratec Grabster AV400 [ 686.851959][ T5866] pvrusb2: ********** [ 686.851966][ T5866] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 686.851978][ T5866] pvrusb2: Important functionality might not be entirely working. [ 686.851986][ T5866] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 686.851997][ T5866] pvrusb2: ********** [ 686.922934][ T9] usb 2-1: USB disconnect, device number 24 [ 687.040539][ T2332] pvrusb2: Invalid write control endpoint [ 687.429365][T11760] netlink: 'syz.4.1529': attribute type 2 has an invalid length. [ 687.459071][T11760] þ: entered promiscuous mode [ 688.039327][T11747] pvrusb2: Invalid write control endpoint [ 688.058806][ T5869] usb 3-1: USB disconnect, device number 13 [ 688.064083][ T2332] pvrusb2: Invalid write control endpoint [ 688.064111][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 688.064124][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 688.064132][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 688.064141][ T2332] pvrusb2: Device being rendered inoperable [ 688.064171][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 688.064208][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 688.064893][ T2332] pvrusb2: Attached sub-driver cx25840 [ 688.064912][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 688.064920][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 688.680915][T11772] veth5: entered promiscuous mode [ 688.687261][T11768] kvm: pic: level sensitive irq not supported [ 688.687379][T11768] kvm: pic: level sensitive irq not supported [ 688.687439][T11768] kvm: pic: level sensitive irq not supported [ 688.687497][T11768] kvm: pic: level sensitive irq not supported [ 688.687553][T11768] kvm: pic: level sensitive irq not supported [ 690.676592][ T970] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 690.693592][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 690.852620][ T970] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 690.852641][ T970] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.852664][ T970] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 690.852676][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.854557][ T9] usb 6-1: config 2 has an invalid interface number: 86 but max is 0 [ 690.854572][ T9] usb 6-1: config 2 has no interface number 0 [ 690.854587][ T9] usb 6-1: config 2 interface 86 has no altsetting 0 [ 690.865063][ T9] usb 6-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 690.865082][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.865094][ T9] usb 6-1: Product: syz [ 690.865102][ T9] usb 6-1: Manufacturer: syz [ 690.865111][ T9] usb 6-1: SerialNumber: syz [ 691.140125][T11800] netlink: 'syz.0.1542': attribute type 2 has an invalid length. [ 691.168189][T11800] þ: entered promiscuous mode [ 691.305834][ T970] usb 5-1: usb_control_msg returned -32 [ 691.305997][ T970] usbtmc 5-1:16.0: can't read capabilities [ 691.812886][ T970] usb 5-1: USB disconnect, device number 18 [ 691.930021][T11789] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1537'. [ 691.947268][ T9] usb-storage 6-1:2.86: USB Mass Storage device detected [ 692.147830][ T9] option 6-1:2.86: GSM modem (1-port) converter detected [ 692.152355][ T9] usb 6-1: USB disconnect, device number 10 [ 692.153068][ T9] option 6-1:2.86: device disconnected [ 694.560712][T11826] veth9: entered promiscuous mode [ 695.630006][T11658] Bluetooth: hci0: Frame reassembly failed (-84) [ 695.637049][T11840] virtio-fs: tag not found [ 696.774110][T11855] vivid-000: disconnect [ 696.930937][T11858] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1554'. [ 697.535172][T11859] lo speed is unknown, defaulting to 1000 [ 697.542527][T11859] lo speed is unknown, defaulting to 1000 [ 697.625750][ T5817] Bluetooth: hci0: command 0x1003 tx timeout [ 697.705730][T11274] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 698.071012][T11850] vivid-000: reconnect [ 699.255843][T11864] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 700.089186][ T30] audit: type=1804 