last executing test programs: 13.754405349s ago: executing program 2 (id=2033): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 11.60476544s ago: executing program 2 (id=2038): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x1401, 0x1, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x800) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)={0x0, 0xd, 0x1e, {0x1e, 0x1, "bf3e9cd0491d53f042d39cf5ad70eb69f0702dcb7f60ea6d016cfd16"}}, &(0x7f00000001c0)={0x0, 0x3, 0xd, @string={0xd, 0x3, "17a77f2b0f8a4efcfe6785"}}, &(0x7f0000000400)={0x0, 0xf, 0xb1, {0x5, 0xf, 0xb1, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x554529e, 0xf00, 0x0, [0xc03f, 0xffc000, 0xf, 0x30, 0xff3fcf, 0x30]}, @generic={0x85, 0x10, 0x1, "f37488cdc2fb0670e83c771929cf9af03a549fa73334a41f7e7e5b2130a12488da683f6d107a809b12ee423217e2a580fc4ad853319c60797b8bb36bfb60bed91ce218bcfffe5023042709d84e2468a8c5027a88e74d24a52727dd9f4fd428719034651104eb99072a8366412544dae26cf668bf579d05deeee4a2d328092994797e"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x85, 0x65, 0xa2, 0x7, "8473a7f5", "3a5aa5af"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0xd8, 0x8, 0x0, 0x74, 0xffff}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000ac0)={0xfffffffc, 0x0, 0x0, 'queue1\x00', 0xfffffbfc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x8, 0x2}, 0x5}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) syz_emit_ethernet(0x86, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "44c108fc5c47c72626fe2f7cfa25b602ed48a4e23aa1fa1930cef821fa9ef26d", "78b501b40402b3f74ca615813e0a1261", {"b6b63b29d2396379bcc0226ed355261e", "4842183ff3929a0d1927f2044ca14ce4"}}}}}}}, 0x0) 11.434646908s ago: executing program 4 (id=2039): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000002080)={0x14}, 0x14) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000300)={0x1}, 0x8, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xb) 10.825443637s ago: executing program 1 (id=2042): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20010095}, 0x4008014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="7a0a00ff000000007110b400000000009500"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) mount(0x0, 0x0, 0x0, 0x200000, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000900)=""/198, 0xc6}, {&(0x7f0000000200)=""/247, 0xf7}], 0x2, 0x1000a2, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x1, 0x1, 0x1}}]}}]}, 0x44}}, 0x0) 10.659202607s ago: executing program 4 (id=2043): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'authencesn(blake2s-224-x86,xts-aes-neon)\x00'}, 0x0, 0x60}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES8=r5, @ANYRESHEX=r1], 0x0, 0x3}, 0x94) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3f, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) 8.745363371s ago: executing program 2 (id=2046): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4040040) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0xfffffffffffffd2d, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_NOACK]}]}]}, 0x3c}}, 0x0) 8.74324753s ago: executing program 4 (id=2047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r5}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}], 0x1, 0x2, 0x2) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x48000) syz_emit_ethernet(0xfc, &(0x7f0000000000)=ANY=[], 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) request_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 8.266605674s ago: executing program 3 (id=2048): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f00"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e040000300016"], 0x6c}}, 0x0) 7.864311387s ago: executing program 0 (id=2049): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x6, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x1ce97bbf60ae786d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = getpid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x3}, @free_buffer], 0x40, 0x0, &(0x7f0000000400)="49db2abaecafa972fe58aa0a97f2d6d2d320d8c01e6503d235682062d8951a5574befa5a269b32cc4bae8c1dbe18e872211865055f5aa4837dce26430a49d016"}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x48000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) 7.590253467s ago: executing program 4 (id=2050): socket$packet(0x11, 0x3, 0x300) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000000000000400', @ANYRESDEC=0x0]) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x20000080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x6, 0x3, 0xd, 0xa, 0xb9, 0xfffffff8, 0x5}, 0x9c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) write$FUSE_INTERRUPT(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 7.428858446s ago: executing program 3 (id=2051): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 6.569863969s ago: executing program 3 (id=2052): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="0800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24040014}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r6, r0}, 0xc) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000010000000fdfffffffcdbdf25030005000000000002002000ffffffff0000000000000000080012000000010000000000000000000600000000000000f303000000800000ff010000000000000000000000000001fc02000000000000"], 0x80}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x40) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 5.885871377s ago: executing program 0 (id=2053): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x3e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x13}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.885401039s ago: executing program 1 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3, 0x0, 0x8}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000300010000", 0x7) syz_open_dev$video4linux(0x0, 0x0, 0x0) 5.627852861s ago: executing program 3 (id=2055): prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={r1, &(0x7f0000000680), 0x20000000}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x40010) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) 5.516868875s ago: executing program 4 (id=2056): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x1401, 0x1, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x800) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)={0x0, 0xd, 0x1e, {0x1e, 0x1, "bf3e9cd0491d53f042d39cf5ad70eb69f0702dcb7f60ea6d016cfd16"}}, &(0x7f00000001c0)={0x0, 0x3, 0xd, @string={0xd, 0x3, "17a77f2b0f8a4efcfe6785"}}, &(0x7f0000000400)={0x0, 0xf, 0xb1, {0x5, 0xf, 0xb1, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x554529e, 0xf00, 0x0, [0xc03f, 0xffc000, 0xf, 0x30, 0xff3fcf, 0x30]}, @generic={0x85, 0x10, 0x1, "f37488cdc2fb0670e83c771929cf9af03a549fa73334a41f7e7e5b2130a12488da683f6d107a809b12ee423217e2a580fc4ad853319c60797b8bb36bfb60bed91ce218bcfffe5023042709d84e2468a8c5027a88e74d24a52727dd9f4fd428719034651104eb99072a8366412544dae26cf668bf579d05deeee4a2d328092994797e"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x85, 0x65, 0xa2, 0x7, "8473a7f5", "3a5aa5af"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0xd8, 0x8, 0x0, 0x74, 0xffff}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000ac0)={0xfffffffc, 0x0, 0x0, 'queue1\x00', 0xfffffbfc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x8, 0x2}, 0x5}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) syz_emit_ethernet(0x86, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "44c108fc5c47c72626fe2f7cfa25b602ed48a4e23aa1fa1930cef821fa9ef26d", "78b501b40402b3f74ca615813e0a1261", {"b6b63b29d2396379bcc0226ed355261e", "4842183ff3929a0d1927f2044ca14ce4"}}}}}}}, 0x0) 5.396291844s ago: executing program 2 (id=2057): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000d00), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f00000001c0), 0x0}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = userfaultfd(0x80801) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) 4.765804156s ago: executing program 1 (id=2058): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r4, r4, 0x0, 0x40008) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842c", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.845246141s ago: executing program 1 (id=2059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3, 0x0, 0x8}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000300010000", 0x7) syz_open_dev$video4linux(0x0, 0x0, 0x0) 3.804939956s ago: executing program 3 (id=2060): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x14, r3, 0x1, 0x72bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000006c0)={0x15, 0xffffffffffffff6f, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x700, @ib={0x1b, 0xac9e, 0x1, {"9f17896513459146e05fda44f4c59c92"}, 0xfffffffffffffffc, 0x3, 0x6}, @in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0x4}}}, 0xffffffffffffff38) 2.864908872s ago: executing program 1 (id=2061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r8 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, r8) r9 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000000840)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0x1}}, 0x120) write$UHID_DESTROY(r9, &(0x7f0000000080), 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 2.83324415s ago: executing program 0 (id=2062): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="c672796c6f636b206e6f6e6500"], 0xd) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000800)={{&(0x7f00004e7000/0x2000)=nil, 0x2000}, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2, 0x2}, {&(0x7f0000000900)=""/230, 0xe6}, &(0x7f0000000b80), 0x0, 0x40, 0xd}}], 0x48, 0x90}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2, 0x0, 0x5}) write(r5, &(0x7f0000000440), 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) 2.164431821s ago: executing program 3 (id=2063): socket$caif_seqpacket(0x25, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xa) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 1.84503378s ago: executing program 0 (id=2064): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x6, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x1ce97bbf60ae786d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = getpid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x3}, @free_buffer], 0x40, 0x0, &(0x7f0000000400)="49db2abaecafa972fe58aa0a97f2d6d2d320d8c01e6503d235682062d8951a5574befa5a269b32cc4bae8c1dbe18e872211865055f5aa4837dce26430a49d016"}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x48000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) 1.609681907s ago: executing program 0 (id=2065): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xe, 0xe, 0x1, 0x0, 0x0, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) listen(r2, 0x9ce2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x1000, 0xa000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000000)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.547907599s ago: executing program 2 (id=2066): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5100) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) 976.991388ms ago: executing program 4 (id=2067): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x6, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x1ce97bbf60ae786d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = getpid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x3}, @free_buffer], 0x40, 0x0, &(0x7f0000000400)="49db2abaecafa972fe58aa0a97f2d6d2d320d8c01e6503d235682062d8951a5574befa5a269b32cc4bae8c1dbe18e872211865055f5aa4837dce26430a49d016"}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x48000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) 497.541996ms ago: executing program 1 (id=2068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3, 0x0, 0x8}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000300010000", 0x7) syz_open_dev$video4linux(0x0, 0x0, 0x0) 349.885944ms ago: executing program 2 (id=2069): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000100), 0x4) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1223, 0x3f07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x6, 0xf1, 0x1, {0x22, 0xf72}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x93, 0x4, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0xe8}}]}}}]}}]}}, 0x0) 0s ago: executing program 0 (id=2070): socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(0x0, 0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0) memfd_create(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0xa, 0x1, 0x3, 0x6, 0xf}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xd18, 0x6, 0xfffa}, 0x3a, [0x8001, 0xfffffffe, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x5, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x100, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x4, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) kernel console output (not intermixed with test programs): t:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 428.475384][ T30] audit: type=1400 audit(1754449304.509:461): avc: denied { connect } for pid=9551 comm="syz.2.