last executing test programs: 14m14.921308002s ago: executing program 1 (id=792): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x1) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r3, 0x0, 0xd, 0xfffffffffffffffc}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000300)='0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000000000000000000008000008601473e38000", @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002000000000000a02e01000037706d6784b9d6e006ab83d2474c36d1bb3aee73f9c5712f8cebc93cb785fc2ef5447bb552989fefbe982419"], 0x80}, 0x300}, 0x8040) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r6}, 0x38) 14m11.457816955s ago: executing program 1 (id=797): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) userfaultfd(0x80801) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r3, 0x5) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) 14m10.164867774s ago: executing program 1 (id=800): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000080)={0x10000, 0x80000000}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$snddsp(r6, &(0x7f0000000300)=""/57, 0x39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2002, @private2, 0xffffffff}, 0x1c) sendto$inet6(r7, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r7, 0x0, r0, 0x0, 0x406f413, 0x0) 14m4.972102456s ago: executing program 1 (id=809): clock_nanosleep(0x9, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x800) recvmmsg$unix(r2, &(0x7f0000000540)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000340)=""/111, 0x6f}, {0x0}], 0x2, &(0x7f00000004c0)}}], 0x1, 0x60000023, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 13m59.84478003s ago: executing program 1 (id=826): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) 13m58.74178968s ago: executing program 1 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368657461673da32c63616368653d665363"]) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_usbip_server_init(0x4) r4 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r3, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x2, 0x1, 0x0, "", [{0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x50) syz_emit_ethernet(0x32, &(0x7f0000000240)={@broadcast, @dev, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @local, @empty, @empty, @local}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRES32=r4, @ANYRESHEX=r2, @ANYRES8], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="2b2803000000"], 0x20}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) 13m43.320034643s ago: executing program 32 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368657461673da32c63616368653d665363"]) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_usbip_server_init(0x4) r4 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r3, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x2, 0x1, 0x0, "", [{0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x50) syz_emit_ethernet(0x32, &(0x7f0000000240)={@broadcast, @dev, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @local, @empty, @empty, @local}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRES32=r4, @ANYRESHEX=r2, @ANYRES8], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="2b2803000000"], 0x20}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) 19.104034574s ago: executing program 3 (id=2546): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f00000000c0)) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x8, 0x20}, 0xc) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 17.764935642s ago: executing program 2 (id=2549): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r0, 0x9) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r5, 0x1000000000931f, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x5) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) connect$ax25(r10, &(0x7f0000000000)={{0x3, @default, 0x6}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}, 0x48) 16.355559259s ago: executing program 3 (id=2552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) close(0xffffffffffffffff) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000002) 13.904740521s ago: executing program 3 (id=2557): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001aaaaaaaaaa0aac1414bbaaaaaaaaaa00ac1414bb53911d246eeb2fb1a44a9d5e5585845071538cb11d67e060fe36108d4772faa5b7e90f2e9446c6ad1e610bdadb3dc3de397f6206aa7c4d606151da53cd030df8383922520e1a57ddd84c8190dc4267b7a186c6d6dcb1a798a76bea1825"], 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = getpid() r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x41c302, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r4 = syz_pidfd_open(r2, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) open$dir(0x0, 0x648400, 0x121) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r5, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000c1dbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) shutdown(r5, 0x1) recvfrom(r5, 0x0, 0x0, 0x61, 0x0, 0x0) 13.148582501s ago: executing program 5 (id=2558): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000030de09627a83fed33ad4f5cbd1c7"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000000)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x8500017e) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r5 = syz_open_dev$vim2m(0x0, 0xfff, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0x6, 0x31324d4e, 0x5, 0x9, [{0xb, 0xe1}, {0x81, 0x200002}, {0x6, 0x80}, {0xffffffd2, 0x1000}, {0x0, 0x10}, {0x401, 0x6}, {0x5, 0xc600}, {0x6, 0x6}], 0xc, 0x8, 0x2, 0x2, 0x3}}) read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) shmget(0x3, 0x3000, 0x400, &(0x7f00007ae000/0x3000)=nil) 13.137521857s ago: executing program 2 (id=2559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1_macvtap\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x38}}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000400095000000000000005bd2c07fef414a909b66adb11cf085392c"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r6, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 11.843215571s ago: executing program 5 (id=2560): syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000090000000500000000000038f3bbe583ae8686e6439cd014369961dc08165add4be6879b4586ceb1baac1e20e3d1db42524f87c1812091e5ce74e77ce98c27c0d5cf1b8b4b8a2578bc82ef2a675335b251fa27f4823baff12173021c"], 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) read$FUSE(r7, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000003740)={0xb8, 0x0, r8, [{{0x7, 0x2, 0x2, 0x7, 0x3, 0x9, {0x2, 0xfffffffffffff430, 0x5, 0x7, 0x1, 0x66c, 0x4, 0x10000, 0x5, 0x4000, 0x8, 0x0, r9, 0xfffffffb, 0x4}}, {0x6, 0x1, 0xc, 0x9, '/dev/video#\x00'}}]}, 0xb8) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 11.832311714s ago: executing program 2 (id=2561): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x8, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r2, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000013c0)=ANY=[@ANYRES16, @ANYBLOB]) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={r5, 0x6}, 0x8) 10.453175398s ago: executing program 2 (id=2562): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d40)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) io_uring_setup(0x4a47, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24044014) 10.438676914s ago: executing program 5 (id=2563): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f00000000c0)) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x8, 0x20}, 0xc) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 8.839260777s ago: executing program 3 (id=2565): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x29) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000400), 0x8) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200401, 0xfffffffd, 0xc6cf, 0x91, "0000080100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(r4, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0xa400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000200)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x100000, 0x8, 0xfffffffc, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x7, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x5, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400009, 0x1]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.395036566s ago: executing program 0 (id=2567): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x74, 0x3, 0x7, 0x8, 0x10000}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x5, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket(0x2a, 0x800, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x8082, 0x0) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/76}, {&(0x7f0000000800)=""/143}, {&(0x7f00000008c0)=""/93}, {&(0x7f0000000940)=""/106}], 0x0, &(0x7f00000009c0)=""/108, 0x50}, 0x3a2}], 0x4000166, 0x12100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r8, 0x0, 0x0, 0x4c, &(0x7f0000001cc0), &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 8.050401643s ago: executing program 5 (id=2568): r0 = socket(0x2, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x20, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r1], 0x46) recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'macvlan1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x6, 0x5ef, 0x9, 0xbe, 0xd1, [0x1, 0xf2]}}) 7.660181898s ago: executing program 3 (id=2569): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r3, &(0x7f000000cb00)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x4000, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x7, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) r4 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00']) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) 7.63512856s ago: executing program 0 (id=2570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000800)="ad76ce7c11976b59315952ccedbd23e49ef8ffbb1f39fb00ae77600c1ec0e988944663f06c8890d6851933c633b9114eb2a191aeb95fb76967c9a8e0d99b13cadcae771ecca7c6304ebf05e36b20b01d828c02c22e80a2f18855d3e02107c6e0044f09ea1338e614a71ae5cce36f9d9e8d413f78cd7a6426a05178c18a1be27227df5a075c6e6365109996d64a10a6f72bd44d6dcd99a4ded72c6954722caa23263b5d2259cb7ad89b521b8b6f00c6789905f2851a49cf98f6bd65255c990f77e2f9bf7d", &(0x7f00000011c0)=""/4096, 0x0, &(0x7f0000000000)="e1c35e4b3f88d58fd69cfd0f0b2e0e256a423e17c48620ed899a4cb67888ea7479adcf0143f003d0ee6c532ea8400deaf733ffb50f", 0x40, r1, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3f, @loopback}, 0x1c) 6.817848789s ago: executing program 4 (id=2571): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) write$char_usb(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r6, r6, 0x0, 0x101) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xa, 0x7, 0x8, 0x1, 0x2020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) bind$inet6(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 6.509707703s ago: executing program 0 (id=2572): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x4000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d0000000001dcdf251700000008000300", @ANYRES32=r8], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, 0x0, 0x40000) 5.542082634s ago: executing program 4 (id=2573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) set_mempolicy(0xc002, 0x0, 0x5) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2865) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) r6 = socket$isdn(0x22, 0x2, 0x10) r7 = socket$isdn(0x22, 0x2, 0x2) dup3(r7, r6, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="840100005304"], 0x184}, 0x1, 0x0, 0x0, 0x40040}, 0x44000) 5.510194541s ago: executing program 2 (id=2574): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x8, 0x4) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00", @ANYBLOB='s'], 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x81, 0x1, 0x8, 0x1, 0x1, 0x8, 0x9, 0x6, 0x1, 0x3, 0x1, 0x8, 0x90, 0x23}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000004d99bce700b7008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000d0ffa3635a38e65b37d83d7b0000000000950000000000ffff"], 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)=0x3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/59, 0x3b) r7 = dup3(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', r7}, 0x18) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0xfffffffe}], 0x1, 0x40000140, 0x0) 5.353662999s ago: executing program 0 (id=2575): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000040), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) 4.578444161s ago: executing program 4 (id=2576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) read$msr(r1, &(0x7f000001b5c0)=""/102368, 0x18fe0) r2 = getpid() move_pages(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, 0x0, 0x0) syz_emit_ethernet(0x13d, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.370054829s ago: executing program 4 (id=2577): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r5 = syz_open_procfs(0x0, 0x0) pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r6 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r6, 0xee01, r7) keyctl$KEYCTL_MOVE(0x3, r6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001480)="3b5250dd8df768c581177cc96346a125c5baecd7e46618851e723e8ef1628f8e5c9fff1954ad6617c17fd0658b4c494ab4b9c82de21662a0d7c3cafc01b397ad6c398c755561984e8ba92704585396a2101125bb2a4d000000611bc84796c8015747ffc90dcf9341cd76ab4a14b4973cd160e90aafad5742f47771132af6fdeea669adfd5eda144f72d4f76ac6", 0x8d, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.60134726s ago: executing program 5 (id=2578): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={0x0, 0x70}, 0x1, 0x400000000000000}, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000), &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaa000800bc41d14286078bff0001907800000000ffffffffe0009078fffd000062c272fabd74b471b372"], 0x0) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(0x0, 0x3, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = dup2(r2, r2) socket(0x29, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(&(0x7f00000000c0)=0x1, 0x5, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1) r7 = socket(0x2b, 0x1, 0x1) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xb}, 0x1c) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r8, 0xffffffffffffffff, 0x0) 2.416352167s ago: executing program 4 (id=2579): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0xfffffffa, 0x554, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff88, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x80000000}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000380)='./bus\x00'}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000f9ffffff020000000300000000040000", @ANYRES32=r4, @ANYBLOB='\x00', @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0400000001000000750000000200"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x100, '\x00', r3, r8, 0x0, 0x0, 0x2}, 0x50) write$dsp(r7, &(0x7f0000000200)='m', 0x1) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) r10 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r10, 0x4144, 0x0) 1.548364326s ago: executing program 0 (id=2580): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001640)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005a0000022dbd"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket(0x1e, 0x80004, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000300)) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x8, 0x0, 0x2, 0xfffffffc}, 0x10) dup3(r6, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x11, 0xffffffffffffffff, 0x9c5d4000) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0xa, 0x1, 0xc05}) mq_timedreceive(r7, &(0x7f0000000380)=""/104, 0x68, 0xff, &(0x7f0000000280)={0x77359400}) openat$userio(0xffffffffffffff9c, 