audit(2000000441.619:348): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1563" name="/newroot/171/file0" dev="tmpfs" ino=923 res=1 errno=0 [ 700.179916][T11878] ref_ctr going negative. vaddr: 0x200000ffc018, curr val: -17644, delta: 1 [ 700.188873][T11878] ref_ctr increment failed for inode: 0x39b offset: 0x2 ref_ctr_offset: 0x18 of mm: 0xffff888033f18000 [ 700.203523][ T30] audit: type=1804 audit(2000000441.739:349): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1563" name="/newroot/171/file0" dev="tmpfs" ino=923 res=1 errno=0 [ 700.227036][T11878] uprobe: syz.0.1563:11878 failed to unregister, leaking uprobe [ 700.258099][T11878] uprobe: syz.0.1563:11878 failed to unregister, leaking uprobe [ 701.672300][T11896] lo speed is unknown, defaulting to 1000 [ 701.691229][T11896] lo speed is unknown, defaulting to 1000 [ 702.966057][T11909] lo speed is unknown, defaulting to 1000 [ 702.983384][T11909] lo speed is unknown, defaulting to 1000 [ 703.692435][ T9] libceph: connect (1)[c::]:6789 error -101 [ 703.702617][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 703.970747][ T970] libceph: connect (1)[c::]:6789 error -101 [ 704.408816][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 704.427479][T11915] ceph: No mds server is up or the cluster is laggy [ 704.562915][T11925] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 704.572632][T11925] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 704.911480][T11925] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 707.297319][T11945] lo speed is unknown, defaulting to 1000 [ 707.315809][T11945] lo speed is unknown, defaulting to 1000 [ 707.798540][T11952] netlink: 'syz.1.1580': attribute type 2 has an invalid length. [ 708.425935][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 709.040792][ T9] usb 3-1: config 2 has an invalid interface number: 86 but max is 0 [ 709.057246][ T9] usb 3-1: config 2 has no interface number 0 [ 709.065540][ T9] usb 3-1: config 2 interface 86 has no altsetting 0 [ 709.076275][ T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=142f, bcdDevice= 0.00 [ 709.125827][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.152937][ T9] usb 3-1: Product: syz [ 709.166525][ T9] usb 3-1: Manufacturer: syz [ 709.195244][ T9] usb 3-1: SerialNumber: syz [ 709.417656][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1579'. [ 709.461820][ T9] usb-storage 3-1:2.86: USB Mass Storage device detected [ 709.694989][ T9] option 3-1:2.86: GSM modem (1-port) converter detected [ 709.719729][ T9] usb 3-1: USB disconnect, device number 14 [ 709.736203][ T9] option 3-1:2.86: device disconnected [ 710.625367][T11991] lo speed is unknown, defaulting to 1000 [ 710.643013][T11991] lo speed is unknown, defaulting to 1000 [ 713.322555][T12005] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 713.331845][T12005] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 713.343930][T12005] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 714.000660][T12023] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1594'. [ 715.776740][T12032] lo speed is unknown, defaulting to 1000 [ 715.802148][T12032] lo speed is unknown, defaulting to 1000 [ 716.927150][ T30] audit: type=1804 audit(2000000458.459:350): pid=12041 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1599" name="/newroot/176/file0" dev="tmpfs" ino=949 res=1 errno=0 [ 716.953498][T12041] ref_ctr_offset mismatch. inode: 0x3b5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 716.979138][T12041] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 717.037234][T12041] ref_ctr decrement failed for inode: 0x3b5 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807bd45000 [ 717.056684][T12041] uprobe: syz.0.1599:12041 failed to unregister, leaking uprobe [ 717.236924][T12041] uprobe: syz.0.1599:12041 failed to unregister, leaking uprobe [ 717.262889][T12041] uprobe: syz.0.1599:12041 failed to unregister, leaking uprobe [ 717.904731][ T30] audit: type=1804 