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 428.854401][ T9556] [U]  [ 429.716157][ T9570] wg1 speed is unknown, defaulting to 1000 [ 429.723677][ T9570] lo speed is unknown, defaulting to 1000 [ 430.412947][ T30] audit: type=1400 audit(1754449306.009:462): avc: denied { write } for pid=9580 comm="syz.3.857" name="file0" dev="tmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 430.476940][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 430.487660][ T30] audit: type=1400 audit(1754449306.009:463): avc: denied { open } for pid=9580 comm="syz.3.857" path="/177/file0" dev="tmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 430.700223][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 431.219131][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 431.226151][ T9] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 431.249126][ T30] audit: type=1400 audit(1754449306.019:464): avc: denied { ioctl } for pid=9580 comm="syz.3.857" path="/177/file0" dev="tmpfs" ino=983 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 431.360246][ T9591] overlay: ./file0 is not a directory [ 431.638940][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.900708][ T9] usb 1-1: config 0 descriptor?? [ 431.990191][ T30] audit: type=1400 audit(1754449307.739:465): avc: denied { map } for pid=9589 comm="syz.3.859" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.391973][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 432.411290][ T9] gspca_mr97310a: reg write [21] error -22 [ 432.420943][ T9] mr97310a 1-1:0.0: probe with driver mr97310a failed with error -22 [ 432.471459][ T30] audit: type=1400 audit(1754449307.739:466): avc: denied { execute } for pid=9589 comm="syz.3.859" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 433.610135][ T9611] siw: device registration error -23 [ 433.693103][ T9608] tipc: Enabled bearer , priority 10 [ 433.833680][ T30] audit: type=1400 audit(1754449309.869:467): avc: denied { create } for pid=9614 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 433.901483][ T43] usb 1-1: USB disconnect, device number 7 [ 434.491531][ T9627] net_ratelimit: 4073 callbacks suppressed [ 434.491542][ T9627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.514661][ T43] lo speed is unknown, defaulting to 1000 [ 435.188340][ T30] audit: type=1400 audit(1754449310.819:468): avc: denied { read } for pid=9630 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 436.202916][ T30] audit: type=1800 audit(1754449312.239:469): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.865" name="bus" dev="ramfs" ino=19805 res=0 errno=0 [ 436.514763][ T30] audit: type=1400 audit(1754449312.549:470): avc: denied { load_policy } for pid=9641 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 436.861960][ T9644] SELinux: failed to load policy [ 439.223501][ T9670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.610394][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.641348][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.976108][ T9682] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 439.983983][ T9682] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.880'. [ 443.415703][ T9713] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 444.170149][ T30] audit: type=1400 audit(1754449320.129:471): avc: denied { append } for pid=9715 comm="syz.1.888" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 445.056642][ T30] audit: type=1800 audit(1754449321.089:472): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.888" name="/" dev="9p" ino=2 res=0 errno=0 [ 445.222788][ T30] audit: type=1400 audit(1754449321.259:473): avc: denied { append } for pid=9725 comm="syz.4.892" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 447.550120][ T30] audit: type=1400 audit(1754449322.879:474): avc: denied { remove_name } for pid=9738 comm="syz.4.895" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.573671][ T30] audit: type=1400 audit(1754449322.889:475): avc: denied { unlink } for pid=9738 comm="syz.4.895" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 448.140393][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 448.149454][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 448.531567][ T9753] netlink: 'syz.1.897': attribute type 1 has an invalid length. [ 448.682333][ T9758] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 448.714246][ T9753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.729608][ T9755] ip6tnl1: entered allmulticast mode [ 448.748787][ T9758] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 448.836694][ T9755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.849240][ T9755] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 448.919226][ T9755] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 449.148488][ T9764] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 449.155004][ T9764] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 449.163511][ T9764] vhci_hcd vhci_hcd.0: Device attached [ 449.366907][ T975] vhci_hcd: vhci_device speed not set [ 449.433702][ T30] audit: type=1400 audit(1754449325.469:476): avc: denied { connect } for pid=9770 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 449.453386][ T975] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 449.546163][ T30] audit: type=1400 audit(1754449325.579:477): avc: denied { write } for pid=9770 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 449.850449][ T30] audit: type=1400 audit(1754449325.879:478): avc: denied { map } for pid=9774 comm="syz.4.903" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 450.045171][ T30] audit: type=1400 audit(1754449325.889:479): avc: denied { execute } for pid=9774 comm="syz.4.903" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 450.092867][ T30] audit: type=1400 audit(1754449326.129:480): avc: denied { name_connect } for pid=9759 comm="syz.0.900" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 450.371448][ T30] audit: type=1400 audit(1754449326.399:481): avc: denied { setopt } for pid=9780 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 452.160165][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 452.336603][ T9765] vhci_hcd: connection reset by peer [ 452.390137][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 452.436635][ T59] vhci_hcd: stop threads [ 452.441796][ T59] vhci_hcd: release socket [ 452.464432][ T9] usb 2-1: config 6 has an invalid interface number: 28 but max is 3 [ 452.484967][ T59] vhci_hcd: disconnect device [ 452.490378][ T9] usb 2-1: config 6 has an invalid interface number: 4 but max is 3 [ 452.502577][ T9] usb 2-1: config 6 has an invalid interface number: 86 but max is 3 [ 452.513993][ T9] usb 2-1: config 6 has an invalid interface number: 191 but max is 3 [ 452.553024][ T9] usb 2-1: config 6 has no interface number 0 [ 452.561963][ T9] usb 2-1: config 6 has no interface number 1 [ 452.580074][ T9] usb 2-1: config 6 has no interface number 2 [ 452.589898][ T9] usb 2-1: config 6 has no interface number 3 [ 452.801934][ T9] usb 2-1: config 6 interface 28 altsetting 0 endpoint 0x2 has invalid maxpacket 1576, setting to 64 [ 452.824717][ T9] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 452.989546][ T30] audit: type=1400 audit(1754449329.019:482): avc: denied { bind } for pid=9789 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 453.013304][ T9] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 453.070470][ T9] usb 2-1: config 6 interface 86 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 453.364863][ T30] audit: type=1400 audit(1754449329.389:483): avc: denied { ioctl } for pid=9819 comm="syz.4.911" path="socket:[20112]" dev="sockfs" ino=20112 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 453.420548][ T9] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 453.612926][ T9] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 453.622728][ T9] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 453.632791][ T9] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 453.790142][ T9] usb 2-1: config 6 interface 86 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 453.870256][ T9] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 453.881027][ T9] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 453.940927][ T9] usb 2-1: config 6 interface 4 has no altsetting 0 [ 453.980607][ T9] usb 2-1: config 6 interface 86 has no altsetting 0 [ 454.000384][ T9] usb 2-1: config 6 interface 191 has no altsetting 0 [ 454.009564][ T9] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 454.030676][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.065994][ T9] usb 2-1: Product: syz [ 454.089490][ T9] usb 2-1: Manufacturer: syz [ 454.118855][ T9] usb 2-1: SerialNumber: syz [ 454.255696][ T30] audit: type=1400 audit(1754449330.269:484): avc: denied { create } for pid=9829 comm="syz.3.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 454.363581][ T9] usb 2-1: can't set config #6, error -71 [ 454.730159][ T975] vhci_hcd: vhci_device speed not set [ 455.126711][ T9] usb 2-1: USB disconnect, device number 6 [ 456.377221][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.915'. [ 459.419432][ T9879] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 459.630692][ T30] audit: type=1400 audit(1754449335.599:485): avc: denied { setopt } for pid=9875 comm="syz.4.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 459.731858][ T9879] bridge_slave_0: left allmulticast mode [ 459.737518][ T9879] bridge_slave_0: left promiscuous mode [ 459.750392][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.227491][ T9886] netlink: 'syz.2.925': attribute type 10 has an invalid length. [ 462.740212][ T9879] bridge_slave_1: left allmulticast mode [ 462.751466][ T9879] bridge_slave_1: left promiscuous mode [ 462.759038][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.970146][ T9879] bond0: (slave bond_slave_0): Releasing backup interface [ 462.984592][ T9879] bond0: (slave bond_slave_1): Releasing backup interface [ 463.003435][ T9879] team0: Port device team_slave_0 removed [ 463.060802][ T9879] team0: Port device team_slave_1 removed [ 463.066852][ T9879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.396041][ T9879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.538658][ T9879] bond1: (slave geneve2): Releasing active interface [ 463.547883][ T30] audit: type=1400 audit(1754449339.469:486): avc: denied { connect } for pid=9921 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 463.583151][ T9879] bond1: (slave geneve2): the permanent HWaddr of slave - 6e:43:62:4c:65:40 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 463.608358][ T9879] geneve2: left allmulticast mode [ 463.621554][ T9879] bond1: (slave veth3): Releasing active interface [ 463.656698][ T9886] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 463.667129][ T9886] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 463.734084][ T9889] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 463.778351][ T9889] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 463.865516][ T30] audit: type=1400 audit(1754449339.899:487): avc: denied { read } for pid=9921 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 463.885519][ T9889] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 464.006824][ T30] audit: type=1400 audit(1754449339.919:488): avc: denied { firmware_load } for pid=9878 comm="syz.2.925" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 466.604172][ T9951] qnx6: unable to read the first superblock [ 467.239173][ T9966] overlayfs: failed to resolve './file1': -2 [ 467.245942][ T30] audit: type=1400 audit(1754449343.249:489): avc: denied { mount } for pid=9957 comm="syz.2.944" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 469.174629][ T30] audit: type=1400 audit(1754449345.209:490): avc: denied { getopt } for pid=9959 comm="syz.0.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 469.290400][ T5908] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 469.492985][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 469.534590][ T5908] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 469.543732][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.659798][ T5908] usb 5-1: Product: syz [ 469.676120][ T5908] usb 5-1: Manufacturer: syz [ 469.697586][ T5908] usb 5-1: SerialNumber: syz [ 469.743121][ T5908] usb 5-1: config 0 descriptor?? [ 469.893886][ T975] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 469.904841][ T975] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 469.917160][ T5908] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 470.913512][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.952'. [ 470.973462][T10006] can0: slcan on ptm0. [ 471.063430][ T30] audit: type=1400 audit(1754449347.099:491): avc: denied { search } for pid=5512 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.151573][T10004] can0 (unregistered): slcan off ptm0. [ 471.175291][ T30] audit: type=1400 audit(1754449347.099:492): avc: denied { search } for pid=5512 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.270427][ T30] audit: type=1400 audit(1754449347.099:493): avc: denied { search } for pid=5512 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.342804][ T30] audit: type=1400 audit(1754449347.099:494): avc: denied { read } for pid=5512 comm="dhcpcd" name="n102" dev="tmpfs" ino=4901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 471.442003][ T30] audit: type=1400 audit(1754449347.099:495): avc: denied { open } for pid=5512 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 471.619439][ T30] audit: type=1400 audit(1754449347.099:496): avc: denied { getattr } for pid=5512 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=4901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 471.831055][T10028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.843895][T10028] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.151457][ T5908] gspca_ov534_9: reg_w failed -110 [ 472.167667][ T30] audit: type=1400 audit(1754449347.229:497): avc: denied { read open } for pid=10009 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.363699][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.375667][T10028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.440653][ T30] audit: type=1400 audit(1754449347.229:498): avc: denied { getattr } for pid=10009 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.451969][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.467096][ T30] audit: type=1400 audit(1754449347.499:499): avc: denied { execmem } for pid=10014 comm="syz.2.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 472.840595][ T5908] gspca_ov534_9: Unknown sensor 0000 [ 472.840674][ T5908] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 472.910063][T10021] syzkaller1: entered promiscuous mode [ 472.915542][T10021] syzkaller1: entered allmulticast mode [ 473.860139][ T30] audit: type=1400 audit(1754449349.889:500): avc: denied { add_name } for pid=10008 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.932219][ T30] audit: type=1400 audit(1754449349.889:501): avc: denied { create } for pid=10008 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 473.968037][ T30] audit: type=1400 audit(1754449349.889:502): avc: denied { write } for pid=10008 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 474.021839][ T43] usb 5-1: USB disconnect, device number 6 [ 474.159901][T10051] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 475.236668][ T30] audit: type=1400 audit(1754449349.889:503): avc: denied { append } for pid=10008 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=4914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 476.595008][ T30] audit: type=1400 audit(1754449352.629:504): avc: denied { remove_name } for pid=10054 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.793457][ T30] audit: type=1400 audit(1754449352.629:505): avc: denied { unlink } for pid=10054 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=4914 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 478.871339][ T51] Bluetooth: hci5: command 0xfc11 tx timeout [ 478.872229][ T5857] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 480.575699][ T30] audit: type=1400 audit(1754449356.409:506): avc: denied { setopt } for pid=10103 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 480.891880][T10112] SELinux: policydb version -845211227 does not match my version range 15-35 [ 481.058781][T10112] SELinux: failed to load policy [ 481.189300][T10106] could not allocate digest TFM handle cryptd(blake2b-160) [ 481.308276][ T30] audit: type=1400 audit(1754449357.279:507): avc: denied { ioctl } for pid=10073 comm="syz.1.964" path="socket:[21373]" dev="sockfs" ino=21373 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 484.831286][ T30] audit: type=1400 audit(1754449360.769:508): avc: denied { create } for pid=10152 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 489.821365][ T30] audit: type=1400 audit(1754449365.679:509): avc: denied { read } for pid=10184 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 489.847455][T10192] netlink: 'syz.4.995': attribute type 13 has an invalid length. [ 490.426699][T10194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.720265][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 491.201761][ T30] audit: type=1400 audit(1754449366.900:510): avc: denied { append } for pid=10200 comm="syz.1.988" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 491.286381][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.297676][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.310139][ T9] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 491.323831][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.989'. [ 491.337455][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.357612][ T9] usb 5-1: config 0 descriptor?? [ 491.507542][T10211] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10211 comm=syz.0.989 [ 491.785976][ T9] hid-led 0003:1D34:0004.0005: unknown main item tag 0x0 [ 492.073734][ T9] hid-led 0003:1D34:0004.0005: probe with driver hid-led failed with error -71 [ 492.970800][ T9] usb 5-1: USB disconnect, device number 7 [ 493.194742][T10222] Driver unsupported XDP return value 0 on prog (id 202) dev N/A, expect packet loss! [ 493.279937][T10218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 493.317877][T10218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.330288][T10218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.356717][T10218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 493.367688][T10218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 494.476685][ T30] audit: type=1400 audit(1754449370.270:511): avc: denied { create } for pid=10230 comm="syz.3.