0x0, 0x40, 0x0) 804.943829ms ago: executing program 4 (id=2581): socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000000, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0xc0000, 0x143, 0xc}, 0x18) r4 = eventfd(0x9) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000300)=r4, 0x1) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x40, 0x0, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="df33c9f7b9a600", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) semget$private(0x0, 0x2, 0x100) 781.304126ms ago: executing program 5 (id=2582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000800)="ad76ce7c11976b59315952ccedbd23e49ef8ffbb1f39fb00ae77600c1ec0e988944663f06c8890d6851933c633b9114eb2a191aeb95fb76967c9a8e0d99b13cadcae771ecca7c6304ebf05e36b20b01d828c02c22e80a2f18855d3e02107c6e0044f09ea1338e614a71ae5cce36f9d9e8d413f78cd7a6426a05178c18a1be27227df5a075c6e6365109996d64a10a6f72bd44d6dcd99a4ded72c6954722caa23263b5d2259cb7ad89b521b8b6f00c6789905f2851a49cf98f6bd65255c990f77e2f9bf7d", &(0x7f00000011c0)=""/4096, &(0x7f0000000900), &(0x7f0000000000)="e1c35e4b3f88d58fd69cfd0f0b2e0e256a423e17c48620ed899a4cb67888ea7479adcf0143f003d0ee6c532ea8400deaf733ffb50f", 0x40, r1, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3f, @loopback}, 0x1c) 736.763295ms ago: executing program 0 (id=2583): socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setgroups(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$rxrpc(r0, &(0x7f0000000200)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_open_dev$vcsa(0x0, 0x2, 0x214000) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2584): setresuid(0x0, 0xee00, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) sendto$inet(r3, &(0x7f00000003c0)="25c6f84c6b92407c6d29973a26a7e2d723b20a0000", 0x15, 0x2400c0c1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = dup(r6) getrlimit(0x4, 0x0) write$UHID_INPUT(r7, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) syz_io_uring_setup(0x8001f87, &(0x7f0000000080)={0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000280)) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000000)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1c340462d3589e67197f90be6e423ceb0ab4912f9f6a31854cb566ae400f8938caa52dd8d39af14c31ed571d5920000000e0a00"}, 0x48, 0xffffffffffffffff) kernel console output (not intermixed with test programs): , idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 970.438233][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.536476][T15080] lo speed is unknown, defaulting to 1000 [ 970.630545][T15080] lo speed is unknown, defaulting to 1000 [ 970.724139][T15080] lo speed is unknown, defaulting to 1000 [ 970.987919][ T5970] usb 3-1: config 0 descriptor?? [ 971.451231][ T5970] usb 3-1: can't set config #0, error -71 [ 971.484789][ T5970] usb 3-1: USB disconnect, device number 14 [ 971.659970][T15098] ubi: mtd0 is already attached to ubi31 [ 973.466974][T15120] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 974.386127][ T9444] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 974.687566][ T9444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.699421][ T9444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.709845][ T9444] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 974.747337][ T9444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.824743][ T9444] usb 5-1: config 0 descriptor?? [ 976.091426][T15144] netlink: 'syz.5.1901': attribute type 8 has an invalid length. [ 977.013439][ T9444] usbhid 5-1:0.0: can't add hid device: -71 [ 978.300324][ T9444] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 978.323239][ T9444] usb 5-1: USB disconnect, device number 16 [ 978.329367][ T30] audit: type=1400 audit(2000000659.819:1776): avc: denied { create } for pid=15157 comm="syz.0.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 978.354286][T15156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 978.436667][ T30] audit: type=1400 audit(2000000659.919:1777): avc: denied { getopt } for pid=15162 comm="syz.3.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 979.297337][ T30] audit: type=1400 audit(2000000660.729:1778): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 980.803053][T15187] overlayfs: missing 'lowerdir' [ 981.416560][ T30] audit: type=1400 audit(2000000662.899:1779): avc: denied { ioctl } for pid=15177 comm="syz.2.1910" path="socket:[43620]" dev="sockfs" ino=43620 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 981.727700][T15194] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 983.146802][T15205] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 983.164557][T15205] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 984.592992][ T30] audit: type=1326 audit(2000000666.079:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2988b8eba9 code=0x7ffc0000 [ 984.767127][T13008] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 984.842698][ T30] audit: type=1326 audit(2000000666.079:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2988b8eba9 code=0x7ffc0000 [ 984.935323][ T30] audit: type=1326 audit(2000000666.079:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f2988b8eba9 code=0x7ffc0000 [ 984.964321][T13008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.099608][T13008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.142134][ T30] audit: type=1326 audit(2000000666.079:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2988b8eba9 code=0x7ffc0000 [ 985.142501][T13008] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 985.225339][ T30] audit: type=1326 audit(2000000666.079:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2988b8eba9 code=0x7ffc0000 [ 985.352964][T13008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.368454][T13008] usb 3-1: config 0 descriptor?? [ 985.435339][ T30] audit: type=1326 audit(2000000666.079:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2988b8d510 code=0x7ffc0000 [ 985.548427][ T30] audit: type=1326 audit(2000000666.079:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2988b8eba9 code=0x7ffc0000 [ 985.617404][ T30] audit: type=1326 audit(2000000666.079:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2988b8eba9 code=0x7ffc0000 [ 985.713492][ T30] audit: type=1326 audit(2000000666.079:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2988b8eba9 code=0x7ffc0000 [ 985.737963][ T30] audit: type=1326 audit(2000000666.079:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.5.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2988b8eba9 code=0x7ffc0000 [ 987.117317][T15239] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 987.128509][T15239] cramfs: wrong magic [ 987.562076][T13008] usbhid 3-1:0.0: can't add hid device: -71 [ 987.590810][T13008] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 987.621411][T13008] usb 3-1: USB disconnect, device number 15 [ 988.876095][T15253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1924'. [ 990.105956][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 990.105998][ T30] audit: type=1400 audit(2000000671.559:1821): avc: denied { mount } for pid=15243 comm="syz.2.1925" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 991.022329][T15281] sctp: [Deprecated]: syz.3.1930 (pid 15281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 991.022329][T15281] Use struct sctp_sack_info instead [ 991.849263][T15291] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 991.907242][T15291] block device autoloading is deprecated and will be removed. [ 992.561661][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.568585][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.672534][ T30] audit: type=1400 audit(2000000674.159:1822): avc: denied { create } for pid=15293 comm="syz.0.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 992.780422][T15296] autofs: Bad value for 'fd' [ 993.390880][T15307] fuse: Bad value for 'fd' [ 993.778310][T15242] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 994.412046][T15242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.463511][T15242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.502677][T15242] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 994.514881][T15242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.530742][T15242] usb 3-1: config 0 descriptor?? [ 995.539434][ T30] audit: type=1400 audit(2000000677.039:1823): avc: denied { ioctl } for pid=15312 comm="syz.3.1938" path="socket:[43800]" dev="sockfs" ino=43800 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 995.571856][T15322] netlink: 'syz.3.1938': attribute type 10 has an invalid length. [ 995.580381][T15322] tipc: Resetting bearer [ 995.822399][T15328] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 996.191745][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1938'. [ 996.304285][ T30] audit: type=1400 audit(2000000677.789:1824): avc: denied { read write } for pid=15333 comm="syz.4.1943" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 996.458007][ T30] audit: type=1400 audit(2000000677.799:1825): avc: denied { open } for pid=15333 comm="syz.4.1943" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 996.473800][T15336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1941'. [ 996.539393][T15242] usbhid 3-1:0.0: can't add hid device: -71 [ 996.714090][T15339] netlink: 'syz.4.1943': attribute type 27 has an invalid length. [ 996.948424][T15242] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 996.959629][T15242] usb 3-1: USB disconnect, device number 16 [ 996.967126][ T30] audit: type=1400 audit(2000000678.059:1826): avc: denied { mounton } for pid=15333 comm="syz.4.1943" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 996.996112][ T30] audit: type=1400 audit(2000000678.079:1827): avc: denied { mount } for pid=15333 comm="syz.4.1943" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 997.644338][ T5923] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 997.748957][ T5923] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 997.780074][ T5923] usb 4-1: USB disconnect, device number 18 [ 998.270811][T15354] netlink: 'syz.4.1946': attribute type 10 has an invalid length. [ 998.280637][T15354] veth0_vlan: left promiscuous mode [ 998.288989][T15354] veth0_vlan: entered promiscuous mode [ 998.303451][T15354] team0: Device veth0_vlan failed to register rx_handler [ 998.593596][T15355] netlink: 'syz.0.1944': attribute type 2 has an invalid length. [ 998.602893][T15355] netlink: 'syz.0.1944': attribute type 11 has an invalid length. [ 998.612422][T15355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1944'. [ 1000.793070][ T30] audit: type=1400 audit(2000000682.289:1828): avc: denied { write } for pid=15374 comm="syz.3.1951" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1001.406856][ T30] audit: type=1400 audit(2000000682.299:1829): avc: denied { ioctl } for pid=15374 comm="syz.3.1951" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1001.739576][T15384] netlink: 'syz.2.1952': attribute type 9 has an invalid length. [ 1005.340872][T15421] ubi: mtd0 is already attached to ubi31 [ 1005.572901][T15422] pim6reg: entered allmulticast mode [ 1005.611143][ T30] audit: type=1326 audit(2000000687.039:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1005.691635][ T30] audit: type=1326 audit(2000000687.039:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1005.818357][ T30] audit: type=1326 audit(2000000687.039:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1006.229589][ T30] audit: type=1326 audit(2000000687.039:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1006.480297][ T30] audit: type=1326 audit(2000000687.049:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1006.664851][ T30] audit: type=1326 audit(2000000687.049:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1006.766491][ T30] audit: type=1326 audit(2000000687.049:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1006.796024][ T9444] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 1007.055913][ T30] audit: type=1326 audit(2000000687.049:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1007.079969][ T30] audit: type=1326 audit(2000000687.049:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1007.604717][ T30] audit: type=1326 audit(2000000687.049:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1007.660295][ T9444] usb 4-1: device descriptor read/all, error -71 [ 1007.703575][ T30] audit: type=1326 audit(2000000687.059:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1007.789444][ T30] audit: type=1326 audit(2000000687.059:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15418 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1009.545817][T15451] input: syz1 as /devices/virtual/input/input19 [ 1009.646382][T13008] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1009.956138][T13008] usb 6-1: Using ep0 maxpacket: 8 [ 1009.965185][T13008] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.997455][T13008] usb 6-1: config 0 has no interfaces? [ 1010.002945][T13008] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1010.599451][T13008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.634240][T13008] usb 6-1: config 0 descriptor?? [ 1011.711698][T15468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1969'. [ 1011.734369][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1011.734386][ T30] audit: type=1400 audit(2000000693.229:1859): avc: denied { bind } for pid=15456 comm="syz.2.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1011.855907][T15470] 9pnet_virtio: no channels available for device syz [ 1012.317887][T15471] input: syz1 as /devices/virtual/input/input20 [ 1012.334698][ T30] audit: type=1400 audit(2000000693.739:1860): avc: denied { listen } for pid=15456 comm="syz.2.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1012.372252][ T30] audit: type=1400 audit(2000000693.739:1861): avc: denied { connect } for pid=15456 comm="syz.2.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1012.393151][ T30] audit: type=1400 audit(2000000693.739:1862): avc: denied { write } for pid=15456 comm="syz.2.1969" path="socket:[44294]" dev="sockfs" ino=44294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1012.446110][ T30] audit: type=1400 audit(2000000693.829:1863): avc: denied { ioctl } for pid=5209 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3185 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1012.610847][T11201] usb 6-1: USB disconnect, device number 17 [ 1013.343273][T15471] netlink: 'syz.0.1971': attribute type 4 has an invalid length. [ 1013.391630][T15471] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1971'. [ 1013.700972][T15481] pimreg: entered allmulticast mode [ 1013.707876][T15486] pimreg: left allmulticast mode [ 1014.042733][T15491] ubi: mtd0 is already attached to ubi31 [ 1014.502969][ T30] audit: type=1400 audit(2000000695.979:1864): avc: denied { getopt } for pid=15482 comm="syz.4.