last executing test programs: 12m9.693372219s ago: executing program 2 (id=924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(0xffffffffffffffff, 0x1000, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000680), 0x0, &(0x7f00000006c0), 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000540)={{0xffff0000, 0x58000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x4, 0xb}, {0xdddd1000, 0x10000, 0xb, 0x3, 0x1, 0x7, 0x5, 0x6, 0x1, 0x4, 0xfa, 0x8}, {0xd000, 0x8000000, 0x4, 0x4, 0x11, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0xc1}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0xfa, 0x0, 0x0, 0xfa, 0x39, 0x9, 0x9}, {0xeeee8000, 0x70000, 0xf, 0x9, 0x1, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x1, 0x1, 0xe, 0x9, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0x9, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x5, 0x7, 0x2, 0x8}, {0x100000, 0x405}, {0xeeee8000, 0xff81}, 0xe0000031, 0x0, 0x6000, 0x61, 0x3, 0xa800, 0x2, 0x0, [0x6257, 0x2, 0x8000000000000003, 0xc]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) setxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0x50000000, 0x1}, {0x7b00bb87, 0xad12}]}, 0x18, 0x1) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[], 0x0, 0xf6ff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f0000000480)='cifs\x00', 0x0, &(0x7f00000004c0)='rdma,vers=3.0,ip=127.0.0.1,port=5445\x00') 12m9.11706225s ago: executing program 2 (id=927): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 12m8.050712513s ago: executing program 2 (id=930): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x8000c65) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r2, r2, 0x0, 0x8000000f3aa6ea) 12m5.42547607s ago: executing program 2 (id=936): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0xd, 0x3032, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x7, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe2e, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10c}}, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x132}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ba0, 0x20000, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7301, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r5, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 12m4.228217719s ago: executing program 2 (id=942): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='e1my_eprob', 0xa) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000349000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x60000000000000, 0x9, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) 12m2.538060602s ago: executing program 2 (id=949): listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 11m47.211339933s ago: executing program 32 (id=949): listen(0xffffffffffffffff, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 9m38.038644414s ago: executing program 1 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x700000000000000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000000c0)={&(0x7f0000000480)}) 9m37.119455297s ago: executing program 1 (id=1368): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x952e, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x44860) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x3f, 0x0}) fgetxattr(r0, &(0x7f00000000c0)=@known='user.syz\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 9m36.04768884s ago: executing program 1 (id=1372): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000040)={0x0, 0x69ee, 0x400, 0x1, 0x244}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x803, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000640)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000680)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000006c0), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 9m33.318672644s ago: executing program 1 (id=1380): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000192c0)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019300)={0x6, 0x3, &(0x7f00000193c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000019400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019440)={r6, r5, 0x25, 0x0, @void}, 0x10) 9m32.338336631s ago: executing program 1 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000240)=@get={0x1, &(0x7f00000003c0)=""/213, 0x6}) 9m19.843280475s ago: executing program 1 (id=1407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x2, 0x115) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x5}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) r4 = syz_io_uring_setup(0x10, &(0x7f00000002c0), &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r4, 0x0, 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r4, 0x1000}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) syz_io_uring_submit(r5, r6, r7, 0x0) io_uring_enter(r4, 0x6, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x20000000) 9m4.80297805s ago: executing program 33 (id=1407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x2, 0x115) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x5}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) r4 = syz_io_uring_setup(0x10, &(0x7f00000002c0), &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r4, 0x0, 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r4, 0x1000}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}) syz_io_uring_submit(r5, r6, r7, 0x0) io_uring_enter(r4, 0x6, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x20000000) 1m57.789334056s ago: executing program 4 (id=2232): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000010000000000000000000000000000000000022b0000000a000000ac1e010100000020000000000000000000000000040200000000000000000000004000"/180], 0xfc}, 0x1, 0x0, 0x0, 0x40041}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r4 = memfd_create(&(0x7f0000000100)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000005c0)={r4, 0x1f, 0x0, 0x1000000}) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, 0x0, &(0x7f00000010c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000800)={'#! ', './file0', [{0x20, '..