audit(2000000458.589:351): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1599" name="/newroot/176/file0" dev="tmpfs" ino=949 res=1 errno=0 [ 719.039843][T12065] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1605'. [ 719.341156][T12060] veth11: entered promiscuous mode [ 720.879290][T12074] lo speed is unknown, defaulting to 1000 [ 720.889922][T12074] lo speed is unknown, defaulting to 1000 [ 723.341718][T12099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12099 comm=syz.0.1615 [ 723.806593][T12103] lo speed is unknown, defaulting to 1000 [ 723.823958][T12103] lo speed is unknown, defaulting to 1000 [ 724.237413][T12107] netlink: 'syz.5.1618': attribute type 2 has an invalid length. [ 724.483085][T12111] netlink: 'syz.1.1619': attribute type 2 has an invalid length. [ 725.135341][T12115] ptrace attach of "./syz-executor exec"[9496] was attempted by "./syz-executor exec"[12115] [ 725.174657][T12115] netlink: 'syz.5.1618': attribute type 62 has an invalid length. [ 728.533435][T12139] lo speed is unknown, defaulting to 1000 [ 728.551050][T12139] lo speed is unknown, defaulting to 1000 [ 729.354544][T12146] netlink: 'syz.1.1624': attribute type 2 has an invalid length. [ 731.091905][T12150] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1626'. [ 731.615299][ T30] audit: type=1400 audit(2000000473.129:352): avc: denied { bind } for pid=12162 comm="syz.5.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 731.964531][T12170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1632'. [ 732.097410][ T30] audit: type=1804 audit(2000000473.629:353): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1631" name="/newroot/181/file0" dev="tmpfs" ino=975 res=1 errno=0 [ 732.127682][T12172] ref_ctr_offset mismatch. inode: 0x3cf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 732.189291][T12172] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 732.206673][T12172] ref_ctr decrement failed for inode: 0x3cf offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888027afc600 [ 732.221407][ T30] audit: type=1804 audit(2000000473.749:354): pid=12175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1631" name="/newroot/181/file0" dev="tmpfs" ino=975 res=1 errno=0 [ 732.363007][T12172] uprobe: syz.0.1631:12172 failed to unregister, leaking uprobe [ 732.457273][T12170] veth23: entered promiscuous mode [ 732.525932][T12172] uprobe: syz.0.1631:12172 failed to unregister, leaking uprobe [ 732.667958][T12172] uprobe: syz.0.1631:12172 failed to unregister, leaking uprobe [ 737.648821][T12198] lo speed is unknown, defaulting to 1000 [ 737.656088][T12198] lo speed is unknown, defaulting to 1000 [ 738.941217][T12214] netlink: 'syz.1.1642': attribute type 2 has an invalid length. [ 740.335751][T12227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1646'. [ 740.854014][T12227] veth5: entered promiscuous mode [ 742.919418][T12242] lo speed is unknown, defaulting to 1000 [ 742.926551][T12242] lo speed is unknown, defaulting to 1000 [ 743.910723][ T30] audit: type=1400 audit(2000000485.229:355): avc: denied { accept } for pid=12240 comm="syz.2.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 744.260853][T12248] netlink: 'syz.4.1650': attribute type 2 has an invalid length. [ 744.656439][T12259] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[12259] [ 744.754789][T12259] netlink: 'syz.4.1650': attribute type 62 has an invalid length. [ 746.770122][ T30] audit: type=1400 audit(2000000488.279:356): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 747.074600][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.095974][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.296041][T12347] syzkaller0: entered promiscuous mode [ 757.301864][T12347] syzkaller0: entered allmulticast mode [ 757.628291][T12365] netlink: 'syz.1.1682': attribute type 2 has an invalid length. [ 757.932451][T12368] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[12368] [ 757.965031][T12368] netlink: 'syz.1.1682': attribute type 62 has an invalid length. [ 760.167829][ T30] audit: type=1400 audit(2000000501.699:357): avc: denied { read } for pid=12380 comm="syz.2.