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1016.869423][T15510] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1017.656647][ T30] audit: type=1400 audit(2000000698.629:1865): avc: denied { listen } for pid=15513 comm="syz.3.1983" lport=51251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1017.856045][ T5973] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1018.030325][ T30] audit: type=1400 audit(2000000699.519:1866): avc: denied { accept } for pid=15513 comm="syz.3.1983" lport=51251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1018.497648][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.031362][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.054114][ T5973] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1020.100031][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.272377][ T5973] usb 6-1: config 0 descriptor?? [ 1020.281286][ T5973] usb 6-1: can't set config #0, error -71 [ 1020.289745][ T5973] usb 6-1: USB disconnect, device number 18 [ 1020.927078][T15542] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1022.067556][ T30] audit: type=1400 audit(2000000703.569:1867): avc: denied { ioctl } for pid=15551 comm="syz.5.1991" path="socket:[44457]" dev="sockfs" ino=44457 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1022.525895][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1023.206118][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 1023.464194][ T5923] usb 3-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 1023.495952][ T5923] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1023.588072][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1023.942433][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.942536][T15572] sctp: [Deprecated]: syz.3.1995 (pid 15572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1023.942536][T15572] Use struct sctp_sack_info instead [ 1024.129290][T15584] gfs2: not a GFS2 filesystem [ 1024.335142][ T5923] usb 3-1: Product: syz [ 1024.363810][ T5923] usb 3-1: Manufacturer: syz [ 1024.415137][ T5923] usb 3-1: SerialNumber: syz [ 1024.473429][ T5923] usb 3-1: config 0 descriptor?? [ 1025.021581][T15596] ubi: mtd0 is already attached to ubi31 [ 1025.571294][ T30] audit: type=1400 audit(2000000706.969:1868): avc: denied { read open } for pid=15600 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.624169][ T30] audit: type=1400 audit(2000000706.969:1869): avc: denied { getattr } for pid=15600 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1026.076550][T11201] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1026.248240][T11201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.626677][T11201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.709845][T11201] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1026.836625][ T30] audit: type=1400 audit(2000000708.319:1870): avc: denied { ioctl } for pid=15608 comm="syz.0.2000" path="socket:[45326]" dev="sockfs" ino=45326 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1026.870271][T11201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.908736][T11201] usb 4-1: config 0 descriptor?? [ 1026.950690][T15242] usb 3-1: USB disconnect, device number 17 [ 1027.221903][T15642] siw: device registration error -23 [ 1027.604986][T15631] ceph: No mds server is up or the cluster is laggy [ 1027.623887][T15636] ceph: No mds server is up or the cluster is laggy [ 1028.296539][T11201] usbhid 4-1:0.0: can't add hid device: -71 [ 1028.324002][T11201] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1028.387693][T11201] usb 4-1: USB disconnect, device number 21 [ 1030.739920][T15672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2008'. [ 1030.856404][T15674] input: syz1 as /devices/virtual/input/input21 [ 1031.770836][ T30] audit: type=1400 audit(2000000713.169:1871): avc: denied { add_name } for pid=15588 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.648908][ T30] audit: type=1400 audit(2000000713.169:1872): avc: denied { create } for pid=15588 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1032.861315][ T30] audit: type=1400 audit(2000000713.169:1873): avc: denied { write } for pid=15588 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb5.link" dev="tmpfs" ino=9683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1033.963685][ T30] audit: type=1400 audit(2000000713.169:1874): avc: denied { append } for pid=15588 comm="dhcpcd-run-hook" name="resolv.conf.lapb5.link" dev="tmpfs" ino=9683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1034.024508][T15674] kthread_run failed with err -4 [ 1034.039042][ T30] audit: type=1400 audit(2000000715.079:1875): avc: denied { watch watch_reads } for pid=15689 comm="syz.5.2012" path="/222" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1034.114512][T15698] vxcan1 speed is unknown, defaulting to 1000 [ 1034.223157][T15698] lo speed is unknown, defaulting to 1000 [ 1034.229954][T15698] lo speed is unknown, defaulting to 1000 [ 1034.376576][ T30] audit: type=1400 audit(2000000715.509:1876): avc: denied { remove_name } for pid=15686 comm="rm" name="resolv.conf.lapb5.link" dev="tmpfs" ino=9683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.444481][ T30] audit: type=1400 audit(2000000715.509:1877): avc: denied { unlink } for pid=15686 comm="rm" name="resolv.conf.lapb5.link" dev="tmpfs" ino=9683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1035.755867][T15242] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1035.872481][T15721] usb usb8: usbfs: process 15721 (syz.0.2016) did not claim interface 0 before use [ 1035.887072][T15721] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1036.110973][T15242] usb 5-1: Using ep0 maxpacket: 8 [ 1036.234440][T15242] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1036.553507][T15242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.722972][T15242] usb 5-1: config 0 descriptor?? [ 1036.753427][T15242] gm12u320 5-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 1036.765927][T15242] gm12u320 5-1:0.0: probe with driver gm12u320 failed with error -5 [ 1037.361383][T15242] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1037.403715][T15242] usb-storage 5-1:0.0: device ignored [ 1037.766801][T15242] usb 5-1: USB disconnect, device number 17 [ 1037.968122][ T30] audit: type=1400 audit(2000000719.459:1878): avc: denied { ioctl } for pid=15743 comm="syz.2.2020" path="socket:[45521]" dev="sockfs" ino=45521 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1040.011046][T15777] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1040.080997][T15777] batadv1: entered promiscuous mode [ 1040.097267][T15777] batadv1: entered allmulticast mode [ 1040.332872][T15777] team0: Port device batadv1 added [ 1040.639964][ T8251] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1040.649552][ T8251] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1042.288433][ T30] audit: type=1400 audit(2000000723.779:1879): avc: denied { append } for pid=15791 comm="syz.2.2028" name="event3" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1043.081391][ T30] audit: type=1400 audit(2000000724.069:1880): avc: denied { map } for pid=15791 comm="syz.2.2028" path="socket:[45562]" dev="sockfs" ino=45562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1043.345394][ T30] audit: type=1400 audit(2000000724.069:1881): avc: denied { read accept } for pid=15791 comm="syz.2.2028" path="socket:[45562]" dev="sockfs" ino=45562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1043.674809][T15805] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1044.473927][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 1045.371608][T15822] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1046.301391][ T30] audit: type=1400 audit(2000000727.739:1882): avc: denied { write } for pid=15830 comm="syz.4.2038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1046.845940][ T30] audit: type=1400 audit(2000000728.219:1883): avc: denied { nlmsg_read } for pid=15834 comm="syz.2.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1047.534766][T15846] mkiss: ax0: crc mode is auto. [ 1049.512532][T15863] hub 9-0:1.0: USB hub found [ 1049.520473][T15863] hub 9-0:1.0: 1 port detected [ 1050.212135][T15880] fuse: Unknown parameter '' [ 1050.998944][T15889] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 1051.012416][T15889] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1051.770709][ T30] audit: type=1400 audit(2000000732.469:1884): avc: denied { mount } for pid=15883 comm="syz.2.2049" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1051.943965][T15888] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1051.950512][T15888] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1051.958403][T15888] vhci_hcd vhci_hcd.0: Device attached [ 1051.976889][T15892] vhci_hcd: connection closed [ 1052.071933][ T8251] vhci_hcd: stop threads [ 1052.087185][ T8251] vhci_hcd: release socket [ 1052.156387][ T8251] vhci_hcd: disconnect device [ 1052.165893][ T30] audit: type=1400 audit(2000000733.589:1885): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1052.186674][ T9444] vhci_hcd: vhci_device speed not set [ 1052.553896][T15900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1053.377148][T15901] tmpfs: Bad value for 'nr_blocks' [ 1053.429073][T15901] IPVS: Error connecting to the multicast addr [ 1053.713781][T15913] ubi: mtd0 is already attached to ubi31 [ 1054.207618][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.214866][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.744812][T15953] ubi: mtd0 is already attached to ubi31 [ 1057.469540][ T30] audit: type=1400 audit(2000000738.969:1886): avc: denied { remount } for pid=15955 comm="syz.0.2063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1058.314304][ T30] audit: type=1400 audit(2000000739.809:1887): avc: denied { read write } for pid=15966 comm="syz.4.2065" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1058.853735][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 1058.919476][ T30] audit: type=1400 audit(2000000739.839:1888): avc: denied { open } for pid=15966 comm="syz.4.2065" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1059.308690][ T30] audit: type=1400 audit(2000000739.839:1889): avc: denied { getopt } for pid=15966 comm="syz.4.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1059.520821][ T30] audit: type=1400 audit(2000000740.959:1890): avc: denied { read } for pid=15971 comm="syz.2.2066" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1059.589981][ T30] audit: type=1400 audit(2000000740.959:1891): avc: denied { open } for pid=15971 comm="syz.2.2066" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1060.276825][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 1060.297492][T15981] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 1060.297492][T15981] program syz.0.2067 not setting count and/or reply_len properly [ 1062.013284][T15996] ubi: mtd0 is already attached to ubi31 [ 1062.302071][T15997] ubi: mtd0 is already attached to ubi31 [ 1063.294207][T16010] netlink: 'syz.4.2074': attribute type 11 has an invalid length. [ 1063.694035][ T30] audit: type=1400 audit(2000000744.769:1892): avc: denied { mount } for pid=16001 comm="syz.4.2074" name="/" dev="hugetlbfs" ino=44971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1064.156424][T16016] ubi: mtd0 is already attached to ubi31 [ 1064.794728][ T30] audit: type=1400 audit(2000000745.269:1893): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1065.283356][ T30] audit: type=1400 audit(2000000746.709:1894): avc: denied { read } for pid=16020 comm="syz.5.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1065.855941][T16037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2080'. [ 1066.379507][T16031] syz.0.2078 (16031): /proc/16021/oom_adj is deprecated, please use /proc/16021/oom_score_adj instead. [ 1066.426590][T16041] Invalid ELF header magic: != ELF [ 1066.497824][ T30] audit: type=1400 audit(2000000747.919:1895): avc: denied { module_load } for pid=16030 comm="syz.3.2079" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1066.744651][ T30] audit: type=1400 audit(2000000748.159:1896): avc: denied { getopt } for pid=16021 comm="syz.0.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1068.989443][ T30] audit: type=1400 audit(2000000750.089:1897): avc: denied { write } for pid=16062 comm="syz.5.2085" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1069.013775][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2076'. [ 1069.191361][T16071] QAT: failed to copy from user cfg_data. [ 1070.530923][T16093] ubi: mtd0 is already attached to ubi31 [ 1071.078211][T16098] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1071.598978][T16106] ubi: mtd0 is already attached to ubi31 [ 1072.324383][T16114] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1072.333623][T16114] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1072.343981][ T30] audit: type=1400 audit(2000000753.809:1898): avc: denied { mounton } for pid=16108 comm="syz.3.2091" path="/syzcgroup/unified/syz3" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1072.370815][T16114] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1072.512293][T16119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2092'. [ 1072.523155][T16119] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1073.637339][T16131] ubi: mtd0 is already attached to ubi31 [ 1073.997955][T16134] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 1074.139720][T16134] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1074.559733][T16141] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.686627][ T30] audit: type=1400 audit(2000000757.049:1899): avc: denied { remount } for pid=16153 comm="syz.4.2099" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1076.186614][T11201] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1076.811077][T11201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.824124][T11201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.305022][T11201] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1077.316283][T11201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.341303][T11201] usb 4-1: config 0 descriptor?? [ 1077.925907][T16184] usb usb8: usbfs: process 16184 (syz.5.2106) did not claim interface 0 before use [ 1077.981452][T16184] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1078.297291][ T30] audit: type=1400 audit(2000000759.799:1900): avc: denied { watch } for pid=16186 comm="syz.4.2107" path="/437/bus" dev="tmpfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1079.055019][ T30] audit: type=1400 audit(2000000759.799:1901): avc: denied { watch_sb } for pid=16186 comm="syz.4.2107" path="/437/bus" dev="tmpfs" ino=2357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1079.097757][T11201] usbhid 4-1:0.0: can't add hid device: -71 [ 1079.117586][T11201] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1079.259723][ T9444] libceph: connect (1)[c::]:6789 error -22 [ 1079.266607][ T9444] libceph: mon0 (1)[c::]:6789 connect error [ 1079.479918][T16193] ceph: No mds server is up or the cluster is laggy [ 1079.507569][T11201] usb 4-1: USB disconnect, device number 22 [ 1079.988533][ T9444] libceph: connect (1)[c::]:6789 error -22 [ 1080.003422][ T9444] libceph: mon0 (1)[c::]:6789 connect error [ 1080.274847][ T30] audit: type=1326 audit(2000000761.749:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1080.397652][T16199] pim6reg: entered allmulticast mode [ 1080.745924][ T30] audit: type=1326 audit(2000000761.749:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1081.294926][ T30] audit: type=1326 audit(2000000761.759:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1081.616461][ T30] audit: type=1326 audit(2000000761.759:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1081.781149][ T30] audit: type=1326 audit(2000000761.759:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1081.816826][ T30] audit: type=1326 audit(2000000761.759:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1082.346687][ T30] audit: type=1326 audit(2000000761.759:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1082.370906][ T30] audit: type=1326 audit(2000000761.759:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1082.395005][ T30] audit: type=1326 audit(2000000761.759:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1082.461134][ T30] audit: type=1326 audit(2000000761.759:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1082.564990][T16227] netlink: 'syz.4.2116': attribute type 4 has an invalid length. [ 1082.732552][ T30] audit: type=1326 audit(2000000761.759:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.2.