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 494.805896][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 495.166716][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout [ 495.350997][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 495.351397][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 495.510981][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 495.517505][T10249] Bluetooth: hci4: command 0x0c1a tx timeout [ 497.266538][T10252] wg1 speed is unknown, defaulting to 1000 [ 497.400809][T10252] lo speed is unknown, defaulting to 1000 [ 500.951931][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.958295][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.009839][ T30] audit: type=1400 audit(1754449381.504:512): avc: denied { read write } for pid=10314 comm="syz.1.1015" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 506.101789][T10315] loop6: detected capacity change from 0 to 2560 [ 506.131185][ T5863] buffer_io_error: 11 callbacks suppressed [ 506.131194][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.146839][ T30] audit: type=1400 audit(1754449382.124:513): avc: denied { append } for pid=10314 comm="syz.1.1015" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.257618][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.266305][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.284900][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.302469][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.384328][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.392615][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.402523][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.410462][ T5863] ldm_validate_partition_table(): Disk read failed. [ 506.417201][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.378152][ T5863] Buffer I/O error on dev loop6, logical block 0, async page read [ 507.387151][ T5863] Dev loop6: unable to read RDB block 0 [ 507.400841][ T5863] loop6: unable to read partition table [ 507.493826][ T30] audit: type=1400 audit(1754449382.124:514): avc: denied { open } for pid=10314 comm="syz.1.1015" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 507.619009][T10360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1022'. [ 507.926275][T10368] binder: 10359:10368 ioctl c0306201 0 returned -14 [ 508.400295][T10358] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10358 comm=syz.2.1022 [ 508.480059][ T30] audit: type=1400 audit(1754449384.423:515): avc: denied { lock } for pid=10357 comm="syz.2.1022" path="socket:[22748]" dev="sockfs" ino=22748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 508.868500][ T30] audit: type=1400 audit(1754449384.893:516): avc: denied { create } for pid=10377 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 509.469621][ T30] audit: type=1400 audit(1754449384.893:517): avc: denied { write } for pid=10377 comm="syz.4.1026" path="socket:[22776]" dev="sockfs" ino=22776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 510.613470][T10400] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1032'. [ 510.633715][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 511.126796][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1032'. [ 511.226798][ T30] audit: type=1400 audit(1754449387.253:518): avc: denied { bind } for pid=10402 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 511.553828][T10407] syz.2.1035 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 517.051517][T10449] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 517.063179][T10449] qnx6: wrong signature (magic) in superblock #1. [ 517.069606][T10449] qnx6: unable to read the first superblock [ 520.178791][ T30] audit: type=1400 audit(1754449395.873:519): avc: denied { getopt } for pid=10473 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 521.368638][ T30] audit: type=1400 audit(1754449397.333:520): avc: denied { mount } for pid=10475 comm="syz.4.1051" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 523.387568][T10501] sp0: Synchronizing with TNC [ 524.656107][T10500] [U] è` [ 527.289438][T10527] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1062'. [ 528.875702][ T30] audit: type=1804 audit(1754449404.703:521): pid=10538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1064" name="file0" dev="ramfs" ino=22050 res=1 errno=0 [ 531.493141][ T30] audit: type=1400 audit(1754449407.513:522): avc: denied { bind } for pid=10555 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 535.324120][T10591] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 535.336722][T10591] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 536.559110][ T30] audit: type=1400 audit(1754449412.583:523): avc: denied { connect } for pid=10595 comm="syz.3.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 537.178559][T10610] netlink: zone id is out of range [ 537.184019][T10610] netlink: zone id is out of range [ 537.191558][T10610] netlink: del zone limit has 4 unknown bytes [ 537.886583][T10614] misc userio: Invalid payload size [ 537.892639][T10614] misc userio: No port type given on /dev/userio [ 539.895019][T10634] Failed to initialize the IGMP autojoin socket (err -2) [ 540.200139][ T30] audit: type=1400 audit(1754449415.046:524): avc: denied { getopt } for pid=10626 comm="syz.0.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 540.332060][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 540.610152][ T5908] usb 2-1: device descriptor read/64, error -71 [ 541.297263][ T5908] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 541.388518][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1091'. [ 541.515487][ T5908] usb 2-1: device descriptor read/64, error -71 [ 541.592777][T10653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10653 comm=syz.2.1091 [ 541.640313][ T5908] usb usb2-port1: attempt power cycle [ 543.286474][T10671] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 543.592554][T10667] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 544.688479][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b24000: rx timeout, send abort [ 545.197651][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b24000: abort rx timeout. Force session deactivation [ 545.290174][ T30] audit: type=1400 audit(1754449421.276:525): avc: denied { read } for pid=5199 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 545.330282][ T30] audit: type=1400 audit(1754449421.276:526): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.501152][ T30] audit: type=1400 audit(1754449421.276:527): avc: denied { search } for pid=5199 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.967650][ T30] audit: type=1400 audit(1754449421.276:528): avc: denied { add_name } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.035720][ T30] audit: type=1400 audit(1754449421.276:529): avc: denied { create } for pid=5199 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 546.353269][ T30] audit: type=1400 audit(1754449421.276:530): avc: denied { append open } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 546.949861][ T30] audit: type=1400 audit(1754449421.276:531): avc: denied { getattr } for pid=5199 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 547.223219][T10727] IPv6: Can't replace route, no match found [ 548.162158][T10738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1107'. [ 551.342471][ T30] audit: type=1400 audit(1754449427.276:532): avc: denied { create } for pid=10780 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 551.342641][ T30] audit: type=1400 audit(1754449427.276:533): avc: denied { write } for pid=10780 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 551.342771][ T30] audit: type=1400 audit(1754449427.276:534): avc: denied { nlmsg_write } for pid=10780 comm="syz.0.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 553.844667][T10814] binder: 10804:10814 ioctl c0306201 0 returned -14 [ 554.319718][ T30] audit: type=1326 audit(1754449430.346:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b5f8eb69 code=0x7ffc0000 [ 554.442597][ T30] audit: type=1326 audit(1754449430.376:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b5f8eb69 code=0x7ffc0000 [ 554.570020][ T30] audit: type=1326 audit(1754449430.376:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f80b5f8eb69 code=0x7ffc0000 [ 554.600858][ T30] audit: type=1326 audit(1754449430.376:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b5f8eb69 code=0x7ffc0000 [ 554.890511][ T30] audit: type=1326 audit(1754449430.376:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b5f8eb69 code=0x7ffc0000 [ 555.574519][ T30] audit: type=1326 audit(1754449430.376:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f80b5f8eb69 code=0x7ffc0000 [ 555.605570][ T30] audit: type=1326 audit(1754449430.376:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b5f8eb69 code=0x7ffc0000 [ 556.934070][T10840] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 557.304357][T10840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.872875][T10849] syz_tun: entered allmulticast mode [ 558.423619][T10858] blktrace: Concurrent blktraces are not allowed on sg0 [ 560.473089][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 560.473101][ T30] audit: type=1400 audit(1754449436.266:543): avc: denied { map } for pid=10872 comm="syz.1.1136" path="socket:[23497]" dev="sockfs" ino=23497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.585491][ T30] audit: type=1400 audit(1754449436.266:544): avc: denied { accept } for pid=10872 comm="syz.1.1136" path="socket:[23497]" dev="sockfs" ino=23497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 561.827295][T10891] netlink: 'syz.3.1140': attribute type 23 has an invalid length. [ 562.113328][T10896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.055491][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.070026][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.157376][T10918] netlink: 'syz.1.1154': attribute type 10 has an invalid length. [ 564.309889][T10918] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 564.319272][T10918] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 564.733350][T10925] 9pnet_virtio: no channels available for device 127.0.0.1 [ 565.172944][ T5908] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 565.485564][ T5908] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 565.546183][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.609053][ T5908] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 565.734458][ T5908] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.821129][ T5908] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.383772][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.438440][ T5908] usb 5-1: Product: syz [ 566.459389][ T5908] usb 5-1: Manufacturer: syz [ 566.550383][ T5908] usb 5-1: SerialNumber: syz [ 568.219572][ T5908] usb 5-1: USB disconnect, device number 8 [ 568.365799][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.590036][T10964] overlayfs: missing 'lowerdir' [ 568.704724][T10965] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 569.026537][ T30] audit: type=1400 audit(1754449445.056:545): avc: denied { accept } for pid=10966 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 569.223901][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 572.337678][ T30] audit: type=1400 audit(1754449448.316:546): avc: denied { map } for pid=10991 comm="syz.1.1164" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 572.379235][ T30] audit: type=1400 audit(1754449448.316:547): avc: denied { execute } for pid=10991 comm="syz.1.1164" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 572.407468][T10249] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 574.196798][T11026] bridge1: entered promiscuous mode [ 575.975993][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 576.041434][ T30] audit: type=1400 audit(1754449451.992:548): avc: denied { write } for pid=11038 comm="syz.3.1176" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 577.663650][T11060] evm: overlay not supported [ 578.230298][ T30] audit: type=1400 audit(1754449454.242:549): avc: denied { watch } for pid=11053 comm="syz.0.1179" path="/204/bus/file1" dev="overlay" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 580.626939][ T30] audit: type=1400 audit(1754449456.522:550): avc: denied { map } for pid=11071 comm="syz.1.1186" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 580.777306][ T30] audit: type=1400 audit(1754449456.522:551): avc: denied { execute } for pid=11071 comm="syz.1.1186" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 582.024393][T11091] sit1: entered allmulticast mode [ 583.306258][T11098] cgroup: Need name or subsystem set [ 584.554916][T11111] gfs2: gfs2 mount does not exist [ 585.092030][ T30] audit: type=1400 audit(1754449460.582:552): avc: denied { mounton } for pid=11102 comm="syz.4.1193" path="/syzcgroup/unified/syz4" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 587.069177][T11128] could not allocate digest TFM handle vmac64(aes-arm) [ 587.080167][ T30] audit: type=1400 audit(1754449462.712:553): avc: denied { setopt } for pid=11117 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.726199][T11141] bridge0: entered promiscuous mode [ 587.732482][T11141] macvlan2: entered promiscuous mode [ 588.450502][T11153] serio: Serial port ptm0 [ 589.018131][ T30] audit: type=1400 audit(1754449465.044:554): avc: denied { ioctl } for pid=11158 comm="syz.3.1204" path="socket:[24057]" dev="sockfs" ino=24057 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 590.638750][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1207'. [ 594.409464][ T30] audit: type=1400 audit(1754449470.434:555): avc: denied { remount } for pid=11216 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 594.929185][T11227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1217'. [ 595.371031][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 596.205744][T11236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.218409][ T43] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 596.226604][ T43] usb 2-1: config 0 has no interface number 0 [ 596.245918][T11236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1220'. [ 597.514882][T11247] netlink: 'syz.2.1223': attribute type 10 has an invalid length. [ 597.526314][T11247] team0: Device hsr_slave_0 failed to register rx_handler [ 598.411457][ T30] audit: type=1400 audit(1754449474.434:556): avc: denied { bind } for pid=11251 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 598.431487][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.978808][ T30] audit: type=1400 audit(1754449475.004:557): avc: denied { getopt } for pid=11255 comm="syz.0.