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 762.778698][T12379] lo speed is unknown, defaulting to 1000 [ 762.786524][T12379] lo speed is unknown, defaulting to 1000 [ 764.065487][T12404] vivid-000: disconnect [ 765.253472][T12392] vivid-000: reconnect [ 766.149496][T12423] netlink: 'syz.0.1698': attribute type 2 has an invalid length. [ 766.933326][T12429] ptrace attach of "./syz-executor exec"[8458] was attempted by "./syz-executor exec"[12429] [ 766.947390][T12429] netlink: 'syz.0.1698': attribute type 62 has an invalid length. [ 767.533740][T12433] vivid-000: disconnect [ 768.077742][T12430] vivid-000: reconnect [ 771.286127][T12465] lo speed is unknown, defaulting to 1000 [ 771.304158][T12465] lo speed is unknown, defaulting to 1000 [ 772.382403][T12474] netlink: 'syz.4.1710': attribute type 2 has an invalid length. [ 773.950468][ T5869] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 774.890473][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 774.901101][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.974404][T12497] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1713'. [ 775.629672][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 775.675409][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 775.675529][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.688165][ T5869] usb 2-1: config 0 descriptor?? [ 775.704499][ T5869] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 775.944919][T12485] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 775.961541][ T970] usb 2-1: USB disconnect, device number 25 [ 776.140570][T12485] usb 3-1: device descriptor read/64, error -71 [ 776.558897][T12485] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 776.770486][T12485] usb 3-1: device descriptor read/64, error -71 [ 776.904719][T12485] usb usb3-port1: attempt power cycle [ 777.615251][T12485] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 777.641060][T12485] usb 3-1: device descriptor read/8, error -71 [ 778.256268][T12485] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 778.663025][T12485] usb 3-1: device descriptor read/8, error -71 [ 779.816147][T12485] usb usb3-port1: unable to enumerate USB device [ 779.914790][T12537] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1720'. [ 782.593693][T12558] netlink: 'syz.1.1731': attribute type 2 has an invalid length. [ 783.500445][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1734'. [ 785.159191][T12485] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 785.221655][ T970] libceph: connect (1)[c::]:6789 error -101 [ 785.227776][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 785.380919][T12485] usb 6-1: Using ep0 maxpacket: 16 [ 785.428970][T12485] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.549865][T12485] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 785.655881][ T970] libceph: connect (1)[c::]:6789 error -101 [ 785.662066][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 785.681810][T12577] ceph: No mds server is up or the cluster is laggy [ 785.685661][T12485] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 785.721858][T12485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.745083][T12485] usb 6-1: config 0 descriptor?? [ 786.110952][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1741'. [ 786.192567][ T970] usb 6-1: USB disconnect, device number 11 [ 786.478949][T12599] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1740'. [ 786.562194][T12601] netlink: 'syz.4.1745': attribute type 2 has an invalid length. [ 787.747581][T12601] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[12601] [ 788.559002][T12617] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1748'. [ 788.895724][T12618] vivid-000: disconnect [ 789.947825][T12613] vivid-000: reconnect [ 790.128514][T12626] page: refcount:3 mapcount:0 mapping:ffff888148c90878 index:0x2 pfn:0x4c06e [ 790.137583][T12626] memcg:ffff88803559c000 [ 790.141857][T12626] aops:def_blk_aops ino:fa00000 [ 