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1083.176177][T13008] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1083.327587][T13008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.400433][T13008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.416192][T13008] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1083.497229][T13008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.527996][T16239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2119'. [ 1083.540648][T13008] usb 4-1: config 0 descriptor?? [ 1083.977559][T16249] misc userio: No port type given on /dev/userio [ 1085.648661][T13008] usbhid 4-1:0.0: can't add hid device: -71 [ 1085.655991][T13008] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1086.317219][T13008] usb 4-1: USB disconnect, device number 23 [ 1088.030794][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1088.030805][ T30] audit: type=1400 audit(2000000769.529:1957): avc: denied { read } for pid=16282 comm="syz.4.2129" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1088.516477][ T30] audit: type=1400 audit(2000000769.529:1958): avc: denied { open } for pid=16282 comm="syz.4.2129" path="/441/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1088.783226][ T30] audit: type=1400 audit(2000000770.269:1959): avc: denied { ioctl } for pid=16282 comm="syz.4.2129" path="/441/file0/file0" dev="fuse" ino=64 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1089.036986][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'. [ 1089.046595][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 1089.056338][T16292] netlink: 'syz.0.2130': attribute type 12 has an invalid length. [ 1089.064200][T16292] netlink: 'syz.0.2130': attribute type 11 has an invalid length. [ 1091.381979][T16310] ubi: mtd0 is already attached to ubi31 [ 1091.388711][T11201] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1091.812411][T11201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.844495][T11201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.882637][T11201] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1091.938320][T11201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.979442][T11201] usb 5-1: config 0 descriptor?? [ 1092.200751][T16315] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2136'. [ 1093.176719][ T5923] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1093.338573][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.428927][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.459259][ T5923] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1093.501860][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.547665][ T5923] usb 6-1: config 0 descriptor?? [ 1094.122999][T11201] usbhid 5-1:0.0: can't add hid device: -71 [ 1094.129828][T11201] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1094.160068][T16336] random: crng reseeded on system resumption [ 1094.212042][ T30] audit: type=1400 audit(2000000775.649:1960): avc: denied { lock } for pid=16332 comm="syz.2.2141" path="socket:[46569]" dev="sockfs" ino=46569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1094.279665][ T30] audit: type=1400 audit(2000000775.659:1961): avc: denied { write } for pid=16332 comm="syz.2.2141" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1094.288472][T11201] usb 5-1: USB disconnect, device number 18 [ 1094.547105][ T30] audit: type=1400 audit(2000000775.659:1962): avc: denied { ioctl } for pid=16332 comm="syz.2.2141" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1094.580478][ T30] audit: type=1400 audit(2000000776.069:1963): avc: denied { open } for pid=16341 comm="syz.0.2142" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1095.198478][T16349] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1096.183503][ T5923] usbhid 6-1:0.0: can't add hid device: -71 [ 1096.311490][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1096.329857][ T5923] usb 6-1: USB disconnect, device number 19 [ 1096.578179][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.650649][T16361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1096.832440][T11201] lo speed is unknown, defaulting to 1000 [ 1096.839257][T11201] syz0: Port: 1 Link ACTIVE [ 1097.102337][T16363] block nbd5: Attempted send on invalid socket [ 1097.175956][T16363] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1097.512803][T16363] block nbd5: Attempted send on invalid socket [ 1097.732046][T16363] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1098.207899][T16375] ubi: mtd0 is already attached to ubi31 [ 1098.555465][T16379] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1099.127988][ T5973] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1099.428016][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.441459][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.658038][ T5973] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1099.702198][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.018093][ T5973] usb 5-1: config 0 descriptor?? [ 1100.634599][ T5973] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1100.664199][T16388] ubi: mtd0 is already attached to ubi31 [ 1100.702241][ T5973] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1100.833779][ T5973] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 1101.964752][ T30] audit: type=1400 audit(2000000783.309:1964): avc: denied { watch_sb } for pid=16392 comm="syz.2.2154" path="/427/bus" dev="tmpfs" ino=2299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1102.714712][T16413] ubi: mtd0 is already attached to ubi31 [ 1102.764158][ T9444] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 1103.112065][T16417] random: crng reseeded on system resumption [ 1103.247194][ T30] audit: type=1400 audit(2000000784.749:1965): avc: denied { bind } for pid=16405 comm="syz.2.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1103.901615][T16432] netlink: 'syz.2.2160': attribute type 13 has an invalid length. [ 1103.956864][ T30] audit: type=1400 audit(2000000785.279:1966): avc: denied { connect } for pid=16419 comm="syz.5.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1104.080799][ T30] audit: type=1400 audit(2000000785.279:1967): avc: denied { setopt } for pid=16419 comm="syz.5.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1104.111922][ T30] audit: type=1400 audit(2000000785.279:1968): avc: denied { bind } for pid=16419 comm="syz.5.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1104.293417][ T30] audit: type=1400 audit(2000000785.279:1969): avc: denied { write } for pid=16419 comm="syz.5.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1104.316199][ T5973] usb 5-1: USB disconnect, device number 19 [ 1104.493299][ T30] audit: type=1400 audit(2000000785.279:1970): avc: denied { read } for pid=16419 comm="syz.5.2161" path="socket:[47778]" dev="sockfs" ino=47778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1104.568820][T16432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1105.346397][T16444] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2164'. [ 1110.227419][T16493] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 1110.259640][T16493] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1110.794676][ T30] audit: type=1400 audit(2000000792.119:1971): avc: denied { mount } for pid=16482 comm="syz.2.2175" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1110.938667][ T30] audit: type=1400 audit(2000000792.409:1972): avc: denied { getopt } for pid=16499 comm="syz.4.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1111.141870][T16505] ubi: mtd0 is already attached to ubi31 [ 1113.241226][T16528] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1113.292531][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'. [ 1113.599487][ T9444] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1113.929534][T16537] vxcan1 speed is unknown, defaulting to 1000 [ 1114.317431][ T9444] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1114.846431][T16537] lo speed is unknown, defaulting to 1000 [ 1114.858639][T16537] lo speed is unknown, defaulting to 1000 [ 1115.886219][ T9444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.894239][ T9444] usb 3-1: Product: syz [ 1115.907314][ T9444] usb 3-1: Manufacturer: syz [ 1115.911959][ T9444] usb 3-1: SerialNumber: syz [ 1115.926696][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.932991][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.953349][ T9444] usb 3-1: config 0 descriptor?? [ 1116.297163][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'. [ 1116.554722][T16551] ubi: mtd0 is already attached to ubi31 [ 1116.854173][T16555] ubi: mtd0 is already attached to ubi31 [ 1117.280232][T16563] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1118.929105][ T9444] usb 3-1: USB disconnect, device number 18 [ 1120.737452][ T30] audit: type=1400 audit(2000000802.239:1973): avc: denied { read } for pid=16586 comm="syz.5.2198" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1121.730598][ T30] audit: type=1400 audit(2000000802.259:1974): avc: denied { open } for pid=16586 comm="syz.5.2198" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1121.763267][ T30] audit: type=1400 audit(2000000803.069:1975): avc: denied { ioctl } for pid=16586 comm="syz.5.2198" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1122.249361][ T30] audit: type=1400 audit(2000000803.409:1976): avc: denied { setopt } for pid=16586 comm="syz.5.2198" lport=51537 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1122.481477][ T30] audit: type=1326 audit(2000000803.979:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1122.519054][T16600] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1122.564785][T16600] CPU: 0 UID: 0 PID: 16600 Comm: syz.2.2199 Not tainted syzkaller #0 PREEMPT(full) [ 1122.564813][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1122.564826][T16600] Call Trace: [ 1122.564834][T16600] [ 1122.564842][T16600] dump_stack_lvl+0x16c/0x1f0 [ 1122.564874][T16600] sysfs_warn_dup+0x7f/0xa0 [ 1122.564900][T16600] sysfs_do_create_link_sd+0x124/0x140 [ 1122.564929][T16600] sysfs_create_link+0x61/0xc0 [ 1122.564948][T16600] device_add+0x62c/0x1aa0 [ 1122.564973][T16600] ? __pfx_device_add+0x10/0x10 [ 1122.564998][T16600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1122.565020][T16600] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1122.565047][T16600] wiphy_register+0x1df4/0x29f0 [ 1122.565070][T16600] ? netdev_run_todo+0x864/0x1320 [ 1122.565095][T16600] ? __dev_printk+0x270/0x270 [ 1122.565121][T16600] ? __pfx_wiphy_register+0x10/0x10 [ 1122.565154][T16600] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1122.565177][T16600] ieee80211_register_hw+0x2546/0x4120 [ 1122.565208][T16600] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1122.565236][T16600] ? find_held_lock+0x2b/0x80 [ 1122.565259][T16600] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1122.565279][T16600] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1122.565301][T16600] ? __hrtimer_setup+0x176/0x280 [ 1122.565323][T16600] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1122.565365][T16600] ? trace_kmalloc+0x2b/0xd0 [ 1122.565386][T16600] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1122.565408][T16600] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1122.565435][T16600] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1122.565463][T16600] ? __asan_memcpy+0x3c/0x60 [ 1122.565494][T16600] hwsim_new_radio_nl+0xb51/0x12c0 [ 1122.565534][T16600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1122.565572][T16600] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1122.565602][T16600] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1122.565639][T16600] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1122.565669][T16600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1122.565706][T16600] ? bpf_lsm_capable+0x9/0x10 [ 1122.565732][T16600] ? security_capable+0x7e/0x260 [ 1122.565755][T16600] ? ns_capable+0xd7/0x110 [ 1122.565778][T16600] genl_rcv_msg+0x55c/0x800 [ 1122.565808][T16600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1122.565836][T16600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1122.565873][T16600] netlink_rcv_skb+0x155/0x420 [ 1122.565897][T16600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1122.565925][T16600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1122.565959][T16600] ? netlink_deliver_tap+0x1ae/0xd30 [ 1122.565986][T16600] genl_rcv+0x28/0x40 [ 1122.566009][T16600] netlink_unicast+0x5aa/0x870 [ 1122.566037][T16600] ? __pfx_netlink_unicast+0x10/0x10 [ 1122.566061][T16600] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1122.566092][T16600] netlink_sendmsg+0x8d1/0xdd0 [ 1122.566117][T16600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1122.566146][T16600] ____sys_sendmsg+0xa98/0xc70 [ 1122.566171][T16600] ? copy_msghdr_from_user+0x10a/0x160 [ 1122.566192][T16600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1122.566232][T16600] ___sys_sendmsg+0x134/0x1d0 [ 1122.566256][T16600] ? __pfx____sys_sendmsg+0x10/0x10 [ 1122.566311][T16600] __sys_sendmsg+0x16d/0x220 [ 1122.566334][T16600] ? __pfx___sys_sendmsg+0x10/0x10 [ 1122.566367][T16600] ? __secure_computing+0x28e/0x3b0 [ 1122.566399][T16600] do_syscall_64+0xcd/0x4c0 [ 1122.566426][T16600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.566445][T16600] RIP: 0033:0x7fb78fb8eba9 [ 1122.566460][T16600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.566478][T16600] RSP: 002b:00007fb78ddb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1122.566493][T16600] RAX: ffffffffffffffda RBX: 00007fb78fdd6180 RCX: 00007fb78fb8eba9 [ 1122.566504][T16600] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 1122.566514][T16600] RBP: 00007fb78fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1122.566530][T16600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1122.566540][T16600] R13: 00007fb78fdd6218 R14: 00007fb78fdd6180 R15: 00007ffc0308cb68 [ 1122.566565][T16600] [ 1123.106522][ T30] audit: type=1326 audit(2000000804.009:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1123.153828][ T30] audit: type=1326 audit(2000000804.009:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1123.177806][ T30] audit: type=1326 audit(2000000804.009:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1123.201664][ T30] audit: type=1326 audit(2000000804.009:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1123.225918][ T30] audit: type=1326 audit(2000000804.009:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1123.833959][T16613] ubi: mtd0 is already attached to ubi31 [ 1124.336312][ T5973] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1124.577864][ T5973] usb 6-1: Using ep0 maxpacket: 8 [ 1124.611856][ T5973] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 1124.720352][ T5973] usb 6-1: config 0 has no interface number 0 [ 1124.940107][ T5973] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 1124.992125][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.019834][ T5973] usb 6-1: Product: syz [ 1125.026031][ T5973] usb 6-1: Manufacturer: syz [ 1125.030660][ T5973] usb 6-1: SerialNumber: syz [ 1125.041949][ T5973] usb 6-1: config 0 descriptor?? [ 1125.683269][ T5973] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected [ 1125.709481][ T5973] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1125.878459][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 1126.178519][T16635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.340869][T16635] team0: Port device batadv0 added [ 1126.356499][T11201] usb 6-1: USB disconnect, device number 20 [ 1126.871187][T11201] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1127.107601][T11201] kobil_sct 6-1:0.148: device disconnected [ 1127.945947][T16648] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2209'. [ 