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 599.220273][ T43] usb 2-1: string descriptor 0 read error: -71 [ 599.226998][ T43] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20 [ 599.347778][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.404028][ T43] usb 2-1: config 0 descriptor?? [ 599.418381][ T43] usb 2-1: can't set config #0, error -71 [ 599.509542][ T43] usb 2-1: USB disconnect, device number 10 [ 601.242935][T11284] wg1 speed is unknown, defaulting to 1000 [ 601.258102][T11284] lo speed is unknown, defaulting to 1000 [ 602.063248][T11276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.487875][T11295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.062133][T11297] pim6reg: entered allmulticast mode [ 604.042405][T11305] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 604.712527][T11305] bond0: (slave team0): Releasing backup interface [ 604.886742][T11305] bond0: (slave wlan1): Releasing backup interface [ 605.387091][ T30] audit: type=1400 audit(1754449481.414:558): avc: denied { firmware_load } for pid=11303 comm="syz.0.1237" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 605.389957][ T9] wg1 speed is unknown, defaulting to 1000 [ 607.671947][T11346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.460689][T10249] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 610.469748][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 610.667282][T11373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.784448][T10249] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 613.028197][T11390] wg1 speed is unknown, defaulting to 1000 [ 613.076868][T11402] bridge2: entered promiscuous mode [ 613.265533][T11390] lo speed is unknown, defaulting to 1000 [ 613.339582][ T5908] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 613.640321][T11408] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 613.653679][T11408] Error validating options; rc = [-22] [ 613.952011][ T5908] usb 4-1: config index 0 descriptor too short (expected 32786, got 18) [ 613.963745][ T5908] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 613.985627][ T5908] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 613.994461][ T5908] usb 4-1: Manufacturer: syz [ 614.015160][ T5908] usb 4-1: config 0 descriptor?? [ 614.028607][ T5908] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 614.043900][ T5908] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 614.570610][ T5908] usb 4-1: USB disconnect, device number 5 [ 614.582992][ T5908] ftdi_sio 4-1:0.0: device disconnected [ 614.643010][ T30] audit: type=1400 audit(1754449490.664:559): avc: denied { setattr } for pid=11416 comm="syz.1.1261" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 614.684434][ T30] audit: type=1400 audit(1754449490.664:560): avc: denied { write } for pid=11416 comm="syz.1.1261" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 614.905877][ T30] audit: type=1400 audit(1754449490.664:561): avc: denied { open } for pid=11416 comm="syz.1.1261" path="/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 617.133295][T10249] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 617.141873][T10249] Bluetooth: hci2: Injecting HCI hardware error event [ 617.150091][T10249] Bluetooth: hci2: hardware error 0x00 [ 618.112446][T11446] wg1 speed is unknown, defaulting to 1000 [ 618.164749][T11446] lo speed is unknown, defaulting to 1000 [ 619.190168][T10249] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 619.950469][T11469] fuse: Bad value for 'fd' [ 622.177481][T11486] wg1 speed is unknown, defaulting to 1000 [ 622.600785][T11486] lo speed is unknown, defaulting to 1000 [ 623.462874][ T30] audit: type=1400 audit(1754449499.344:562): avc: denied { read } for pid=11493 comm="syz.1.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 623.833462][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.839847][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.104976][T11516] bridge1: entered promiscuous mode [ 626.963480][ T30] audit: type=1400 audit(1754449502.994:563): avc: denied { create } for pid=11522 comm="syz.3.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 627.191406][ T30] audit: type=1400 audit(1754449503.034:564): avc: denied { recv } for pid=11522 comm="syz.3.1284" saddr=10.128.0.169 src=30006 daddr=10.128.0.140 dest=37338 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 628.636676][T11542] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 633.878569][T11586] bridge3: entered promiscuous mode [ 634.529497][ T30] audit: type=1400 audit(1754449510.174:565): avc: denied { connect } for pid=11589 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 637.222382][T11618] overlayfs: failed to clone upperpath [ 637.470515][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 637.596636][T11622] vlan2: entered promiscuous mode [ 637.602526][T11622] vlan2: entered allmulticast mode [ 637.607745][T11622] hsr_slave_1: entered allmulticast mode [ 637.638349][ T30] audit: type=1400 audit(1754449513.664:566): avc: denied { write } for pid=11620 comm="syz.3.1307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 637.702604][ T30] audit: type=1400 audit(1754449513.674:567): avc: denied { read } for pid=11620 comm="syz.3.1307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 639.752590][T11640] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 639.759130][T11640] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 639.769030][T11640] vhci_hcd vhci_hcd.0: Device attached [ 640.209546][T11641] vhci_hcd: connection closed [ 640.301855][ T9] vhci_hcd: vhci_device speed not set [ 640.367105][ T9517] vhci_hcd: stop threads [ 640.381920][ T9517] vhci_hcd: release socket [ 640.397825][ T9517] vhci_hcd: disconnect device [ 640.562029][ T9] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 640.569567][ T9] usb 39-1: enqueue for inactive port 0 [ 641.124077][ T9] vhci_hcd: vhci_device speed not set [ 641.202655][ T30] audit: type=1400 audit(1754449517.234:568): avc: denied { listen } for pid=11651 comm="syz.4.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 642.175249][T11661] libceph: resolve '4..' (ret=-3): failed [ 642.451138][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'. [ 643.300820][T11672] overlayfs: failed to clone upperpath [ 643.799821][T11683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.911792][ T30] audit: type=1400 audit(1754449519.904:569): avc: denied { map } for pid=11685 comm="syz.2.1323" path="socket:[27023]" dev="sockfs" ino=27023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 644.944301][T11701] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1327'. [ 647.687311][ T30] audit: type=1326 audit(1754449523.674:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11723 comm="syz.4.1332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa034f8eb69 code=0x0 [ 649.182953][ T30] audit: type=1400 audit(1754449525.114:571): avc: denied { execute } for pid=11741 comm="syz.0.1335" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 651.344982][ T30] audit: type=1400 audit(1754449527.054:572): avc: denied { ioctl } for pid=11755 comm="syz.0.1339" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.656082][T11774] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 654.980255][ T30] audit: type=1400 audit(1754449531.004:573): avc: denied { recv } for pid=11780 comm="syz.3.1347" saddr=10.128.0.169 src=47198 daddr=10.128.0.140 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 655.005551][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.736226][ T30] audit: type=1400 audit(1754449531.764:574): avc: denied { mount } for pid=11794 comm="syz.2.1351" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 655.990585][T11814] overlayfs: failed to clone upperpath [ 656.940496][T11813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 657.120646][T11813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 657.128743][T11813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 658.571919][T11835] dvmrp17: entered allmulticast mode [ 658.962105][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 659.194214][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 659.200772][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 659.206776][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 659.213444][T11813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 661.310236][ T43] IPVS: starting estimator thread 0... [ 661.320107][T10249] Bluetooth: hci1: command 0x0c1a tx timeout [ 662.370104][T11859] IPVS: using max 78 ests per chain, 187200 per kthread [ 662.390099][T11866] netlink: 'syz.1.1367': attribute type 7 has an invalid length. [ 665.362688][T11920] geneve2: entered promiscuous mode [ 665.367956][T11920] geneve2: entered allmulticast mode [ 668.364400][T11944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'. [ 668.898811][T11947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 669.205681][T11947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 669.213037][T11947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 669.220582][T11947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 669.354003][T11953] hugetlbfs: syz.3.1381 (11953): Using mlock ulimits for SHM_HUGETLB is obsolete [ 669.810539][T11962] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 669.819456][T11962] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 670.949942][T11841] Bluetooth: hci0: command 0x0c1a tx timeout [ 671.179606][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 671.281855][T11841] Bluetooth: hci1: command 0x0c1a tx timeout [ 671.287864][T11841] Bluetooth: hci4: command 0x0c1a tx timeout [ 671.294071][T11841] Bluetooth: hci3: command 0x0c1a tx timeout [ 672.131260][T11987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.299691][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 676.233829][ T30] audit: type=1326 audit(1754449551.584:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12012 comm="syz.3.1394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53d7b8eb69 code=0x0 [ 677.308458][T12030] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 677.317507][T12030] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 677.782667][ T30] audit: type=1400 audit(1754449553.814:576): avc: denied { write } for pid=12020 comm="syz.3.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 678.439644][T12042] overlayfs: failed to clone upperpath [ 680.734232][T12074] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 680.778157][ T30] audit: type=1400 audit(1754449556.734:577): avc: denied { mounton } for pid=12065 comm="syz.4.1408" path="/257/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 681.248466][ T30] audit: type=1400 audit(1754449557.224:578): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 684.162788][T12107] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1416'. [ 685.271746][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.278142][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.558176][T12133] wg1 speed is unknown, defaulting to 1000 [ 687.570328][T12133] lo speed is unknown, defaulting to 1000 [ 687.673035][ T30] audit: type=1400 audit(1754449563.454:579): avc: denied { write } for pid=12127 comm="syz.1.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 689.406506][ T30] audit: type=1400 audit(1754449565.424:580): avc: denied { mounton } for pid=12147 comm="syz.4.1425" path="/file0" dev="ramfs" ino=28741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 691.246084][ T30] audit: type=1400 audit(1754449567.214:581): avc: denied { create } for pid=12163 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 693.287593][T12180] o2cb: This node has not been configured. [ 693.294195][T12180] o2cb: Cluster check failed. Fix errors before retrying. [ 693.302068][T12180] (syz.2.1432,12180,0):user_dlm_register:674 ERROR: status = -22 [ 693.309819][T12180] (syz.2.1432,12180,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 693.328273][T12180] o2cb: This node has not been configured. [ 693.334731][T12180] o2cb: Cluster check failed. Fix errors before retrying. [ 693.342603][T12180] (syz.2.1432,12180,0):user_dlm_register:674 ERROR: status = -22 [ 693.351126][T12180] (syz.2.1432,12180,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 693.520737][ T30] audit: type=1400 audit(1754449569.304:582): avc: denied { mount } for pid=12176 comm="syz.2.1432" name="/" dev="ocfs2_dlmfs" ino=28792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 693.544394][ T30] audit: type=1400 audit(1754449569.314:583): avc: denied { add_name } for pid=12176 comm="syz.2.1432" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 693.566007][ T30] audit: type=1400 audit(1754449569.314:584): avc: denied { create } for pid=12176 comm="syz.2.1432" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 693.591101][ T30] audit: type=1400 audit(1754449569.314:585): avc: denied { associate } for pid=12176 comm="syz.2.1432" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 694.340866][ T30] audit: type=1400 audit(1754449569.954:586): avc: denied { mount } for pid=12179 comm="syz.1.1431" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 694.568773][T12192] netlink: 'syz.3.1433': attribute type 12 has an invalid length. [ 698.390656][ T30] audit: type=1400 audit(1754449574.144:587): avc: denied { ioctl } for pid=12220 comm="syz.3.1438" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 699.440779][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 699.447437][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 699.758443][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 699.775833][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 699.811249][T12235] ceph: No mds server is up or the cluster is laggy [ 702.140150][T12265] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[12265] [ 703.168337][ T30] audit: type=1400 audit(1754449578.814:588): avc: denied { read } for pid=12268 comm="syz.2.