790.146896][T12626] flags: 0xfff600000000b9(locked|waiters|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 790.157203][T12626] raw: 00fff600000000b9 ffffea0001301bc8 ffff8880357802e0 ffff888148c90878 [ 790.165848][T12626] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff88803559c000 [ 790.174450][T12626] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 790.182655][T12626] page_owner tracks the page as allocated [ 790.188381][T12626] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 12625, tgid 12625 (syz.4.1752), ts 789991045519, free_ts 786046062829 [ 790.209147][T12626] post_alloc_hook+0x181/0x1b0 [ 790.213936][T12626] get_page_from_freelist+0x135c/0x3920 [ 790.219495][T12626] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 790.225505][T12626] alloc_pages_mpol+0x1fb/0x550 [ 790.230448][T12626] folio_alloc_noprof+0x20/0x2d0 [ 790.235400][T12626] filemap_alloc_folio_noprof+0x3a1/0x470 [ 790.241152][T12626] page_cache_ra_order+0x4c0/0xd00 [ 790.246267][T12626] filemap_fault+0x147c/0x2740 [ 790.251271][T12626] __do_fault+0x10a/0x490 [ 790.255616][T12626] do_pte_missing+0x1a6/0x3fb0 [ 790.260416][T12626] __handle_mm_fault+0x103d/0x2a40 [ 790.265549][T12626] handle_mm_fault+0x3fe/0xad0 [ 790.270312][T12626] do_user_addr_fault+0x60c/0x1370 [ 790.275453][T12626] exc_page_fault+0x5c/0xc0 [ 790.279956][T12626] asm_exc_page_fault+0x26/0x30 [ 790.284858][T12626] page last free pid 23 tgid 23 stack trace: [ 790.290852][T12626] __free_frozen_pages+0x69d/0xff0 [ 790.295982][T12626] tlb_remove_table_rcu+0x116/0x1a0 [ 790.301506][T12626] rcu_core+0x799/0x14e0 [ 790.305762][T12626] handle_softirqs+0x216/0x8e0 [ 790.310555][T12626] run_ksoftirqd+0x3a/0x60 [ 790.314988][T12626] smpboot_thread_fn+0x3f4/0xae0 [ 790.319935][T12626] kthread+0x3c2/0x780 [ 790.324018][T12626] ret_from_fork+0x45/0x80 [ 790.328552][T12626] ret_from_fork_asm+0x1a/0x30 [ 790.333422][T12626] ------------[ cut here ]------------ [ 790.338882][T12626] kernel BUG at mm/filemap.c:3433! [ 790.344140][T12626] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 790.350543][T12626] CPU: 0 UID: 0 PID: 12626 Comm: syz.4.1752 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 790.360840][T12626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.370872][T12626] RIP: 0010:filemap_fault+0x1862/0x2740 [ 790.376399][T12626] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 f8 49 2d 00 e9 66 f3 ff ff e8 ce cd c7 ff 48 c7 c6 00 ef 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 b7 cd c7 ff 48 c7 c6 60 e5 98 8b 48 89 df e8 18 94 10 00 [ 790.395992][T12626] RSP: 0018:ffffc90003f2f510 EFLAGS: 00010246 [ 790.402036][T12626] RAX: 0000000000080000 RBX: ffffea0001301b80 RCX: ffffc9000d8ae000 [ 790.409981][T12626] RDX: 0000000000080000 RSI: ffffffff81f36311 RDI: ffff88803230a884 [ 790.417932][T12626] RBP: ffffc90003f2f7e0 R08: 0000000000000001 R09: 0000000000000000 [ 790.425894][T12626] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888148c90878 [ 790.433841][T12626] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 790.441786][T12626] FS: 00007fae37ec66c0(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 790.450698][T12626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.457279][T12626] CR2: 00002000000018ad CR3: 000000007afb3000 CR4: 00000000003526f0 [ 790.465239][T12626] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 790.473185][T12626] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 790.481128][T12626] Call Trace: [ 790.484380][T12626] [ 790.487298][T12626] ? __pfx_filemap_fault+0x10/0x10 [ 790.492394][T12626] __do_fault+0x10a/0x490 [ 790.496701][T12626] do_pte_missing+0x1031/0x3fb0 [ 790.501532][T12626] ? __handle_mm_fault+0x1010/0x2a40 [ 790.506794][T12626] __handle_mm_fault+0x103d/0x2a40 [ 790.511886][T12626] ? __pfx___handle_mm_fault+0x10/0x10 [ 790.517336][T12626] ? find_vma+0xbf/0x140 [ 790.521559][T12626] ? __pfx_find_vma+0x10/0x10 [ 790.526211][T12626] handle_mm_fault+0x3fe/0xad0 [ 790.530954][T12626] do_user_addr_fault+0x7a6/0x1370 [ 