1128.641074][T16655] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 1128.673007][T16655] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1129.320154][T16659] netlink: 'syz.3.2212': attribute type 10 has an invalid length. [ 1129.592604][T16664] ubi: mtd0 is already attached to ubi31 [ 1129.910866][T16669] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1130.135086][ T9444] IPVS: starting estimator thread 0... [ 1130.249955][T16678] program syz.2.2217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1130.259704][T16674] IPVS: using max 79 ests per chain, 189600 per kthread [ 1131.192093][T16685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.201164][T16685] team0: Port device batadv0 added [ 1131.213482][T16688] ubi: mtd0 is already attached to ubi31 [ 1135.193753][T16723] usb usb8: usbfs: process 16723 (syz.3.2224) did not claim interface 0 before use [ 1135.205257][T16723] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1135.488122][T16732] ubi: mtd0 is already attached to ubi31 [ 1135.584304][T16731] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2227'. [ 1136.817006][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2231'. [ 1136.828262][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2231'. [ 1137.518602][T16731] bond0 (unregistering): Released all slaves [ 1137.721894][T16744] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2230'. [ 1138.155133][T16759] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2233'. [ 1138.855090][T16768] rdma_rxe: rxe_newlink: failed to add lo [ 1139.489753][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1139.489765][ T30] audit: type=1400 audit(2000000820.989:2004): avc: denied { map } for pid=16769 comm="syz.2.2237" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1139.736618][T16777] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1140.959169][T16790] ubi: mtd0 is already attached to ubi31 [ 1141.048438][T11201] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1141.744069][T11201] usb 6-1: config 65 has an invalid interface number: 95 but max is 0 [ 1141.760199][T11201] usb 6-1: config 65 has no interface number 0 [ 1141.823421][T11201] usb 6-1: string descriptor 0 read error: -22 [ 1141.844713][T11201] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 1141.897155][T11201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.962310][T11201] usbtest 6-1:65.95: Linux gadget zero [ 1142.008656][T11201] usbtest 6-1:65.95: low-speed {control in/out} tests (+alt) [ 1142.221922][T16808] batadv_slave_0: entered promiscuous mode [ 1142.467435][T16812] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[16812] [ 1142.609780][ T30] audit: type=1400 audit(2000000823.989:2005): avc: denied { shutdown } for pid=16801 comm="syz.2.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1142.629465][ C1] vkms_vblank_simulate: vblank timer overrun [ 1144.868153][T11201] usb 6-1: USB disconnect, device number 21 [ 1145.236481][ T30] audit: type=1326 audit(2000000826.709:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1145.259981][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.302289][T16825] new mount options do not match the existing superblock, will be ignored [ 1145.330532][T16825] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1145.440774][T16825] vxcan1 speed is unknown, defaulting to 1000 [ 1145.464696][ T30] audit: type=1326 audit(2000000826.709:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1145.568243][T16825] lo speed is unknown, defaulting to 1000 [ 1145.574700][T16825] lo speed is unknown, defaulting to 1000 [ 1145.761933][ T30] audit: type=1326 audit(2000000826.709:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1145.831614][ T30] audit: type=1400 audit(2000000826.819:2009): avc: denied { remount } for pid=16821 comm="syz.4.2248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1145.887736][ T30] audit: type=1326 audit(2000000827.259:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1145.911194][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.924814][ T30] audit: type=1326 audit(2000000827.259:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1145.948296][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.960000][T16833] tmpfs: Bad value for 'mpol' [ 1148.947998][ T30] audit: type=1400 audit(2000000830.439:2012): avc: denied { mount } for pid=16840 comm="syz.4.2251" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1149.069612][T16863] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1149.374110][ T30] audit: type=1400 audit(2000000830.809:2013): avc: denied { watch watch_reads } for pid=16859 comm="syz.5.2255" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1149.576706][T16872] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1150.577533][ T30] audit: type=1400 audit(2000000832.069:2014): avc: denied { bind } for pid=16877 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1151.135242][ T30] audit: type=1400 audit(2000000832.079:2015): avc: denied { node_bind } for pid=16877 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1151.280484][T16885] ubi: mtd0 is already attached to ubi31 [ 1151.830389][T16897] Invalid source name [ 1154.096205][ T5973] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1154.406781][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 1154.434858][ T5973] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1154.451902][ T5973] usb 4-1: config 8 has an invalid descriptor of length 86, skipping remainder of the config [ 1154.470045][ T5973] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1154.511773][ T5973] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1154.523217][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.531879][ T5973] usb 4-1: Product: syz [ 1154.538619][ T5973] usb 4-1: Manufacturer: syz [ 1154.543564][ T5973] usb 4-1: SerialNumber: syz [ 1155.096522][ T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1155.258204][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.460089][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.497493][ T43] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1155.524933][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.584412][ T43] usb 5-1: config 0 descriptor?? [ 1157.022715][ T5973] usb 4-1: USB disconnect, device number 24 [ 1157.579664][T16956] netlink: 'syz.0.2271': attribute type 13 has an invalid length. [ 1159.351085][T16956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1159.697265][T16969] befs: (nullb0): No write support. Marking filesystem read-only [ 1159.710897][T16969] befs: (nullb0): invalid magic header [ 1159.735745][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2275'. [ 1160.047094][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 1160.053401][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1160.100037][ T43] usb 5-1: USB disconnect, device number 20 [ 1160.347217][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 1161.915191][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2279'. [ 1162.471057][T16999] blktrace: Concurrent blktraces are not allowed on loop6 [ 1163.375670][T17004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1163.384683][T17004] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1163.395386][T17004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1163.407282][T17004] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1163.416594][T17004] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1163.496850][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1165.063663][T17021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1165.656935][ T30] audit: type=1400 audit(2000000847.159:2016): avc: denied { listen } for pid=17023 comm="syz.4.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1166.348245][ T30] audit: type=1400 audit(2000000847.759:2017): avc: denied { accept } for pid=17023 comm="syz.4.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1167.753022][T17047] netlink: 'syz.2.2291': attribute type 6 has an invalid length. [ 1168.536650][ T30] audit: type=1400 audit(2000000849.989:2018): avc: denied { map } for pid=17048 comm="syz.3.2293" path="/dev/sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1168.738960][T17046] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2292'. [ 1169.076443][T17059] misc userio: No port type given on /dev/userio [ 1169.926408][T17071] overlayfs: missing 'lowerdir' [ 1169.946454][ T30] audit: type=1400 audit(2000000851.429:2019): avc: denied { mounton } for pid=17060 comm="syz.3.2295" path="/472/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1169.979669][T17072] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2297'. [ 1170.934793][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805635f400: rx timeout, send abort [ 1171.106576][ T30] audit: type=1400 audit(2000000852.609:2020): avc: denied { read } for pid=5206 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1171.156215][ T30] audit: type=1400 audit(2000000852.609:2021): avc: denied { search } for pid=5206 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1171.178566][ T30] audit: type=1400 audit(2000000852.609:2022): avc: denied { append } for pid=5206 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1171.273786][ T30] audit: type=1400 audit(2000000852.609:2023): avc: denied { open } for pid=5206 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1171.392412][ T30] audit: type=1400 audit(2000000852.609:2024): avc: denied { getattr } for pid=5206 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1171.443096][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805635f400: abort rx timeout. Force session deactivation [ 1172.765005][T17072] bond0 (unregistering): Released all slaves [ 1174.429817][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2303'. [ 1174.611348][T17070] bridge0: port 3(team0) entered disabled state [ 1174.618427][T17070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.625709][T17070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.350126][T17070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.747669][ T30] audit: type=1400 audit(2000000857.099:2025): avc: denied { ioctl } for pid=17114 comm="syz.3.2306" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1176.826930][T17073] : entered promiscuous mode [ 1176.835546][ T30] audit: type=1400 audit(2000000858.189:2026): avc: denied { setopt } for pid=17119 comm="syz.4.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1176.841432][ T8251] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.866254][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.872509][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.901457][ T8251] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.910702][ T8251] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.921115][ T8251] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.419362][T17130] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2308'. [ 1177.432763][ T30] audit: type=1400 audit(2000000858.899:2027): avc: denied { bind } for pid=17123 comm="syz.3.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1177.474241][T17130] hsr_slave_0: left promiscuous mode [ 1177.481850][T17130] hsr_slave_1: left promiscuous mode [ 1178.132713][T17141] netlink: 'syz.4.2309': attribute type 13 has an invalid length. [ 1178.400815][T17146] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1178.746895][T17149] program syz.5.2310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1179.303040][T17141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1179.824903][T17156] ubi: mtd0 is already attached to ubi31 [ 1182.799816][ T30] audit: type=1400 audit(2000000864.299:2028): avc: denied { create } for pid=17172 comm="syz.4.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1183.138168][T17178] netlink: 'syz.3.2318': attribute type 6 has an invalid length. [ 1184.036468][ T30] audit: type=1400 audit(2000000865.509:2029): avc: denied { mount } for pid=17179 comm="syz.2.2320" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1185.451281][T17173] SELinux: failed to load policy [ 1185.511077][ T30] audit: type=1400 audit(2000000866.979:2030): avc: denied { create } for pid=17199 comm="syz.0.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1186.196536][ T30] audit: type=1400 audit(2000000867.309:2031): avc: denied { bind } for pid=17199 comm="syz.0.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1186.240143][ T30] audit: type=1400 audit(2000000867.729:2032): avc: denied { create } for pid=17202 comm="syz.5.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1186.463027][ T30] audit: type=1400 audit(2000000867.729:2033): avc: denied { ioctl } for pid=17202 comm="syz.5.2326" path="socket:[50547]" dev="sockfs" ino=50547 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1188.621017][T17205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2325'. [ 1189.210502][ T30] audit: type=1400 audit(2000000870.709:2034): avc: denied { ioctl } for pid=17234 comm="syz.5.2332" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1189.316575][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2332'. [ 1189.867004][ T30] audit: type=1400 audit(2000000871.369:2035): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1191.346221][ T30] audit: type=1400 audit(2000000872.809:2036): avc: denied { connect } for pid=17252 comm="syz.4.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1192.108998][ T30] audit: type=1400 audit(2000000873.569:2037): avc: denied { bind } for pid=17252 comm="syz.4.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1192.599387][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 1192.626589][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'. [ 1193.652360][T17262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1195.130940][T17273] netlink: 'syz.4.2341': attribute type 39 has an invalid length. [ 1195.692272][T17278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17278 comm=syz.4.2341 [ 1195.726625][T17288] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2345'. [ 1195.757623][T17288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2345'. [ 1195.944915][ T30] audit: type=1400 audit(2000000877.319:2038): avc: denied { getattr } for pid=17279 comm="syz.3.2343" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1195.974607][T17294] tipc: Enabled bearer , priority 0 [ 1196.068440][T17295] program syz.0.2344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1196.079206][T17288] smc: removing ib device syz2 [ 1196.134489][ T30] audit: type=1400 audit(2000000877.329:2039): avc: denied { mount } for pid=17279 comm="syz.3.2343" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1196.298156][ T30] audit: type=1400 audit(2000000877.789:2040): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1197.303956][T17307] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1197.354309][T17307] team0: Port device batadv1 added [ 1197.696584][T13008] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1198.428879][T13008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.439563][T13008] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1198.458424][T13008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.479619][T13008] usb 3-1: config 0 descriptor?? [ 1199.141662][ T30] audit: type=1400 audit(2000000880.639:2041): avc: denied { setopt } for pid=17311 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1200.428208][ T30] audit: type=1400 audit(2000000880.669:2042): avc: denied { read } for pid=17311 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1200.450336][T17324] ubi: mtd0 is already attached to ubi31 [ 1200.933157][T13008] usbhid 3-1:0.0: can't add hid device: -71 [ 1200.947140][T13008] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1201.156045][T13008] usb 3-1: USB disconnect, device number 19 [ 1203.570808][ T30] audit: type=1400 audit(2000000885.019:2043): avc: denied { bind } for pid=17344 comm="syz.2.