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 703.263871][T12283] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1453'. [ 703.304725][T12282] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1453'. [ 703.814241][T12289] netlink: 'syz.2.1455': attribute type 10 has an invalid length. [ 703.892788][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 704.740529][T12297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.746766][T12341] block nbd3: not configured, cannot reconfigure [ 707.061355][T12342] wg1 speed is unknown, defaulting to 1000 [ 707.070944][T12342] lo speed is unknown, defaulting to 1000 [ 708.372086][T12365] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 709.195893][T12365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 709.234519][T12368] bond4: (slave gretap2): making interface the new active one [ 709.273462][T12368] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 709.607077][ T30] audit: type=1400 audit(1754449585.634:589): avc: denied { listen } for pid=12378 comm="syz.4.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 709.675140][T12382] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 709.718081][T12382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=12382 comm=syz.4.1471 [ 714.454766][T12429] rdma_op ffff88807569f1f0 conn xmit_rdma 0000000000000000 [ 714.472225][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 714.482941][T12429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.793678][T12431] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 714.800186][T12431] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 714.953718][T12431] vhci_hcd vhci_hcd.0: Device attached [ 715.089262][T12432] vhci_hcd: connection closed [ 715.105116][ T7342] vhci_hcd: stop threads [ 715.215638][ T7342] vhci_hcd: release socket [ 715.220209][ T7342] vhci_hcd: disconnect device [ 715.258964][T12393] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 715.287477][T12393] usb 39-1: enqueue for inactive port 0 [ 715.347160][T12440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.781373][T12393] vhci_hcd: vhci_device speed not set [ 716.891605][T12461] QAT: Device 11 not found [ 717.303058][ T5908] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 719.073734][ T5908] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 719.083705][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.101589][ T5908] usb 4-1: Product: syz [ 719.105765][ T5908] usb 4-1: Manufacturer: syz [ 719.127452][ T5908] usb 4-1: SerialNumber: syz [ 719.149655][ T5908] usb 4-1: config 0 descriptor?? [ 719.166446][ T5908] pwc: Philips PCA645VC USB webcam detected. [ 720.501593][ T5908] pwc: send_video_command error -71 [ 720.506864][ T5908] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 720.517132][ T5908] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 721.311137][ T5908] usb 4-1: USB disconnect, device number 6 [ 722.105288][T12502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.157528][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1505'. [ 724.146723][T12516] wg1 speed is unknown, defaulting to 1000 [ 724.153903][T12516] lo speed is unknown, defaulting to 1000 [ 724.880737][T12532] overlayfs: failed to clone upperpath [ 724.888410][T11385] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 725.592038][T12520] delete_channel: no stack [ 725.787563][T11385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.830083][T11385] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 725.920268][T11385] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 725.929421][T11385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.956787][T11385] usb 4-1: config 0 descriptor?? [ 725.991921][T12550] libceph: resolve '4..' (ret=-3): failed [ 726.401345][ T30] audit: type=1400 audit(1754449602.404:590): avc: denied { getopt } for pid=12552 comm="syz.1.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.492684][T11385] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 727.375266][T12567] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 728.143463][T11385] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 728.159904][T11385] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 728.195526][T11385] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -32 [ 728.204153][T12567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.220346][T12567] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 728.230771][T12524] bond2: (slave gretap1): making interface the new active one [ 728.310224][T12524] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 728.857001][ T43] usb 4-1: USB disconnect, device number 7 [ 730.026087][T12578] syz.0.1518 (12578): drop_caches: 2 [ 730.186097][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 731.247190][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 731.283493][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 731.297756][ T9] usb 4-1: config 6 has an invalid interface number: 28 but max is 0 [ 731.310421][ T9] usb 4-1: config 6 has no interface number 0 [ 731.318564][ T9] usb 4-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=d7.f0 [ 731.328755][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.436761][ T9] usb 4-1: Product: syz [ 731.450078][ T9] usb 4-1: Manufacturer: syz [ 731.754165][ T9] usb 4-1: SerialNumber: syz [ 732.466732][ T9] aiptek 4-1:6.28: interface has no int in endpoints, but must have minimum 1 [ 732.932514][ T9] usb 4-1: USB disconnect, device number 8 [ 734.644795][T12634] delete_channel: no stack [ 734.752052][ T30] audit: type=1400 audit(1754449610.774:591): avc: denied { read } for pid=12635 comm="syz.4.1532" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 735.371954][ T30] audit: type=1400 audit(1754449611.394:592): avc: denied { write } for pid=12641 comm="syz.0.1534" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 736.155542][T12643] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 736.161625][T12643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 736.167638][T12643] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 736.174698][T12643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 738.403519][T10249] Bluetooth: hci0: command 0x0c1a tx timeout [ 738.409560][T10249] Bluetooth: hci1: command 0x0c1a tx timeout [ 738.415931][T10249] Bluetooth: hci4: command 0x0c1a tx timeout [ 738.422003][T11841] Bluetooth: hci3: command 0x0c1a tx timeout [ 739.922884][ T30] audit: type=1400 audit(1754449615.954:593): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 739.962890][T12393] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 740.997170][T12393] usb 4-1: Using ep0 maxpacket: 8 [ 741.031441][T12393] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 741.082582][T12393] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 742.128493][T12687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 742.245679][T12393] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 742.348989][T12393] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.380520][T12695] usb usb8: usbfs: process 12695 (syz.4.1542) did not claim interface 0 before use [ 742.446593][T12393] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 742.470666][T12393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.730291][T12393] usb 4-1: usb_control_msg returned -71 [ 743.234391][T12393] usbtmc 4-1:16.0: can't read capabilities [ 743.289042][T12393] usb 4-1: USB disconnect, device number 9 [ 743.829987][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 744.239733][T12393] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 744.426368][T12393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.017017][T12393] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 745.078482][T12393] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 745.640647][T12393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.676316][T12393] usb 4-1: config 0 descriptor?? [ 745.974536][T12738] bridge0: entered promiscuous mode [ 745.980578][T12738] bridge0: entered allmulticast mode [ 746.325632][T12393] usbhid 4-1:0.0: can't add hid device: -71 [ 746.487717][T12393] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 746.712454][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.725352][T12393] usb 4-1: USB disconnect, device number 10 [ 746.745607][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.972294][T12750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1557'. [ 747.053015][ T9517] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.476411][ T9517] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.533378][ T59] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.565199][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.614772][T12753] wg1 speed is unknown, defaulting to 1000 [ 747.623595][T12753] lo speed is unknown, defaulting to 1000 [ 747.798654][T12759] overlayfs: failed to resolve './file0': -2 [ 747.820654][ T30] audit: type=1400 audit(1754449623.754:594): avc: denied { ioctl } for pid=12754 comm="syz.4.1560" path="socket:[29660]" dev="sockfs" ino=29660 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 748.508615][T12748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.648850][T12781] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 751.197660][T12781] bond3: entered promiscuous mode [ 751.206490][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 751.236227][T12781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 751.382397][T12790] netlink: 'syz.1.1565': attribute type 10 has an invalid length. [ 751.525059][T12785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 751.554818][T12785] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 751.965332][T12785] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 751.987553][T12785] bond3: (slave vcan1): making interface the new active one [ 752.207325][T12785] vcan1: entered promiscuous mode [ 752.213936][T12785] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 752.651104][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'. [ 753.211460][T12790] dummy0: entered allmulticast mode [ 753.217392][T12790] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 753.900030][ T30] audit: type=1400 audit(1754449629.744:595): avc: denied { map } for pid=12814 comm="syz.3.1570" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 754.743365][ T30] audit: type=1326 audit(1754449630.764:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f918eb69 code=0x7ffc0000 [ 754.861486][ T30] audit: type=1326 audit(1754449630.764:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f918eb69 code=0x7ffc0000 [ 755.167180][ T30] audit: type=1326 audit(1754449630.764:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6f918eb69 code=0x7ffc0000 [ 755.371026][ T30] audit: type=1326 audit(1754449630.764:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f918eb69 code=0x7ffc0000 [ 755.394912][ T30] audit: type=1326 audit(1754449630.764:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f918eb69 code=0x7ffc0000 [ 755.461211][T12854] overlayfs: failed to clone upperpath [ 755.932788][T12856] netlink: 'syz.2.1571': attribute type 10 has an invalid length. [ 756.127811][ T30] audit: type=1326 audit(1754449630.814:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa6f918eb69 code=0x7ffc0000 [ 756.298950][ T30] audit: type=1326 audit(1754449630.814:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f918eb69 code=0x7ffc0000 [ 756.340591][T12862] overlayfs: failed to resolve './file1': -2 [ 756.657914][ T30] audit: type=1326 audit(1754449630.814:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa6f918eb69 code=0x7ffc0000 [ 756.833133][ T30] audit: type=1326 audit(1754449630.914:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12836 comm="syz.1.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f918eb69 code=0x7ffc0000 [ 756.908080][T12870] NILFS (nullb0): couldn't find nilfs on the device [ 758.238029][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 760.140779][T12916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.209972][T12916] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 761.495447][T12934] netlink: 'syz.1.1591': attribute type 2 has an invalid length. [ 761.511912][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 761.511925][ T30] audit: type=1400 audit(1754449637.544:606): avc: denied { read } for pid=12933 comm="syz.1.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 761.726590][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 761.901088][ T30] audit: type=1400 audit(1754449637.574:607): avc: denied { connect } for pid=12926 comm="syz.0.