790.536052][T12626] ? rcu_is_watching+0x12/0xc0 [ 790.540791][T12626] exc_page_fault+0x5c/0xc0 [ 790.545273][T12626] asm_exc_page_fault+0x26/0x30 [ 790.550102][T12626] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 790.555796][T12626] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 790.575391][T12626] RSP: 0018:ffffc90003f2fa78 EFLAGS: 00050202 [ 790.581433][T12626] RAX: 0000000000000001 RBX: 00002000000018ad RCX: 0000000000000001 [ 790.589378][T12626] RDX: ffffed100c3fd0be RSI: 00002000000018ad RDI: ffff888061fe85ed [ 790.597326][T12626] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100c3fd0bd [ 790.605273][T12626] R10: ffff888061fe85ed R11: 0000000000000000 R12: 0000000000000000 [ 790.613224][T12626] R13: ffff888061fe85ed R14: dffffc0000000000 R15: 00002000000018ad [ 790.621180][T12626] _copy_from_user+0x98/0xd0 [ 790.625754][T12626] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 790.631366][T12626] snd_rawmidi_write+0x26e/0xc10 [ 790.636282][T12626] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 790.641718][T12626] ? avc_policy_seqno+0x9/0x20 [ 790.646462][T12626] ? selinux_file_permission+0x11f/0x580 [ 790.652074][T12626] ? __pfx_default_wake_function+0x10/0x10 [ 790.657860][T12626] ? bpf_lsm_file_permission+0x9/0x10 [ 790.663213][T12626] ? security_file_permission+0x71/0x210 [ 790.668825][T12626] ? rw_verify_area+0xcf/0x680 [ 790.673565][T12626] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 790.679022][T12626] vfs_writev+0x6c4/0xdc0 [ 790.683331][T12626] ? __pfx_vfs_writev+0x10/0x10 [ 790.688167][T12626] ? kmem_cache_free+0x2d4/0x4d0 [ 790.693096][T12626] ? __fget_files+0x20e/0x3c0 [ 790.697758][T12626] ? do_writev+0x295/0x330 [ 790.702153][T12626] do_writev+0x295/0x330 [ 790.706376][T12626] ? __pfx_do_writev+0x10/0x10 [ 790.711115][T12626] ? rcu_is_watching+0x12/0xc0 [ 790.715857][T12626] do_syscall_64+0xcd/0x260 [ 790.720347][T12626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.726223][T12626] RIP: 0033:0x7fae36f8e969 [ 790.730624][T12626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.750215][T12626] RSP: 002b:00007fae37ec6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 790.758623][T12626] RAX: ffffffffffffffda RBX: 00007fae371b5fa0 RCX: 00007fae36f8e969 [ 790.766587][T12626] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 790.774547][T12626] RBP: 00007fae37010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 790.782512][T12626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.790455][T12626] R13: 0000000000000000 R14: 00007fae371b5fa0 R15: 00007ffec3acab58 [ 790.798401][T12626] [ 790.801391][T12626] Modules linked in: [ 790.806080][T12626] ---[ end trace 0000000000000000 ]--- [ 790.811600][T12626] RIP: 0010:filemap_fault+0x1862/0x2740 [ 790.817129][T12626] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 f8 49 2d 00 e9 66 f3 ff ff e8 ce cd c7 ff 48 c7 c6 00 ef 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 b7 cd c7 ff 48 c7 c6 60 e5 98 8b 48 89 df e8 18 94 10 00 [ 790.836771][T12626] RSP: 0018:ffffc90003f2f510 EFLAGS: 00010246 [ 790.842901][T12626] RAX: 0000000000080000 RBX: ffffea0001301b80 RCX: ffffc9000d8ae000 [ 790.850880][T12626] RDX: 0000000000080000 RSI: ffffffff81f36311 RDI: ffff88803230a884 [ 790.858826][T12626] RBP: ffffc90003f2f7e0 R08: 0000000000000001 R09: 0000000000000000 [ 790.866902][T12626] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888148c90878 [ 790.874862][T12626] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 790.882820][T12626] FS: 00007fae37ec66c0(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 790.891736][T12626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.898293][T12626] CR2: 00002000000018ad CR3: 000000007afb3000 CR4: 00000000003526f0 [ 790.906265][T12626] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 790.914239][T12626] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 790.922198][T12626] Kernel panic - not syncing: Fatal exception [ 790.928445][T12626] Kernel Offset: disabled [ 790.932746][T12626] Rebooting in 86400 seconds..