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1203.943959][T17354] ip6erspan0: entered promiscuous mode [ 1204.099913][T15625] Bluetooth: hci5: Frame reassembly failed (-84) [ 1204.246234][T17288] tipc: Disabling bearer [ 1205.825789][T13008] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1205.997319][T13008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.216359][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1206.739388][T13008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.814099][T13008] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1206.896426][T13008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.931806][T13008] usb 6-1: config 0 descriptor?? [ 1208.560762][T13008] usbhid 6-1:0.0: can't add hid device: -71 [ 1208.569405][T13008] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1208.582099][T13008] usb 6-1: USB disconnect, device number 22 [ 1209.736851][ T30] audit: type=1400 audit(2000000890.509:2044): avc: denied { bind } for pid=17390 comm="syz.2.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1209.934831][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 1210.244102][ T8250] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1210.356353][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 1210.368869][ T8250] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.509240][T17419] team0: Port device batadv0 removed [ 1211.539368][ T8250] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.559027][T17417] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2370'. [ 1211.633810][T17421] team0: Mode changed to "loadbalance" [ 1211.646898][ T8250] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.753921][T17417] hsr_slave_0: left promiscuous mode [ 1211.764496][T17417] hsr_slave_1: left promiscuous mode [ 1212.630271][ T30] audit: type=1400 audit(2000000893.699:2045): avc: denied { bind } for pid=17428 comm="syz.5.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1212.939446][T17434] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1212.946022][T17434] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1212.954420][T17434] vhci_hcd vhci_hcd.0: Device attached [ 1213.732580][T17435] vhci_hcd: connection closed [ 1214.115850][T15625] vhci_hcd: stop threads [ 1214.143458][T15625] vhci_hcd: release socket [ 1214.166386][T13008] vhci_hcd: vhci_device speed not set [ 1214.178229][T15625] vhci_hcd: disconnect device [ 1214.274376][T13008] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1214.839373][T17452] hfsplus: unable to find HFS+ superblock [ 1215.503998][T17452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2377'. [ 1215.513153][T17452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2377'. [ 1215.785996][T17449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1216.086032][ T5970] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1216.701463][T17456] block nbd2: Attempted send on invalid socket [ 1216.709118][T17456] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.724050][T17456] block nbd2: Attempted send on invalid socket [ 1216.731912][T17456] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.743266][T17456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1216.755997][T17456] block nbd2: Attempted send on invalid socket [ 1216.764356][T17456] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.782820][T17456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1216.892304][T17456] block nbd2: Attempted send on invalid socket [ 1216.899474][T17456] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1216.910497][T17456] block nbd2: Attempted send on invalid socket [ 1217.117161][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2381'. [ 1217.126828][T17456] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1217.146369][T17469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2381'. [ 1217.168484][T17470] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1217.176923][T17470] batadv2: entered promiscuous mode [ 1217.182457][T17470] batadv2: entered allmulticast mode [ 1217.189063][T17470] team0: Port device batadv2 added [ 1217.299256][T17471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2382'. [ 1217.319563][T17456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1217.866065][T17456] block nbd2: Attempted send on invalid socket [ 1217.872244][T17456] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1217.876266][ T3648] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1217.891345][ T3648] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1218.262145][T17456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1218.297157][ T30] audit: type=1400 audit(2000000899.799:2046): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1218.344679][T17456] block nbd2: Attempted send on invalid socket [ 1218.509763][T17456] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1218.552869][T17456] block nbd2: Attempted send on invalid socket [ 1218.861935][T17484] lo speed is unknown, defaulting to 1000 [ 1218.873538][T17484] lo speed is unknown, defaulting to 1000 [ 1219.076417][T17456] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1219.279336][T17456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1219.346466][T17456] block nbd2: Attempted send on invalid socket [ 1219.363897][T17456] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1219.436241][T17456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1219.711325][T17456] block nbd2: Attempted send on invalid socket [ 1219.766380][T17456] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1219.776984][T17456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1219.837137][T17456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1219.916083][T13008] vhci_hcd: vhci_device speed not set [ 1219.934691][T17456] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1220.941740][ T5970] usb 6-1: device descriptor read/all, error -71 [ 1221.122394][T17508] geneve3: entered promiscuous mode [ 1221.128417][T17508] geneve3: entered allmulticast mode [ 1225.140041][T17551] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1225.548284][T17556] futex_wake_op: syz.3.2401 tries to shift op by 36; fix this program [ 1225.810975][ T30] audit: type=1800 audit(2000000907.209:2047): pid=17556 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2401" name="bus" dev="overlay" ino=2635 res=0 errno=0 [ 1225.954424][T17552] blk_print_req_error: 2 callbacks suppressed [ 1225.954441][T17552] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1226.877906][T17563] binder: 17561:17563 ioctl c0306201 0 returned -14 [ 1227.239457][T17568] overlayfs: failed to resolve './file1': -2 [ 1227.873779][T17578] netdevsim netdevsim3: Direct firmware load for . [ 1227.873779][T17578] failed with error -2 [ 1227.885170][T17578] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1227.885170][T17578] [ 1227.894835][ T30] audit: type=1400 audit(2000000909.349:2048): avc: denied { watch watch_reads } for pid=17572 comm="syz.3.2405" path="/syzcgroup/unified/syz3" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1228.070235][ T30] audit: type=1400 audit(2000000909.569:2049): avc: denied { ioctl } for pid=17566 comm="syz.0.2404" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1229.283768][ T30] audit: type=1400 audit(2000000910.759:2050): avc: denied { listen } for pid=17590 comm="syz.5.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1230.136632][ T30] audit: type=1400 audit(2000000910.759:2051): avc: denied { accept } for pid=17590 comm="syz.5.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1232.137644][T17620] ubi: mtd0 is already attached to ubi31 [ 1232.472728][T17621] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1234.299296][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2418'. [ 1234.407054][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'. [ 1234.638293][T17645] netlink: 'syz.5.2419': attribute type 10 has an invalid length. [ 1234.650919][T17645] veth0_vlan: left promiscuous mode [ 1234.657714][T17645] veth0_vlan: entered promiscuous mode [ 1234.665201][T17645] team0: Device veth0_vlan failed to register rx_handler [ 1235.723163][ T30] audit: type=1400 audit(2000000917.189:2052): avc: denied { read } for pid=17648 comm="syz.0.2422" path="socket:[52381]" dev="sockfs" ino=52381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1235.854563][T17652] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 1236.492992][T17657] ubi: mtd0 is already attached to ubi31 [ 1237.679883][ T30] audit: type=1326 audit(2000000919.179:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1237.709099][ T30] audit: type=1326 audit(2000000919.179:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1237.902310][ T30] audit: type=1326 audit(2000000919.179:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1237.911681][T17667] input: syz0 as /devices/virtual/input/input22 [ 1237.970244][ T30] audit: type=1326 audit(2000000919.179:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1238.072500][ T30] audit: type=1326 audit(2000000919.179:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1238.282980][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.290145][ T30] audit: type=1326 audit(2000000919.179:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1238.292034][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.681023][ T30] audit: type=1326 audit(2000000919.179:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1238.830534][T17671] ubi: mtd0 is already attached to ubi31 [ 1238.844022][ T30] audit: type=1326 audit(2000000919.179:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1238.966029][ T30] audit: type=1326 audit(2000000919.179:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17665 comm="syz.2.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb78fb8eba9 code=0x7ffc0000 [ 1239.030255][T17684] netdevsim netdevsim4: Direct firmware load for . [ 1239.030255][T17684] failed with error -2 [ 1239.043876][T17684] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1239.043876][T17684] [ 1239.845042][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2430'. [ 1241.979530][T17706] veth0_to_team: entered promiscuous mode [ 1242.414949][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1242.414977][ T30] audit: type=1400 audit(2000000923.889:2084): avc: denied { setopt } for pid=17707 comm="syz.4.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1242.627422][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2435'. [ 1243.816375][T17725] ubi: mtd0 is already attached to ubi31 [ 1244.205865][ T30] audit: type=1326 audit(2000000925.349:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17722 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1244.703598][ T30] audit: type=1326 audit(2000000925.349:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17722 comm="syz.4.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1244.727112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.180526][T17738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2441'. [ 1246.190765][T17738] IPv6: NLM_F_CREATE should be specified when creating new route [ 1248.930557][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2447'. [ 1249.059091][T17768] syz.0.2446 (17768): drop_caches: 2 [ 1249.079971][T17768] syz.0.2446 (17768): drop_caches: 2 [ 1249.954996][T17775] ubi: mtd0 is already attached to ubi31 [ 1251.039454][T17784] ubi: mtd0 is already attached to ubi31 [ 1252.024986][ T30] audit: type=1400 audit(2000000933.469:2087): avc: denied { read } for pid=17788 comm="syz.0.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1252.520234][T17801] delete_channel: no stack [ 1252.571762][ T30] audit: type=1400 audit(2000000934.009:2088): avc: denied { create } for pid=17794 comm="syz.4.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1252.983100][T17805] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1252.997198][T17805] team0: Port device batadv1 added [ 1253.575756][T17809] input: syz1 as /devices/virtual/input/input23 [ 1254.176398][T17815] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2457'. [ 1254.862812][ T30] audit: type=1400 audit(2000000936.359:2089): avc: denied { setopt } for pid=17818 comm="syz.0.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1254.889214][ T30] audit: type=1400 audit(2000000936.389:2090): avc: denied { setopt } for pid=17818 comm="syz.0.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1254.912866][ T30] audit: type=1400 audit(2000000936.389:2091): avc: denied { read } for pid=17818 comm="syz.0.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1256.574756][T17836] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1257.066327][T17828] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1257.841916][T17847] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1257.851858][T17847] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1257.861889][T17847] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1259.546846][T17861] ubi: mtd0 is already attached to ubi31 [ 1259.591139][T17865] netlink: 'syz.0.2466': attribute type 10 has an invalid length. [ 1259.601959][T17865] veth0_vlan: left promiscuous mode [ 1259.614219][T17865] veth0_vlan: entered promiscuous mode [ 1259.632506][T17865] team0: Device veth0_vlan failed to register rx_handler [ 1259.838368][T17864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2469'. [ 1259.856438][T17864] netlink: del zone limit has 4 unknown bytes [ 1259.929549][ T30] audit: type=1400 audit(2000000941.419:2092): avc: denied { bind } for pid=17862 comm="syz.2.