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 762.532392][T12943] netlink: 'syz.2.1593': attribute type 1 has an invalid length. [ 762.607611][T12943] 8021q: adding VLAN 0 to HW filter on device bond4 [ 762.726395][T12943] bond4: (slave gretap1): making interface the new active one [ 762.822640][T12943] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 762.853819][T12945] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 763.976708][T12961] hub 8-0:1.0: USB hub found [ 763.982282][T12961] hub 8-0:1.0: 1 port detected [ 765.667627][T12976] wg1 speed is unknown, defaulting to 1000 [ 765.689010][T12976] lo speed is unknown, defaulting to 1000 [ 767.938870][ T30] audit: type=1400 audit(1754449643.954:608): avc: denied { ioctl } for pid=12993 comm="syz.2.1605" path="socket:[31021]" dev="sockfs" ino=31021 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 768.265396][ T30] audit: type=1400 audit(1754449644.144:609): avc: denied { watch_sb } for pid=12992 comm="syz.0.1606" path="/275" dev="tmpfs" ino=1508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 770.640633][T13026] affs: No valid root block on device nullb0 [ 771.223862][T13041] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 771.249518][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 771.491356][T13047] overlayfs: failed to clone upperpath [ 771.520046][ T30] audit: type=1400 audit(1754449647.534:610): avc: denied { watch } for pid=13050 comm="syz.0.1618" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 773.505287][T13068] wg1 speed is unknown, defaulting to 1000 [ 773.512217][T13068] lo speed is unknown, defaulting to 1000 [ 774.129359][T13055] wg1 speed is unknown, defaulting to 1000 [ 774.141961][T13055] lo speed is unknown, defaulting to 1000 [ 775.555213][T13098] tmpfs: Unknown parameter 'usrquota0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 775.555213][T13098] 0 [ 776.340465][T13063] wg1 speed is unknown, defaulting to 1000 [ 776.488242][T13063] lo speed is unknown, defaulting to 1000 [ 776.806284][ T30] audit: type=1400 audit(1754449652.824:611): avc: denied { bind } for pid=13114 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 777.349500][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 777.407051][T13126] overlayfs: failed to clone upperpath [ 777.710821][T13129] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 778.161170][T13128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.035303][T13151] wg1 speed is unknown, defaulting to 1000 [ 780.047846][T13151] lo speed is unknown, defaulting to 1000 [ 781.773593][T13161] libceph: resolve '. [ 781.773593][T13161] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 781.773593][T13161] ' (ret=-3): failed [ 788.303361][T13235] wg1 speed is unknown, defaulting to 1000 [ 788.856491][T13235] lo speed is unknown, defaulting to 1000 [ 790.336364][T13249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 790.357989][T13243] wg1 speed is unknown, defaulting to 1000 [ 790.365379][T13243] lo speed is unknown, defaulting to 1000 [ 790.705869][ T43] Process accounting resumed [ 795.308630][T13322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1660'. [ 795.500312][T13323] wg1 speed is unknown, defaulting to 1000 [ 795.510849][T13323] lo speed is unknown, defaulting to 1000 [ 801.978241][T13369] netlink: 'syz.3.1667': attribute type 4 has an invalid length. [ 802.027590][T13369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=13369 comm=syz.3.1667 [ 802.421441][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 803.443383][T13385] wg1 speed is unknown, defaulting to 1000 [ 803.451162][T13385] lo speed is unknown, defaulting to 1000 [ 803.684902][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 803.696626][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.706122][ T43] usb 1-1: Product: syz [ 803.712004][ T43] usb 1-1: Manufacturer: syz [ 803.716691][ T43] usb 1-1: SerialNumber: syz [ 803.738174][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 804.099432][T13391] wg1 speed is unknown, defaulting to 1000 [ 804.112111][T13391] lo speed is unknown, defaulting to 1000 [ 805.090877][T11385] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 806.047801][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 806.212657][ T43] usb 1-1: USB disconnect, device number 8 [ 806.260478][T11385] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 806.296633][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814d482c00: rx timeout, send abort [ 806.415061][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 806.424117][T13410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.796999][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814d481c00: rx timeout, send abort [ 806.805870][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814d482c00: abort rx timeout. Force session deactivation [ 806.847478][T11385] ath9k_htc: Failed to initialize the device [ 806.861527][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 806.925373][T13409] rdma_op ffff8880792591f0 conn xmit_rdma 0000000000000000 [ 807.305235][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814d481c00: abort rx timeout. Force session deactivation [ 808.163105][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.169482][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.933353][T13434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 810.086783][T13452] overlayfs: failed to resolve './file1': -2 [ 810.277027][T13457] overlayfs: failed to clone upperpath [ 810.297063][T13456] libceph: resolve '4..' (ret=-3): failed [ 814.385133][T13487] 9pnet_fd: Insufficient options for proto=fd [ 814.925779][T13492] wg1 speed is unknown, defaulting to 1000 [ 814.934247][T13492] lo speed is unknown, defaulting to 1000 [ 815.730693][ T51] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 815.953780][T13505] overlayfs: failed to clone upperpath [ 816.003158][T13506] overlayfs: failed to clone upperpath [ 818.613153][T13524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.498828][T13533] wg1 speed is unknown, defaulting to 1000 [ 819.510328][T13533] lo speed is unknown, defaulting to 1000 [ 819.848358][T13492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.227675][T13538] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1702'. [ 820.735826][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 820.822344][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 823.963129][T13565] random: crng reseeded on system resumption [ 824.851333][ T30] audit: type=1400 audit(1754449699.982:612): avc: denied { bind } for pid=13563 comm="syz.4.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 824.883681][ T30] audit: type=1400 audit(1754449699.992:613): avc: denied { append } for pid=13563 comm="syz.4.1708" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 825.074884][T13579] wg1 speed is unknown, defaulting to 1000 [ 825.642553][T13579] lo speed is unknown, defaulting to 1000 [ 827.357407][T13590] Can't find ip_set type hash:ip,ma [ 828.738341][T13602] netlink: 'syz.4.1718': attribute type 2 has an invalid length. [ 828.746574][T13602] netlink: 'syz.4.1718': attribute type 4 has an invalid length. [ 829.000878][T13610] netlink: 'syz.2.1717': attribute type 1 has an invalid length. [ 829.119381][T13610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 829.159250][T13604] vlan0: entered allmulticast mode [ 829.168352][T13604] veth1: entered allmulticast mode [ 829.190628][T13604] bond5: (slave vlan0): Opening slave failed [ 831.265253][T10249] Bluetooth: hci1: command 0x0c1a tx timeout [ 831.477305][ T30] audit: type=1326 audit(1754449707.502:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13619 comm="syz.0.1721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80b5f8eb69 code=0x0 [ 835.217268][T13665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1730'. [ 835.244348][T13665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.251894][T13665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.292762][T13665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.477286][T13668] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1729'. [ 835.593087][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'. [ 835.611159][T13665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.779052][T13667] hsr_slave_0: left promiscuous mode [ 835.790974][T13667] hsr_slave_1: left promiscuous mode [ 836.705273][T13683] geneve2: entered allmulticast mode [ 837.772343][T12693] IPVS: starting estimator thread 0... [ 837.880189][T13691] IPVS: using max 51 ests per chain, 122400 per kthread [ 838.519914][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 838.682337][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.692204][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 838.715215][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 838.736868][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.769914][T11385] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 838.780634][ T43] usb 5-1: config 0 descriptor?? [ 838.955032][ T51] Bluetooth: hci3: unexpected event for opcode 0x080b [ 838.972033][T11385] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 839.398616][T11385] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.421106][ T43] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 839.439379][T11385] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 839.448517][T11385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.753606][T11385] usb 1-1: usb_control_msg returned -32 [ 839.759239][T11385] usbtmc 1-1:16.0: can't read capabilities [ 839.817461][T13690] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 839.981025][ T43] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 839.983436][T13690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 840.575120][T13714] bond2: (slave gretap1): making interface the new active one [ 840.578663][ T43] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 840.595972][T13690] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 840.603196][ T43] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -32 [ 840.621045][T13714] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 840.811362][T12693] usb 5-1: USB disconnect, device number 9 [ 841.560601][T13731] Bluetooth: MGMT ver 1.23 [ 841.828138][T13730] libceph: resolve '. [ 841.828138][T13730] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 841.828138][T13730] ' (ret=-3): failed [ 841.908825][ T30] audit: type=1400 audit(1754449717.932:615): avc: denied { create } for pid=13733 comm="syz.4.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 841.936236][ T43] usb 1-1: USB disconnect, device number 9 [ 843.803572][T13746] netlink: 'syz.1.1746': attribute type 4 has an invalid length. [ 843.860025][T12393] lo speed is unknown, defaulting to 1000 [ 843.880967][T13746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=13746 comm=syz.1.1746 [ 843.903927][T12393] syz0: Port: 1 Link DOWN [ 847.097841][ T30] audit: type=1400 audit(1754449723.122:616): avc: denied { read } for pid=13784 comm="syz.2.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 847.139885][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 847.222048][T13770] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 847.671239][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.681137][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 847.744642][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 847.765566][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.814705][ T43] usb 5-1: config 0 descriptor?? [ 847.932164][T13795] 9pnet_fd: Insufficient options for proto=fd [ 848.086401][T13792] wg1 speed is unknown, defaulting to 1000 [ 848.096355][T13792] lo speed is unknown, defaulting to 1000 [ 848.300438][T12693] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 848.387909][ T43] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 848.470236][T12693] usb 4-1: Using ep0 maxpacket: 16 [ 848.490754][T12693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.502112][T12693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.535168][T12693] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 848.599697][T12693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.718544][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1762'. [ 848.802836][T13806] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 848.811611][T12693] usb 4-1: config 0 descriptor?? [ 848.859058][ T43] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 848.867570][ T43] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 848.893446][T13806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 848.948678][ T43] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -32 [ 848.954657][T13783] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 849.018226][ T43] usb 5-1: USB disconnect, device number 10 [ 849.446317][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.455222][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.525592][T13808] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 849.862114][T12693] usb 4-1: string descriptor 0 read error: -71 [ 849.907731][T12693] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 849.916489][T12693] letsketch 0003:6161:4D15.0009: probe with driver letsketch failed with error -32 [ 850.122973][T12693] usb 4-1: USB disconnect, device number 11 [ 850.977736][T13789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.417329][T13837] overlayfs: failed to clone upperpath [ 852.142033][T13842] usb usb8: usbfs: process 13842 (syz.3.1770) did not claim interface 0 before use [ 852.250175][T12393] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 852.882140][T12393] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 852.986828][T12393] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.001610][T12393] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 853.220323][T12393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.721172][T12393] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 853.728461][T12393] usb 5-1: invalid MIDI out EP 0 [ 854.921197][T12393] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 854.967259][T12393] usb 5-1: USB disconnect, device number 11 [ 855.624807][T13875] overlayfs: failed to clone lowerpath [ 855.701279][T13876] overlayfs: failed to resolve './file1': -2 [ 856.515313][T13882] overlayfs: failed to clone upperpath [ 859.614666][T13909] wg1 speed is unknown, defaulting to 1000 [ 859.623050][T13909] lo speed is unknown, defaulting to 1000 [ 861.444094][T13939] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 861.666646][T13943] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 862.431136][T13948] wg1 speed is unknown, defaulting to 1000 [ 862.437584][T13948] lo speed is unknown, defaulting to 1000 [ 862.767045][T13959] netlink: 'syz.0.1793': attribute type 4 has an invalid length. [ 863.035067][T13962] fuse: Unknown parameter '0xffffffffffffffff' [ 864.116906][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 865.790095][ T30] audit: type=1400 audit(1754449741.792:617): avc: denied { setattr } for pid=13968 comm="syz.3.1800" name="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 868.903725][T14016] wg1 speed is unknown, defaulting to 1000 [ 868.990474][T14020] wg1 speed is unknown, defaulting to 1000 [ 869.049100][T14016] lo speed is unknown, defaulting to 1000 [ 869.057586][T14020] lo speed is unknown, defaulting to 1000 [ 869.886299][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.894693][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.958803][ T30] audit: type=1400 audit(1754449745.982:618): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 870.460693][T14046] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 870.973423][T14043] wg1 speed is unknown, defaulting to 1000 [ 870.982597][T14043] lo speed is unknown, defaulting to 1000 [ 871.219647][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1816'. [ 871.362796][T14052] tipc: Resetting bearer [ 871.870456][T14057] overlayfs: failed to clone upperpath [ 871.916834][T14052] tipc: Disabling bearer [ 872.167577][T14060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.017640][ T30] audit: type=1800 audit(1754449748.542:619): pid=14065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1818" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 874.902904][ T30] audit: type=1326 audit(1754449750.252:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034f8eb69 code=0x7ffc0000 [ 875.001913][T14080] netlink: 'syz.3.1820': attribute type 8 has an invalid length. [ 875.244060][ T30] audit: type=1326 audit(1754449750.252:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034f8eb69 code=0x7ffc0000 [ 875.308815][ T30] audit: type=1326 audit(1754449750.262:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fa034f8eb69 code=0x7ffc0000 [ 875.656072][ T30] audit: type=1326 audit(1754449750.262:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034f8eb69 code=0x7ffc0000 [ 875.865410][ T30] audit: type=1326 audit(1754449750.262:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034f8eb69 code=0x7ffc0000 [ 875.912025][ T30] audit: type=1326 audit(1754449750.262:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa034f8eb69 code=0x7ffc0000 [ 875.938754][ T30] audit: type=1326 audit(1754449750.262:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034f8eb69 code=0x7ffc0000 [ 875.963480][ T30] audit: type=1326 audit(1754449750.262:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa034f8eb69 code=0x7ffc0000 [ 876.017251][ T30] audit: type=1326 audit(1754449750.262:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa034f8eb69 code=0x7ffc0000 [ 878.105304][T14113] bio_check_eod: 2 callbacks suppressed [ 878.105321][T14113] syz.3.1831: attempt to access beyond end of device [ 878.105321][T14113] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 878.251802][T14097] delete_channel: no stack [ 878.308484][T14117] wg1 speed is unknown, defaulting to 1000 [ 878.315862][T14117] lo speed is unknown, defaulting to 1000 [ 879.633537][T14128] tmpfs: Unknown parameter '0x0000000000000004' [ 880.604598][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 880.604614][ T30] audit: type=1400 audit(1754449756.532:652): avc: denied { setopt } for pid=14124 comm="syz.3.