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1263.796301][ T30] audit: type=1400 audit(2000000945.299:2093): avc: denied { map } for pid=17898 comm="syz.5.2477" path="socket:[53990]" dev="sockfs" ino=53990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1263.941188][ T5923] Process accounting resumed [ 1264.436493][T17881] ubi: mtd0 is already attached to ubi31 [ 1265.198201][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2480'. [ 1265.402978][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2480'. [ 1265.423747][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2480'. [ 1265.433935][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2480'. [ 1266.154747][T17923] blktrace: Concurrent blktraces are not allowed on loop0 [ 1268.605731][T17953] ubi: mtd0 is already attached to ubi31 [ 1268.774087][T17956] ubi: mtd0 is already attached to ubi31 [ 1269.567046][ T30] audit: type=1400 audit(2000000951.049:2094): avc: denied { block_suspend } for pid=17958 comm="syz.4.2491" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1269.735791][ T5970] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1270.155226][T17966] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1270.440185][T17966] batadv1: entered promiscuous mode [ 1270.491491][T17966] batadv1: entered allmulticast mode [ 1270.636603][T17966] team0: Port device batadv1 added [ 1270.691533][ T8253] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1270.701435][ T8253] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1270.826910][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.841490][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.872205][ T5970] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1271.012918][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.374594][T17976] ubi: mtd0 is already attached to ubi31 [ 1271.766678][ T5970] usb 4-1: config 0 descriptor?? [ 1272.041000][T17980] ubi: mtd0 is already attached to ubi31 [ 1272.484421][ T5970] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1272.526496][ T5923] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1272.526705][ T5970] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1272.701280][ T5970] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 1272.707590][ T5923] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 1272.746265][ T5923] usb 3-1: config 0 has no interface number 0 [ 1272.814888][T17987] PKCS7: Unknown OID: [5] (bad) [ 1272.820507][T17987] PKCS7: Only support pkcs7_signedData type [ 1272.833108][T17987] netlink: 'syz.4.2495': attribute type 2 has an invalid length. [ 1272.842771][T17987] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2495'. [ 1272.876402][ T5923] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1272.908630][ T5923] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1272.940798][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.000750][ T5923] usb 3-1: config 0 descriptor?? [ 1273.047026][ T5923] ttusbir 3-1:0.83: cannot find expected altsetting [ 1273.773383][ T9444] usb 4-1: USB disconnect, device number 25 [ 1274.307106][T18000] lo speed is unknown, defaulting to 1000 [ 1274.319988][T18000] lo speed is unknown, defaulting to 1000 [ 1274.730615][ T5923] usb 3-1: USB disconnect, device number 20 [ 1275.175906][T18010] ubi: mtd0 is already attached to ubi31 [ 1275.615741][ T30] audit: type=1400 audit(2000000957.109:2095): avc: denied { remount } for pid=18006 comm="syz.2.2499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1275.888026][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2499'. [ 1276.097431][ T30] audit: type=1400 audit(2000000957.249:2096): avc: denied { ioctl } for pid=18006 comm="syz.2.2499" path="socket:[54201]" dev="sockfs" ino=54201 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1277.062238][T18015] gfs2: not a GFS2 filesystem [ 1277.312406][T18023] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1279.299408][T18041] netlink: 'syz.3.2504': attribute type 10 has an invalid length. [ 1279.308051][T18041] tipc: Resetting bearer [ 1279.333966][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 1279.606246][ T30] audit: type=1400 audit(2000000961.049:2097): avc: denied { ioctl } for pid=18033 comm="syz.2.2506" path="socket:[53065]" dev="sockfs" ino=53065 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1281.115831][ T30] audit: type=1400 audit(2000000962.559:2098): avc: denied { recv } for pid=18033 comm="syz.2.2506" saddr=10.128.0.169 src=30006 daddr=10.128.10.0 dest=41502 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1281.161474][T18047] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1281.281393][ T30] audit: type=1400 audit(2000000962.649:2099): avc: denied { create } for pid=18049 comm="syz.0.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1281.288284][T18056] autofs4:pid:18056:validate_dev_ioctl: path string terminator missing for cmd(0xc0189373) [ 1281.317560][ T30] audit: type=1400 audit(2000000962.649:2100): avc: denied { create } for pid=18049 comm="syz.0.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1281.373388][T18054] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1281.501969][ T30] audit: type=1400 audit(2000000962.659:2101): avc: denied { read } for pid=18051 comm="syz.4.2510" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1281.557349][ T30] audit: type=1400 audit(2000000962.659:2102): avc: denied { open } for pid=18051 comm="syz.4.2510" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1281.583521][ T30] audit: type=1400 audit(2000000962.749:2103): avc: denied { read write } for pid=10411 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1281.644013][ T30] audit: type=1400 audit(2000000962.749:2104): avc: denied { open } for pid=10411 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1281.675956][ T9444] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1281.742891][ T30] audit: type=1400 audit(2000000962.749:2105): avc: denied { ioctl } for pid=10411 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1281.824391][ T30] audit: type=1400 audit(2000000962.779:2106): avc: denied { read } for pid=18049 comm="syz.0.2509" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1281.858590][ T30] audit: type=1400 audit(2000000962.779:2107): avc: denied { open } for pid=18049 comm="syz.0.2509" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1281.889077][ T9444] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1281.931870][ T9444] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1281.966464][ T9444] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1281.986429][ T9444] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1282.002882][ T9444] usb 6-1: Product: syz [ 1282.012716][ T9444] usb 6-1: Manufacturer: syz [ 1282.136532][ T9444] usb 6-1: SerialNumber: syz [ 1282.266614][T18066] geneve2: entered promiscuous mode [ 1282.284368][ T9444] usb 6-1: config 0 descriptor?? [ 1282.358404][ T9444] usb 6-1: selecting invalid altsetting 0 [ 1282.396581][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2512'. [ 1282.587964][T18066] geneve2: entered allmulticast mode [ 1284.463058][T15242] usb 6-1: USB disconnect, device number 25 [ 1285.377752][T18096] netlink: 'syz.5.2517': attribute type 2 has an invalid length. [ 1285.809394][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 1286.186803][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1286.186837][ T30] audit: type=1400 audit(2000000967.609:2161): avc: denied { bind } for pid=18098 comm="syz.0.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1286.529076][ T30] audit: type=1400 audit(2000000967.609:2162): avc: denied { name_bind } for pid=18098 comm="syz.0.2518" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1286.943595][ T30] audit: type=1400 audit(2000000967.609:2163): avc: denied { node_bind } for pid=18098 comm="syz.0.2518" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1287.023246][T18113] ubi: mtd0 is already attached to ubi31 [ 1287.551181][ T30] audit: type=1400 audit(2000000967.619:2164): avc: denied { write } for pid=18098 comm="syz.0.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1287.671379][ T30] audit: type=1400 audit(2000000967.619:2165): avc: denied { connect } for pid=18098 comm="syz.0.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1287.712098][ T30] audit: type=1400 audit(2000000967.619:2166): avc: denied { name_connect } for pid=18098 comm="syz.0.2518" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1287.783188][ T30] audit: type=1400 audit(2000000968.029:2167): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1287.968221][ T30] audit: type=1400 audit(2000000968.179:2168): avc: denied { read } for pid=18102 comm="syz.5.2519" dev="nsfs" ino=4026533782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1288.051598][ T30] audit: type=1400 audit(2000000968.189:2169): avc: denied { open } for pid=18102 comm="syz.5.2519" path="net:[4026533782]" dev="nsfs" ino=4026533782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1288.876166][ T30] audit: type=1400 audit(2000000968.189:2170): avc: denied { create } for pid=18102 comm="syz.5.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1290.539587][T18143] CUSE: info not properly terminated [ 1291.308605][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1291.308619][ T30] audit: type=1400 audit(2000000972.809:2192): avc: denied { unlink } for pid=5850 comm="syz-executor" name="file0" dev="tmpfs" ino=2676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1291.683613][T18158] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1291.731105][T18160] netlink: 'syz.4.2531': attribute type 29 has an invalid length. [ 1291.739864][T18160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 1292.773559][ T30] audit: type=1400 audit(2000000974.249:2193): avc: denied { read write } for pid=18157 comm="syz.0.2532" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1292.925209][ T30] audit: type=1400 audit(2000000974.249:2194): avc: denied { open } for pid=18157 comm="syz.0.2532" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1293.047264][ T30] audit: type=1400 audit(2000000974.259:2195): avc: denied { ioctl } for pid=18157 comm="syz.0.2532" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1293.104031][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 1293.349704][ T30] audit: type=1400 audit(2000000974.599:2196): avc: denied { ioctl } for pid=18157 comm="syz.0.2532" path="socket:[55306]" dev="sockfs" ino=55306 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1293.376119][ T30] audit: type=1400 audit(2000000974.849:2197): avc: denied { read write } for pid=18170 comm="syz.5.2533" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1293.406223][ T30] audit: type=1400 audit(2000000974.849:2198): avc: denied { open } for pid=18170 comm="syz.5.2533" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1294.143420][T18178] comedi comedi1: comedi_config --init_data is deprecated [ 1294.471002][ T30] audit: type=1400 audit(2000000975.149:2199): avc: denied { mounton } for pid=18170 comm="syz.5.2533" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1294.494868][ T30] audit: type=1400 audit(2000000975.149:2200): avc: denied { mount } for pid=18170 comm="syz.5.2533" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1294.861303][ T30] audit: type=1400 audit(2000000975.279:2201): avc: denied { create } for pid=18171 comm="syz.3.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1295.389119][T18181] bridge0: port 3(team0) entered blocking state [ 1295.395525][T18181] bridge0: port 3(team0) entered forwarding state [ 1295.408015][T18181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.467461][T18190] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1295.486161][T18181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1295.616689][ T5923] lo speed is unknown, defaulting to 1000 [ 1295.622425][ T5923] sz1: Port: 1 Link ACTIVE [ 1295.656915][T11201] lo speed is unknown, defaulting to 1000 [ 1295.806937][T18194] overlayfs: failed to resolve './file1': -2 [ 1295.928446][T18198] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1296.194455][T18201] ubi: mtd0 is already attached to ubi31 [ 1296.747015][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1296.747030][ T30] audit: type=1400 audit(2000000978.239:2211): avc: denied { create } for pid=18192 comm="syz.5.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1296.984078][T18209] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18209 comm=syz.0.2540 [ 1297.068551][T18209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1297.776240][ T30] audit: type=1400 audit(2000000978.419:2212): avc: denied { read } for pid=18206 comm="syz.0.2540" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1297.800766][ T30] audit: type=1400 audit(2000000978.419:2213): avc: denied { open } for pid=18206 comm="syz.0.2540" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1297.824925][ T30] audit: type=1400 audit(2000000978.479:2214): avc: denied { ioctl } for pid=18206 comm="syz.0.2540" path="socket:[54506]" dev="sockfs" ino=54506 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1298.109570][ T30] audit: type=1400 audit(2000000979.599:2215): avc: denied { ioctl } for pid=18211 comm="syz.2.2542" path="socket:[55372]" dev="sockfs" ino=55372 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1298.828311][ T30] audit: type=1400 audit(2000000979.829:2216): avc: denied { write } for pid=18213 comm="syz.4.2541" name="file0" dev="tmpfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1299.018315][ T30] audit: type=1400 audit(2000000979.829:2217): avc: denied { open } for pid=18213 comm="syz.4.2541" path="/529/file0" dev="tmpfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1299.254195][ T30] audit: type=1400 audit(2000000979.839:2218): avc: denied { ioctl } for pid=18213 comm="syz.4.2541" path="/529/file0" dev="tmpfs" ino=2858 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1299.286424][ T30] audit: type=1400 audit(2000000980.489:2219): avc: denied { write } for pid=18211 comm="syz.2.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1299.351456][ T30] audit: type=1400 audit(2000000980.489:2220): avc: denied { nlmsg_write } for pid=18211 comm="syz.2.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1299.546642][T15242] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1299.718763][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.727399][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.744150][T15242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1299.763927][T15242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.792428][T15242] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1299.832472][T15242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.847121][T15242] usb 5-1: config 0 descriptor?? [ 1300.280966][T15242] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1300.286645][T18236] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1300.332816][T15242] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1300.485879][T15242] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 1300.587593][T18244] Invalid source name [ 1301.166504][T18242] block nbd0: shutting down sockets [ 1301.424725][T15242] usb 5-1: USB disconnect, device number 21 [ 1302.049045][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1302.049063][ T30] audit: type=1400 audit(2000000983.109:2223): avc: denied { write } for pid=18247 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1302.075398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1302.155099][ T30] audit: type=1400 audit(2000000983.269:2224): avc: denied { create } for pid=18247 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1302.174690][ C0] vkms_vblank_simulate: vblank timer overrun [ 1302.395838][ T30] audit: type=1400 audit(2000000983.339:2225): avc: denied { connect } for pid=18247 comm="syz.2.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1302.656255][ T30] audit: type=1400 audit(2000000983.819:2226): avc: denied { create } for pid=18257 comm="syz.4.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1303.301419][ T30] audit: type=1400 audit(2000000983.829:2227): avc: denied { bind } for pid=18257 comm="syz.4.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1303.454232][ T30] audit: type=1400 audit(2000000984.409:2228): avc: denied { create } for pid=18261 comm="syz.3.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1303.474726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1303.668109][ T30] audit: type=1400 audit(2000000984.409:2229): avc: denied { write } for pid=18261 comm="syz.3.2552" path="socket:[55447]" dev="sockfs" ino=55447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1303.692411][ C0] vkms_vblank_simulate: vblank timer overrun [ 1303.794015][T18270] tmpfs: Unknown parameter '©/4.K$Ž9ÞuàØ$“e\H¯M:@ß\!¼žÔ·~Ð#r•P' [ 1304.138194][ T30] audit: type=1400 audit(2000000984.429:2230): avc: denied { read } for pid=18261 comm="syz.3.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1304.158477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1304.167751][ T30] audit: type=1400 audit(2000000984.459:2231): avc: denied { setopt } for pid=18261 comm="syz.3.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1304.882187][ T30] audit: type=1400 audit(2000000985.259:2232): avc: denied { create } for pid=18265 comm="syz.5.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1304.923405][T18280] nbd_handle_cmd: 2 callbacks suppressed [ 1304.923425][T18280] block nbd4: Attempted send on invalid socket [ 1304.936350][T18280] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3 [ 1305.084516][T18280] hfsplus: unable to find HFS+ superblock [ 1305.348092][T18285] trusted_key: encrypted_key: insufficient parameters specified [ 1307.368562][T18303] ubi: mtd0 is already attached to ubi31 [ 1307.833138][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1307.833152][ T30] audit: type=1400 audit(2000000989.329:2238): avc: denied { create } for pid=18300 comm="syz.2.