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 880.640297][ T30] audit: type=1400 audit(1754449756.542:653): avc: denied { setopt } for pid=14129 comm="syz.1.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 880.659834][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.870322][T12393] libceph: connect (1)[c::]:6789 error -101 [ 880.957583][T12393] libceph: mon0 (1)[c::]:6789 connect error [ 881.463052][T14143] ceph: No mds server is up or the cluster is laggy [ 881.664910][T12393] libceph: connect (1)[c::]:6789 error -101 [ 881.671653][T12393] libceph: mon0 (1)[c::]:6789 connect error [ 888.631588][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1857'. [ 889.299188][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.310609][T14241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.367071][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.409971][T14241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.675224][T14267] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 893.581458][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 896.949116][T14312] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 897.076250][T14312] 8021q: adding VLAN 0 to HW filter on device bond5 [ 897.419836][T14321] IPv6: Can't replace route, no match found [ 898.786036][T14308] ip6tnl1: entered allmulticast mode [ 900.654452][T11385] libceph: connect (1)[c::]:6789 error -101 [ 900.792564][T11385] libceph: mon0 (1)[c::]:6789 connect error [ 901.012385][T14347] ceph: No mds server is up or the cluster is laggy [ 901.063683][T11385] libceph: connect (1)[c::]:6789 error -101 [ 901.071832][T11385] libceph: mon0 (1)[c::]:6789 connect error [ 901.329209][T14318] infiniband syz!: set down [ 901.334535][T14318] infiniband syz!: added team_slave_0 [ 901.547492][T14318] syz!: rxe_create_cq: returned err = -12 [ 901.570100][T14318] infiniband syz!: Couldn't create ib_mad CQ [ 901.634683][T14318] infiniband syz!: Couldn't open port 1 [ 901.712771][T14318] RDS/IB: syz!: added [ 901.739490][T14318] smc: adding ib device syz! with port count 1 [ 901.790897][T14318] smc: ib device syz! port 1 has pnetid [ 903.292838][T14377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 904.099234][ T30] audit: type=1400 audit(1754449780.126:654): avc: denied { connect } for pid=14380 comm="syz.0.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 904.118796][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.480439][T12693] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 904.631767][T12693] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 904.642397][T12693] usb 4-1: config 0 interface 0 has no altsetting 0 [ 904.652237][T12693] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 904.674751][T12693] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 904.709300][T12693] usb 4-1: Product: syz [ 904.732632][T12693] usb 4-1: Manufacturer: syz [ 904.748246][T12693] usb 4-1: SerialNumber: syz [ 904.771114][T12693] usb 4-1: config 0 descriptor?? [ 904.876280][T12693] usb 4-1: selecting invalid altsetting 0 [ 905.870080][T12693] usb 4-1: USB disconnect, device number 12 [ 905.906786][T14396] udevd[14396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 909.764016][T14416] wg1 speed is unknown, defaulting to 1000 [ 909.771081][T14416] lo speed is unknown, defaulting to 1000 [ 911.269407][ T30] audit: type=1400 audit(1754449787.296:655): avc: denied { create } for pid=14431 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 911.686989][ T30] audit: type=1400 audit(1754449787.326:656): avc: denied { ioctl } for pid=14431 comm="syz.1.1901" path="socket:[34546]" dev="sockfs" ino=34546 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 911.882062][T14443] netlink: 'syz.1.1904': attribute type 2 has an invalid length. [ 911.889872][T14443] netlink: 'syz.1.1904': attribute type 4 has an invalid length. [ 913.506335][ T30] audit: type=1400 audit(1754449789.126:657): avc: denied { ioctl } for pid=14449 comm="syz.0.1907" path="socket:[35549]" dev="sockfs" ino=35549 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 916.684840][T14479] wg1 speed is unknown, defaulting to 1000 [ 916.691678][T14479] lo speed is unknown, defaulting to 1000 [ 917.295988][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 918.321678][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.392260][T14497] 9pnet_fd: Insufficient options for proto=fd [ 918.490314][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.102744][T14516] syz.3.1917: attempt to access beyond end of device [ 920.102744][T14516] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 920.378854][T14501] pim6reg: entered allmulticast mode [ 922.075855][T14533] fuse: Unknown parameter '00000000000000000000' [ 922.123581][ T30] audit: type=1400 audit(1754449798.156:658): avc: denied { ioctl } for pid=14534 comm="syz.0.1922" path="socket:[35713]" dev="sockfs" ino=35713 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 923.338858][ T30] audit: type=1400 audit(1754449798.196:659): avc: denied { write } for pid=14534 comm="syz.0.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 924.160439][ T30] audit: type=1400 audit(1754449800.186:660): avc: denied { mount } for pid=14541 comm="+}[@" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 926.067299][T14570] Invalid source name [ 926.071387][T14570] UBIFS error (pid: 14570): cannot open "./file0", error -22 [ 926.072167][ T30] audit: type=1400 audit(1754449802.096:661): avc: denied { create } for pid=14568 comm="syz.2.1933" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 926.147234][ T30] audit: type=1400 audit(1754449802.096:662): avc: denied { mounton } for pid=14568 comm="syz.2.1933" path="/459/file0" dev="tmpfs" ino=2476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 926.467091][T14582] bridge4: entered promiscuous mode [ 926.467141][T14582] bridge4: entered allmulticast mode [ 926.676453][T14582] team0: Port device bridge4 added [ 928.773061][T14586] overlayfs: missing 'workdir' [ 931.031868][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.038224][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.065752][T14616] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 931.086081][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 931.292990][T14623] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 931.783460][T14626] [U] [ 931.786377][T14626] [U] [ 931.789065][T14626] [U] [ 931.791756][T14626] [U] [ 931.795923][T14626] [U] [ 931.798622][T14626] [U] [ 931.801308][T14626] [U] [ 931.804000][T14626] [U] [ 931.806899][T14626] [U] [ 931.809588][T14626] [U] [ 931.812273][T14626] [U] [ 931.814958][T14626] [U] [ 931.817811][T14626] [U] [ 931.820500][T14626] [U] [ 931.823183][T14626] [U] [ 931.825867][T14626] [U] [ 931.861681][T14626] [U] [ 931.864380][T14626] [U] [ 931.867053][T14626] [U] [ 931.869720][T14626] [U] [ 931.872654][T14626] [U] [ 931.875335][T14626] [U] [ 931.878007][T14626] [U] [ 931.880675][T14626] [U] [ 931.884292][T14626] [U] [ 931.886985][T14626] [U] [ 931.889674][T14626] [U] [ 931.892343][T14626] [U] [ 931.901386][T14626] [U] [ 931.904092][T14626] [U] [ 931.906783][T14626] [U] [ 931.909472][T14626] [U] [ 931.913437][T14626] [U] [ 931.916137][T14626] [U] [ 931.918824][T14626] [U] [ 931.921508][T14626] [U] [ 931.925411][T14626] [U] [ 931.928109][T14626] [U] [ 931.930802][T14626] [U] [ 931.933495][T14626] [U] [ 931.948634][T14626] [U] [ 931.951350][T14626] [U] [ 931.954038][T14626] [U] [ 931.956728][T14626] [U] [ 931.962587][T14626] [U] [ 931.965287][T14626] [U] [ 931.967973][T14626] [U] [ 931.970660][T14626] [U] [ 931.975862][T14626] [U] [ 931.978558][T14626] [U] [ 931.981233][T14626] [U] [ 931.983894][T14626] [U] [ 932.056723][T14626] [U] [ 932.059432][T14626] [U] [ 932.062119][T14626] [U] [ 932.064807][T14626] [U] [ 932.074754][T14626] [U] [ 932.077458][T14626] [U] [ 932.080144][T14626] [U] [ 932.082839][T14626] [U] [ 932.088745][T14626] [U] [ 932.091441][T14626] [U] [ 932.094116][T14626] [U] [ 932.096786][T14626] [U] [ 932.100287][T14626] [U] [ 932.102979][T14626] [U] [ 932.105660][T14626] [U] [ 932.108352][T14626] [U] [ 932.221527][T14626] [U] [ 932.224248][T14626] [U] [ 932.226936][T14626] [U] [ 932.229625][T14626] [U] [ 932.233558][T14626] [U] [ 932.236239][T14626] [U] [ 932.238898][T14626] [U] [ 932.241556][T14626] [U] [ 932.261370][T14626] [U] [ 932.264092][T14626] [U] [ 932.266786][T14626] [U] [ 932.269469][T14626] [U] [ 932.358325][T14631] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 932.802726][ T30] audit: type=1400 audit(1754449808.376:663): avc: denied { bind } for pid=14628 comm="syz.3.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 933.481514][T14626] [U] [ 933.484225][T14626] [U] [ 933.486894][T14626] [U] [ 933.489563][T14626] [U] [ 933.495518][T14626] [U] [ 933.498220][T14626] [U] [ 933.500906][T14626] [U] [ 933.503578][T14626] [U] [ 933.525350][T14626] [U] [ 933.528066][T14626] [U] [ 933.530748][T14626] [U] [ 933.533436][T14626] [U] [ 933.537363][T14626] [U] [ 933.540060][T14626] [U] [ 933.542741][T14626] [U] [ 933.545407][T14626] [U] [ 933.549217][T14626] [U] [ 933.551908][T14626] [U] [ 933.554587][T14626] [U] [ 933.557265][T14626] [U] [ 933.561325][T14626] [U] [ 933.564007][T14626] [U] [ 933.566672][T14626] [U] [ 933.569340][T14626] [U] [ 933.576013][T14626] [U] [ 933.578710][T14626] [U] [ 933.581404][T14626] [U] [ 933.584089][T14626] [U] [ 933.596019][T14626] [U] [ 933.598708][T14626] [U] [ 933.601367][T14626] [U] [ 933.604033][T14626] [U] [ 933.607747][T14626] [U] [ 933.610439][T14626] [U] [ 933.613124][T14626] [U] [ 933.615795][T14626] [U] [ 933.619677][T14626] [U] [ 933.622355][T14626] [U] [ 933.625024][T14626] [U] [ 933.627692][T14626] [U] [ 933.632218][T14626] [U] [ 933.634913][T14626] [U] [ 933.637593][T14626] [U] [ 933.640275][T14626] [U] [ 933.646782][T14626] [U] [ 933.649478][T14626] [U] [ 933.652162][T14626] [U] [ 933.945850][T14617] [U] [ 935.020181][ T30] audit: type=1400 audit(1754449811.016:664): avc: denied { bind } for pid=14654 comm="syz.4.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 935.776244][T14666] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 935.815889][ T30] audit: type=1400 audit(1754449811.776:665): avc: denied { watch watch_reads } for pid=14662 comm="syz.0.1953" path="pipe:[4399]" dev="pipefs" ino=4399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 938.822342][T14694] netlink: 'syz.3.1959': attribute type 2 has an invalid length. [ 938.830941][T14694] netlink: 'syz.3.1959': attribute type 1 has an invalid length. [ 939.923704][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1955'. [ 940.173073][T14707] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 940.302275][T14707] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 942.681438][T14730] overlayfs: failed to clone upperpath [ 944.706274][T14756] ieee802154 phy0 wpan0: encryption failed: -22 [ 945.912747][T14768] netlink: 'syz.2.1976': attribute type 1 has an invalid length. [ 945.943123][T14768] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 946.991739][T14781] syz.4.1979: attempt to access beyond end of device [ 946.991739][T14781] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 948.364204][T11385] libceph: connect (1)[c::]:6789 error -101 [ 948.456122][T11385] libceph: mon0 (1)[c::]:6789 connect error [ 948.695892][T14796] ceph: No mds server is up or the cluster is laggy [ 950.493155][T10249] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 952.440165][T12393] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 952.633850][T12393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.644178][T12393] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 952.667710][T12393] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 952.744165][T12393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.803918][ T30] audit: type=1400 audit(1754449828.806:666): avc: denied { shutdown } for pid=14837 comm="syz.2.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 952.805552][T12393] usb 1-1: config 0 descriptor?? [ 953.650791][T12393] kovaplus 0003:1E7D:2D50.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 954.407818][ T30] audit: type=1400 audit(1754449830.066:667): avc: denied { read write } for pid=14848 comm="syz.4.1996" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 954.446739][T12393] kovaplus 0003:1E7D:2D50.000A: couldn't init struct kovaplus_device [ 954.480424][T12393] kovaplus 0003:1E7D:2D50.000A: couldn't install mouse [ 954.497207][ T30] audit: type=1400 audit(1754449830.066:668): avc: denied { open } for pid=14848 comm="syz.4.1996" path="/362/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 954.656763][T12393] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -32 [ 954.662680][T14829] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 954.737414][T14858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 955.151892][T12393] usb 1-1: USB disconnect, device number 10 [ 955.859369][ T30] audit: type=1400 audit(1754449831.596:669): avc: denied { ioctl } for pid=14859 comm="syz.4.1998" path="/363/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 958.041097][ T30] audit: type=1400 audit(1754449834.056:670): avc: denied { map } for pid=14881 comm="syz.0.2004" path="socket:[37415]" dev="sockfs" ino=37415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 958.348121][T14899] ipvlan0: entered promiscuous mode [ 958.692871][ T30] audit: type=1400 audit(1754449834.406:671): avc: denied { bind } for pid=14891 comm="syz.2.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 958.897823][ T30] audit: type=1400 audit(1754449834.406:672): avc: denied { write } for pid=14891 comm="syz.2.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 960.236886][T14912] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2011'. [ 960.246222][T14912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 960.813237][T14923] bond0: (slave dummy0): Releasing backup interface [ 960.829008][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 960.840140][ T30] audit: type=1400 audit(1754449836.826:673): avc: denied { ioctl } for pid=14917 comm="syz.0.2013" path="socket:[37456]" dev="sockfs" ino=37456 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 960.870461][T14923] dummy0: left allmulticast mode [ 960.906799][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2013'. [ 960.938392][T14923] bridge_slave_0: left allmulticast mode [ 960.945606][T14923] bridge_slave_0: left promiscuous mode [ 960.951693][T14923] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.300562][T14923] bridge_slave_1: left allmulticast mode [ 961.443203][T14923] bridge_slave_1: left promiscuous mode [ 961.461969][T14923] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.482835][T14923] bond0: (slave bond_slave_0): Releasing backup interface [ 962.080478][T14923] bond_slave_0: left allmulticast mode [ 962.270846][T14923] bond0: (slave bond_slave_1): Releasing backup interface [ 962.300602][T14923] bond_slave_1: left allmulticast mode [ 962.407656][T14923] team0: Port device C removed [ 962.435048][T14923] team0: Port device team_slave_1 removed [ 962.461107][T14923] bond0: (slave wlan1): Releasing backup interface [ 962.531456][T14923] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 962.551035][T14923] bond1: (slave gretap1): Releasing active interface [ 962.558138][T14923] gretap1: left promiscuous mode [ 962.563805][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 962.572625][T14923] gretap1: left allmulticast mode [ 962.622258][T14923] bond2: (slave vcan1): Releasing backup interface [ 962.629002][T14923] vcan1: left promiscuous mode [ 962.637172][T14923] bond4: (slave gretap2): Releasing active interface [ 962.722252][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.731143][T14934] i: entered promiscuous mode [ 962.792714][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 962.832884][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 962.850827][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.899049][ T9] usb 4-1: config 0 descriptor?? [ 963.590294][ T9] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 964.092786][ T9] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device [ 964.126548][T14937] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 964.134717][ T9] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse [ 964.156446][ T9] kovaplus 0003:1E7D:2D50.000B: probe with driver kovaplus failed with error -32 [ 964.677792][ T9] usb 4-1: USB disconnect, device number 13 [ 965.024295][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 965.185641][T14961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 966.046656][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 966.046724][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 967.321739][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 967.391104][T14979] hsr_slave_0: left promiscuous mode [ 968.773686][T15007] overlayfs: failed to clone upperpath [ 969.859771][ T30] audit: type=1800 audit(1754449845.816:674): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2034" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 970.403136][T15031] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 970.581059][T15031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 970.629087][T15031] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 971.152632][ T30] audit: type=1400 audit(1754449847.186:675): avc: denied { ioctl } for pid=15037 comm="syz.4.2039" path="socket:[36532]" dev="sockfs" ino=36532 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 973.582190][T15064] netlink: 'syz.4.2047': attribute type 4 has an invalid length. [ 973.592265][T15064] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2047'. [ 973.748952][T15068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2048'. [ 973.762300][T15068] openvswitch: netlink: Flow actions attr not present in new flow. [ 973.774938][ T30] audit: type=1400 audit(1754449849.806:676): avc: denied { shutdown } for pid=15059 comm="syz.2.2046" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 974.061669][T15070] bpq0: entered promiscuous mode [ 974.090510][ T30] audit: type=1400 audit(1754449850.116:677): avc: denied { connect } for pid=15067 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 974.242455][T15070] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 974.250030][T15070] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 975.201054][T15083] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 975.209565][T15083] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 975.218525][T15083] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 976.420555][T15099] macsec1: entered promiscuous mode [ 976.425841][T15099] macsec1: entered allmulticast mode [ 976.809854][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 977.359838][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.802547][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 977.841044][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 977.850550][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.861105][ T43] usb 5-1: config 0 descriptor?? [ 978.500412][ T43] kovaplus 0003:1E7D:2D50.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 978.603780][T15123] o2cb: This node has not been configured. [ 978.609781][T15123] o2cb: Cluster check failed. Fix errors before retrying. [ 978.617131][T15123] (syz.3.2060,15123,1):user_dlm_register:674 ERROR: status = -22 [ 978.625576][T15123] (syz.3.2060,15123,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 979.245588][T15102] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 979.296506][ T43] kovaplus 0003:1E7D:2D50.000C: couldn't init struct kovaplus_device [ 979.299926][T15124] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 979.305312][ T43] kovaplus 0003:1E7D:2D50.000C: couldn't install mouse [ 979.360604][ T43] kovaplus 0003:1E7D:2D50.000C: probe with driver kovaplus failed with error -32 [ 979.783189][T15102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 979.801080][T14938] usb 5-1: USB disconnect, device number 12 [ 980.467549][ T30] audit: type=1400 audit(1754449856.486:678): avc: denied { listen } for pid=15141 comm="syz.0.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 980.983142][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 982.195422][T15163] page: refcount:515 mapcount:0 mapping:ffff8880236e39d0 index:0x0 pfn:0x3d000 [ 982.205039][T15163] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 982.213525][T15163] aops:hugetlbfs_aops ino:9412 dentry name(?):"anon_hugepage" [ 982.220965][T15163] flags: 0xfff000000000c1(locked|waiters|head|node=0|zone=1|lastcpupid=0x7ff) [ 982.229784][T15163] page_type: f4(hugetlb) [ 982.234005][T15163] raw: 00fff000000000c1 ffffea0000ea0008 ffffc9000b8e7d68 ffff8880236e39d0 [ 982.242572][T15163] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 982.251139][T15163] head: 00fff000000000c1 ffffea0000ea0008 ffffc9000b8e7d68 ffff8880236e39d0 [ 982.259788][T15163] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 982.268467][T15163] head: 00fff00000000009 ffffea0000f40001 0000000000000000 0000000000000000 [ 982.277110][T15163] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 982.285749][T15163] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 982.293009][T15163] page_owner tracks the page as allocated [ 982.299486][T15163] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 14679, tgid 14675 (syz.2.1956), ts 938162897751, free_ts 937453692203 [ 982.320245][T15163] post_alloc_hook+0x1c0/0x230 [ 982.325016][T15163] get_page_from_freelist+0x132b/0x38e0 [ 982.330538][T15163] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 982.336410][T15163] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 982.342198][T15163] alloc_hugetlb_folio+0xed4/0x1560 [ 982.347381][T15163] hugetlb_fault+0x1bce/0x2f40 [ 982.352129][T15163] handle_mm_fault+0xbfa/0xd10 [ 982.356879][T15163] do_user_addr_fault+0x7a6/0x1370 [ 982.361971][T15163] exc_page_fault+0x5c/0xb0 [ 982.366460][T15163] asm_exc_page_fault+0x26/0x30 [ 982.371296][T15163] page last free pid 14643 tgid 14640 stack trace: [ 982.377770][T15163] __free_frozen_pages+0x7d5/0x10f0 [ 982.382956][T15163] __folio_put+0x329/0x450 [ 982.387355][T15163] hugetlb_free_folio+0xfc/0x140 [ 982.392272][T15163] __update_and_free_hugetlb_folio+0x1e3/0x420 [ 982.398405][T15163] update_and_free_hugetlb_folio+0xce/0x210 [ 982.404280][T15163] free_huge_folio+0x85b/0x1050 [ 982.409112][T15163] folios_put_refs+0x4e7/0x740 [ 982.413864][T15163] remove_inode_hugepages+0xbef/0xed0 [ 982.419229][T15163] hugetlbfs_evict_inode+0x90/0x250 [ 982.424416][T15163] evict+0x3e3/0x920 [ 982.428327][T15163] iput+0x521/0x880 [ 982.432127][T15163] dentry_unlink_inode+0x29c/0x480 [ 982.437221][T15163] __dentry_kill+0x1d0/0x600 [ 982.441798][T15163] dput.part.0+0x4b1/0x9b0 [ 982.446201][T15163] dput+0x1f/0x30 [ 982.449821][T15163] __fput+0x51c/0xb70 [ 982.453880][T15163] ------------[ cut here ]------------ [ 982.459306][T15163] kernel BUG at mm/filemap.c:154! [ 982.464310][T15163] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 982.470702][T15163] CPU: 0 UID: 0 PID: 15163 Comm: syz.2.2069 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 982.482389][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 982.492420][T15163] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 982.498563][T15163] Code: 87 23 c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 ba 1e c9 ff 85 ed 7e 17 e8 71 23 c9 ff 48 c7 c6 c0 1c b9 8b 48 89 df e8 e2 ce 11 00 90 <0f> 0b e8 5a 23 c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 982.518146][T15163] RSP: 0018:ffffc9001d9af310 EFLAGS: 00010046 [ 982.524191][T15163] RAX: 0000000000080000 RBX: ffffea0000f40000 RCX: ffffc900120e8000 [ 982.532137][T15163] RDX: 0000000000080000 RSI: ffffffff81f26fbe RDI: ffff888026b84cc4 [ 982.540086][T15163] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 982.548032][T15163] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880236e39d0 [ 982.555978][T15163] R13: ffffea0000f40030 R14: 0000000000000000 R15: ffffea0000f40000 [ 982.563926][T15163] FS: 00007f977962e6c0(0000) GS:ffff8881246c6000(0000) knlGS:0000000000000000 [ 982.572833][T15163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 982.579395][T15163] CR2: 0000001b30f0cff8 CR3: 0000000049803000 CR4: 00000000003526f0 [ 982.587350][T15163] Call Trace: [ 982.590607][T15163] [ 982.593517][T15163] filemap_remove_folio+0xf1/0x250 [ 982.598607][T15163] remove_inode_hugepages+0x74a/0xed0 [ 982.603957][T15163] ? bpf_ksym_find+0x127/0x1c0 [ 982.608701][T15163] ? rcu_is_watching+0x12/0xc0 [ 982.613450][T15163] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 982.619341][T15163] ? up_write+0x1b2/0x520 [ 982.623648][T15163] hugetlbfs_fallocate+0xf3f/0x12e0 [ 982.628830][T15163] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 982.634447][T15163] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 982.640056][T15163] ? vfs_fallocate+0x5b4/0x10e0 [ 982.644884][T15163] vfs_fallocate+0x5b4/0x10e0 [ 982.649536][T15163] ? __pfx_vfs_fallocate+0x10/0x10 [ 982.654624][T15163] ? madvise_vma_behavior+0x2b20/0x2d60 [ 982.660156][T15163] madvise_vma_behavior+0x2ad7/0x2d60 [ 982.665522][T15163] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 982.671310][T15163] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 982.677009][T15163] ? __pfx_mas_prev+0x10/0x10 [ 982.682041][T15163] ? __pfx_mas_prev+0x10/0x10 [ 982.686703][T15163] ? find_vma_prev+0xda/0x160 [ 982.691361][T15163] ? __pfx_find_vma_prev+0x10/0x10 [ 982.696455][T15163] madvise_walk_vmas+0x31f/0x9c0 [ 982.701376][T15163] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 982.706819][T15163] ? madvise_do_behavior+0x130/0x530 [ 982.712083][T15163] madvise_do_behavior+0x1e2/0x530 [ 982.717174][T15163] ? __pfx_madvise_do_behavior+0x10/0x10 [ 982.722785][T15163] ? down_read+0x13d/0x480 [ 982.727185][T15163] do_madvise+0x176/0x240 [ 982.731494][T15163] ? __pfx_do_madvise+0x10/0x10 [ 982.736323][T15163] ? do_futex+0x122/0x350 [ 982.740644][T15163] __x64_sys_madvise+0xa9/0x110 [ 982.745474][T15163] do_syscall_64+0xcd/0x4c0 [ 982.749962][T15163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.755830][T15163] RIP: 0033:0x7f977878eb69 [ 982.760222][T15163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.779809][T15163] RSP: 002b:00007f977962e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 982.788196][T15163] RAX: ffffffffffffffda RBX: 00007f97789b6320 RCX: 00007f977878eb69 [ 982.796142][T15163] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 982.804087][T15163] RBP: 00007f9778811df1 R08: 0000000000000000 R09: 0000000000000000 [ 982.812032][T15163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.819997][T15163] R13: 0000000000000000 R14: 00007f97789b6320 R15: 00007ffca0e9ec28 [ 982.827949][T15163] [ 982.830944][T15163] Modules linked in: [ 982.834818][T15163] ---[ end trace 0000000000000000 ]--- [ 982.840242][T15163] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 982.846382][T15163] Code: 87 23 c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 ba 1e c9 ff 85 ed 7e 17 e8 71 23 c9 ff 48 c7 c6 c0 1c b9 8b 48 89 df e8 e2 ce 11 00 90 <0f> 0b e8 5a 23 c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 982.865964][T15163] RSP: 0018:ffffc9001d9af310 EFLAGS: 00010046 [ 982.872011][T15163] RAX: 0000000000080000 RBX: ffffea0000f40000 RCX: ffffc900120e8000 [ 982.879958][T15163] RDX: 0000000000080000 RSI: ffffffff81f26fbe RDI: ffff888026b84cc4 [ 982.887905][T15163] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 982.895850][T15163] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880236e39d0 [ 982.903798][T15163] R13: ffffea0000f40030 R14: 0000000000000000 R15: ffffea0000f40000 [ 982.911750][T15163] FS: 00007f977962e6c0(0000) GS:ffff8881246c6000(0000) knlGS:0000000000000000 [ 982.920656][T15163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 982.927215][T15163] CR2: 0000001b30f0cff8 CR3: 0000000049803000 CR4: 00000000003526f0 [ 982.935171][T15163] Kernel panic - not syncing: Fatal exception [ 982.941397][T15163] Kernel Offset: disabled [ 982.945690][T15163] Rebooting in 86400 seconds..