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1308.793170][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 1308.829796][ T30] audit: type=1400 audit(2000000990.299:2239): avc: denied { write } for pid=18306 comm="syz.2.2562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1308.866108][T18311] hugetlbfs: syz.2.2562 (18311): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1309.182390][T18315] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1309.247803][ T30] audit: type=1400 audit(2000000990.299:2240): avc: denied { bind } for pid=18306 comm="syz.2.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1309.323864][ T30] audit: type=1400 audit(2000000990.309:2241): avc: denied { node_bind } for pid=18306 comm="syz.2.2562" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1309.477224][ T30] audit: type=1400 audit(2000000990.309:2242): avc: denied { connect } for pid=18306 comm="syz.2.2562" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1309.498367][ C1] vkms_vblank_simulate: vblank timer overrun [ 1309.764925][ T30] audit: type=1400 audit(2000000990.389:2243): avc: denied { read } for pid=18306 comm="syz.2.2562" path="socket:[54723]" dev="sockfs" ino=54723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1310.061044][ T30] audit: type=1400 audit(2000000990.929:2244): avc: denied { getopt } for pid=18313 comm="syz.0.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1310.080769][ C1] vkms_vblank_simulate: vblank timer overrun [ 1310.208553][ T30] audit: type=1400 audit(2000000991.709:2245): avc: denied { getopt } for pid=18319 comm="syz.3.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1310.298034][T18321] comedi comedi1: dt2801: I/O port conflict (0x9e1,2) [ 1310.617317][ T30] audit: type=1400 audit(2000000992.119:2246): avc: denied { create } for pid=18324 comm="syz.0.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1310.811059][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 1311.211460][ T30] audit: type=1400 audit(2000000992.149:2247): avc: denied { ioctl } for pid=18324 comm="syz.0.2567" path="socket:[55514]" dev="sockfs" ino=55514 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1312.835817][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1312.835833][ T30] audit: type=1400 audit(2000000994.319:2250): avc: denied { mount } for pid=18338 comm="syz.3.2569" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1312.979726][T18353] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2572'. [ 1313.469853][T11201] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1313.688478][ T30] audit: type=1400 audit(2000000995.179:2251): avc: denied { bind } for pid=18357 comm="syz.2.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1313.820709][T18363] delete_channel: no stack [ 1313.876715][T11201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.114116][ T30] audit: type=1400 audit(2000000995.179:2252): avc: denied { listen } for pid=18357 comm="syz.2.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1314.134740][ T30] audit: type=1400 audit(2000000995.299:2253): avc: denied { create } for pid=18354 comm="syz.4.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1314.154658][ T30] audit: type=1400 audit(2000000995.339:2254): avc: denied { audit_write } for pid=18354 comm="syz.4.2573" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1314.214104][T11201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.284969][ T9444] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1314.285883][T11201] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1314.404497][T11201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.405003][ T30] audit: type=1107 audit(2000000995.339:2255): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1314.416404][T11201] usb 4-1: config 0 descriptor?? [ 1314.579362][ T9444] usb 3-1: Using ep0 maxpacket: 8 [ 1314.589598][ T9444] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 1314.653928][T18369] binder: 18366:18369 ioctl c0306201 200000000240 returned -11 [ 1314.935746][ T9444] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1314.962125][ T30] audit: type=1400 audit(2000000996.029:2256): avc: denied { read } for pid=18366 comm="syz.4.2576" name="binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1315.503496][ T30] audit: type=1400 audit(2000000996.029:2257): avc: denied { open } for pid=18366 comm="syz.4.2576" path="/dev/binderfs/binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1315.533835][ T9444] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1315.595670][ T9444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.603702][ T9444] usb 3-1: Product: syz [ 1315.764462][ T9444] usb 3-1: Manufacturer: syz [ 1315.776108][ T9444] usb 3-1: SerialNumber: syz [ 1315.800893][ T9444] usb 3-1: config 0 descriptor?? [ 1315.817879][ T9444] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1316.243137][ T30] audit: type=1400 audit(2000000996.039:2258): avc: denied { ioctl } for pid=18366 comm="syz.4.2576" path="/dev/binderfs/binder0" dev="binder" ino=21 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1316.293031][ T30] audit: type=1400 audit(2000000996.049:2259): avc: denied { map } for pid=18366 comm="syz.4.2576" path="/dev/binderfs/binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1316.586709][T18360] hub 9-0:1.0: USB hub found [ 1316.592141][T18360] hub 9-0:1.0: 1 port detected [ 1317.452134][T15242] usb 3-1: USB disconnect, device number 21 [ 1317.773219][T18385] hub 9-0:1.0: USB hub found [ 1317.778950][T18385] hub 9-0:1.0: 1 port detected [ 1318.442910][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1318.442925][ T30] audit: type=1326 audit(2000000999.939:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1318.889139][ T30] audit: type=1326 audit(2000000999.939:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1318.948626][ T30] audit: type=1326 audit(2000000999.939:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1423.964979][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1423.971979][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8253/1:b..l [ 1423.980692][ C1] rcu: (detected by 1, t=10502 jiffies, g=69941, q=254 ncpus=2) [ 1423.988498][ C1] task:kworker/u8:22 state:R running task stack:23560 pid:8253 tgid:8253 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1424.003489][ C1] Workqueue: bat_events batadv_nc_worker [ 1424.009140][ C1] Call Trace: [ 1424.012414][ C1] [ 1424.015349][ C1] __schedule+0x1190/0x5de0 [ 1424.019849][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1424.025655][ C1] ? __pfx___schedule+0x10/0x10 [ 1424.030480][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1424.035667][ C1] ? __mod_timer+0x8f2/0xd30 [ 1424.040231][ C1] ? mark_held_locks+0x49/0x80 [ 1424.044977][ C1] preempt_schedule_irq+0x51/0x90 [ 1424.049983][ C1] irqentry_exit+0x36/0x90 [ 1424.054385][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1424.060337][ C1] RIP: 0010:__rcu_read_unlock+0x3d/0x550 [ 1424.065942][ C1] Code: 53 48 8d bd 44 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 4a 02 00 00 65 4c 8b 25 5b c6 34 12 49 8d bc 24 44 04 [ 1424.085522][ C1] RSP: 0018:ffffc9000c0e7af8 EFLAGS: 00000202 [ 1424.091565][ C1] RAX: 0000000000000007 RBX: 0000000000000001 RCX: ffffc9000c0e7aec [ 1424.099520][ C1] RDX: 0000000000000000 RSI: ffffffff8de2d0d8 RDI: ffff888068778444 [ 1424.107464][ C1] RBP: ffff888068778000 R08: 0000000000000001 R09: 0000000000000000 [ 1424.115409][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1424.123365][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1424.126320][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.131326][ C1] batadv_nc_worker+0x89f/0x1030 [ 1424.142510][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1424.148311][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1424.153673][ C1] ? rcu_is_watching+0x12/0xc0 [ 1424.158443][ C1] process_one_work+0x9cc/0x1b70 [ 1424.163370][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1424.168724][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1424.174704][ C1] ? assign_work+0x1a0/0x250 [ 1424.179274][ C1] worker_thread+0x6c8/0xf10 [ 1424.183856][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1424.188950][ C1] kthread+0x3c2/0x780 [ 1424.193002][ C1] ? __pfx_kthread+0x10/0x10 [ 1424.197573][ C1] ? rcu_is_watching+0x12/0xc0 [ 1424.202322][ C1] ? __pfx_kthread+0x10/0x10 [ 1424.206891][ C1] ret_from_fork+0x5d4/0x6f0 [ 1424.211460][ C1] ? __pfx_kthread+0x10/0x10 [ 1424.216029][ C1] ret_from_fork_asm+0x1a/0x30 [ 1424.220792][ C1] [ 1424.460305][ T30] audit: type=1326 audit(2000000999.939:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1424.484606][ T30] audit: type=1326 audit(2000000999.939:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1424.508908][ T30] audit: type=1326 audit(2000001000.389:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6915d90ac7 code=0x7ffc0000 [ 1424.533748][ T30] audit: type=1326 audit(2000001000.389:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6915d90a3c code=0x7ffc0000 [ 1424.560130][T11201] usbhid 4-1:0.0: can't add hid device: -32 [ 1424.580848][ T30] audit: type=1326 audit(2000001000.389:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6915d90974 code=0x7ffc0000 [ 1424.641877][T11201] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1424.650426][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.674674][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.682743][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.715953][ T30] audit: type=1326 audit(2000001000.389:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6915d90974 code=0x7ffc0000 [ 1424.794957][T11201] usb 4-1: USB disconnect, device number 26 [ 1424.808825][ T30] audit: type=1326 audit(2000001000.389:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6915d8d80a code=0x7ffc0000 [ 1424.836618][ T30] audit: type=1326 audit(2000001000.389:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1424.861122][ T30] audit: type=1326 audit(2000001000.409:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 SYZFAIL: failed to send rpc fd=3 want=3688 sent=0 n=-1 (errno 32: Broken pipe) [ 1424.913576][ T30] audit: type=1326 audit(2000001000.409:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.4.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6915d8eba9 code=0x7ffc0000 [ 1425.798474][T15628] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.894607][ T5858] syz_tun (unregistering): left allmulticast mode [ 1425.984214][T15628] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.139904][T15628] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.224938][T15628] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.394286][T15628] bridge_slave_1: left allmulticast mode [ 1426.416959][T15628] bridge_slave_1: left promiscuous mode [ 1426.422721][T15628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.454875][T15628] : left allmulticast mode [ 1426.469288][T15628] : left promiscuous mode [ 1426.476414][T15628] bridge0: port 1() entered disabled state [ 1427.168816][T15628] bond0 (unregistering): (slave veth5): Releasing active interface [ 1427.178384][T15628] bond0 (unregistering): Released all slaves [ 1427.192243][T15628] bond1 (unregistering): Released all slaves [ 1427.276588][T15628] tipc: Disabling bearer [ 1427.294661][T15628] tipc: Left network mode [ 1427.313400][T15628] IPVS: stopping backup sync thread 13404 ... [ 1427.778748][T15628] veth1_macvtap: left promiscuous mode [ 1427.784318][T15628] veth0_macvtap: left promiscuous mode [ 1427.871824][T15628] team0 (unregistering): Port device batadv1 removed [ 1428.313453][T15628] team0 (unregistering): Port device team_slave_1 removed [ 1428.368650][T15628] team0 (unregistering): Port device team_slave_0 removed [ 1428.772302][ T5923] lo speed is unknown, defaulting to 1000 [ 1428.781782][ T5923] syz0: Port: 1 Link DOWN [ 1429.102461][T15628] IPVS: stop unused estimator thread 0... [ 1429.173482][T15628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.254454][T15628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.340301][T15628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.420898][T15628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.599784][T15628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.619704][T15628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.732933][T15628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.751515][T15628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.840110][T15628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.857075][T15628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.924277][T15628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1429.936716][T15628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.767561][T15628] team0: left allmulticast mode [ 1430.772455][T15628] team_slave_0: left allmulticast mode [ 1430.779000][T15628] team_slave_1: left allmulticast mode [ 1430.784490][T15628] batadv1: left allmulticast mode [ 1430.792922][T15628] batadv2: left allmulticast mode [ 1430.798902][T15628] team0: left promiscuous mode [ 1430.803668][T15628] team_slave_0: left promiscuous mode [ 1430.810146][T15628] team_slave_1: left promiscuous mode [ 1430.815984][T15628] batadv1: left promiscuous mode [ 1430.821062][T15628] batadv2: left promiscuous mode [ 1430.826627][T15628] bridge0: port 3(team0) entered disabled state [ 1430.834896][T15628] bridge_slave_1: left allmulticast mode [ 1430.841672][T15628] bridge_slave_1: left promiscuous mode [ 1430.848770][T15628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.858684][T15628] bridge_slave_0: left allmulticast mode [ 1430.864331][T15628] bridge_slave_0: left promiscuous mode [ 1430.870843][T15628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.884273][T15628] team0: left allmulticast mode [ 1430.890726][T15628] team_slave_0: left allmulticast mode [ 1430.896754][T15628] team_slave_1: left allmulticast mode [ 1430.902212][T15628] batadv1: left allmulticast mode [ 1430.907856][T15628] team0: left promiscuous mode [ 1430.912611][T15628] team_slave_0: left promiscuous mode [ 1430.919010][T15628] team_slave_1: left promiscuous mode [ 1430.924454][T15628] batadv1: left promiscuous mode [ 1430.930415][T15628] bridge0: port 3(team0) entered disabled state [ 1430.940556][T15628] bridge_slave_1: left allmulticast mode [ 1430.946680][T15628] bridge_slave_1: left promiscuous mode [ 1430.952300][T15628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.961657][T15628] bridge_slave_0: left allmulticast mode [ 1430.967562][T15628] bridge_slave_0: left promiscuous mode [ 1430.973367][T15628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.231336][T15628] team0: Port device geneve0 removed [ 1431.479840][T15628] bond1 (unregistering): Released all slaves [ 1431.589250][T15628] bond2 (unregistering): Released all slaves [ 1432.058142][T15628] bond1 (unregistering): Released all slaves [ 1432.162713][T15628] bond2 (unregistering): Released all slaves [ 1432.646384][T15628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.656351][T15628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.665785][T15628] bond0 (unregistering): Released all slaves [ 1432.991666][T15628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1433.005826][T15628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.014846][T15628] bond0 (unregistering): Released all slaves [ 1433.123707][T15628] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1433.131710][T15628] vcan1: left promiscuous mode [ 1433.137679][T15628] bond1 (unregistering): Released all slaves