&^^'}, {0x20, '6'}, {0x20, '\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc'}, {0x20, '\x00'}], 0xa, "ffef57833548dfeeda028223373068e6617d7bb7977b96d8ca9e72ae2bbcd4f14f28fc7aeb5133b255340bdb78a474f7cef0b647b9"}, 0x117) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000340)=@ethtool_cmd={0x1, 0x3, 0x4, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x8, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) 1m54.338413114s ago: executing program 5 (id=2235): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r5, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r9, 0x114, 0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002000)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x50d8}}, 0xc000) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000002780)=@generic={0x0, 0xffff, 0x5}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@svm={0x101, 0x1, 0x1080, {0x5559bf1f914cb275}, {"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"}}) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x1, 0x5593, 0x5, 0x0, 0x0) 1m54.180346366s ago: executing program 4 (id=2236): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r3, &(0x7f0000002dc0), 0x3a, 0x408c4) connect$unix(r2, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000001100)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x1000, r2, 0x0}]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x50, 0xffffffffffffffff, 0xec778000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xb10692d486d5f5b4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) fadvise64(r6, 0x401, 0xffffffff, 0x4) 1m52.843372482s ago: executing program 5 (id=2237): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x45) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000a36000/0x2000)=nil, 0x2000, 0x200000e, 0x20010, r0, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x101, 0x1, r1, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000020, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0), 0x2000) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="9586793a0cf1f21bc006c5f7e0843159248e9b842c3fea1c43d5811a444eeeea5506847bd7f9b047986754fe4a22a810ca0ec11851745c388395c5bfdc53340a730a4383ac1bef6535d424f01c127a972497726a036f31440af98d3c1b05b96f154760a65064a52f80c639fa67f05fd4dc5b631ff5acd49fe4b3c043d572c53a1c", 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x6) 1m51.636910894s ago: executing program 0 (id=2238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x13, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) 1m50.761940752s ago: executing program 0 (id=2239): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010428bd7000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4008841}, 0x40) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@target_btf_id=r3}, 0x14) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000001b00)={0x2, 0x62}, &(0x7f0000001b40)) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=@newqdisc={0x98, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0x98}}, 0x0) 1m50.476779103s ago: executing program 5 (id=2240): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000340)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0xf37e, 0xfe76}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={r7, 0x7ff}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000004c0)={'wlan1\x00', &(0x7f0000000500)=@ethtool_ringparam={0x10, 0xfffffff8, 0x5, 0x1, 0xfffffff8, 0x8, 0x1, 0x3, 0x9}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060086dd0000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m49.994908969s ago: executing program 3 (id=2243): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000340)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000240)={0x14, 0x2b, 0x1, 0x70bd28, 0x25dfdbfd, "", [@typed={0x4, 0xf}]}, 0x14}], 0x1}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x121602, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00000000000000f8ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x2000000000000) 1m48.797744354s ago: executing program 5 (id=2244): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x5, 0x200, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000380)='6', 0xfffffec8, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000010c0)='cdg', 0x3) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) shutdown(r4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@loopback}, 0x14) ioctl$TIOCSLCKTRMIOS(r3, 0x80047437, &(0x7f0000000040)) write$cgroup_subtree(r2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m48.675032291s ago: executing program 3 (id=2245): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x2c}}, 0x20000000) write(r0, &(0x7f0000000cc0), 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 1m48.567860237s ago: executing program 4 (id=2246): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c2) mkdir(&(0x7f0000000240)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x83) fsync(r4) 1m46.138437344s ago: executing program 3 (id=2248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000b40)={0x6, [[0x1, 0x1797, 0x15e, 0x9fc, 0x0, 0x1], [0x1ffffffe, 0x3, 0x2, 0x10, 0x0, 0xfffbffff, 0xfffffffd], [0x3, 0x3, 0x40000000, 0x4, 0x0, 0x3bc9, 0x2, 0x1]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x1fb, 0x0, 0x0, 0x1}, {0x4000000, 0x4000b}, {0x5, 0x6}, {0x2000000, 0x6}, {}, {}, {}, {0x8, 0x7}, {0x0, 0x400}, {0xfffffffc}], '\x00', 0x1}) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r2, @ANYBLOB="7ba9"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) mount(0x0, &(0x7f0000000580)='./sys_mnt\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000000dc0)={0x20071026}, &(0x7f0000000e00)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x15, 0xf, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000001000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) write(0xffffffffffffffff, &(0x7f0000000640)='T', 0x1) r4 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) openat$vhost_vsock(0xffffff9c, &(0x7f0000000a80), 0x2, 0x0) syz_usb_connect$midi(0x4, 0xc6, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x1, 0x1, 0x5, 0x10, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x0, [@midi_out_jack={0x15, 0x24, 0x3, 0x2, 0xe0, 0x7, [{0x40, 0xc}, {0x47, 0xc2}, {0x5, 0x5b}, {}, {0xff, 0xe9}, {0x9, 0xd}, {0x5, 0xe0}], 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x1, 0x2e, 0x3, [{0x3, 0x9}, {0x3, 0x8e}, {0x4, 0x2}], 0x3}], [{{0x9, 0x5, 0x6, 0x4, 0x10, 0xa, 0x81, 0xd5, {0xf, 0x25, 0x1, 0xb, "1d756cf41ea9640520c581"}}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x5, 0x9, {0xe, 0x25, 0x1, 0xa, "d77834688f365de2a7c1"}}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x5, 0x59, {0x6, 0x25, 0x1, 0x2, "28d4"}}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x1, 0x87, 0xb0, {0x14, 0x25, 0x1, 0x10, "989c9b566ebfa85b6b52e0ea6fbad904"}}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x1, 0xd, 0x1, {0x8, 0x25, 0x1, 0x4, "5d97c064"}}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x2, 0x83, 0x4, {0xb, 0x25, 0x1, 0x7, "d28de986fc6ade"}}}]}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x0, 0x0, 0x5, 0xb, 0x8, 0x3}, 0x98, &(0x7f0000000840)={0x5, 0xf, 0x98, 0x4, [@generic={0x58, 0x10, 0x3, "710e754d29f710b8902834364299067af7d3e85c62705c108fdedc4881b6e542803286a2c4c08bf30362d1f79d2bad1391f507bf91d231ad9ea890203c51d3ab12fb8308f89e05feeb665cb3c2a25ff01eec21ed36"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x6, 0xf, 0xc7f4, [0xff0000]}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x4, 0xf00, 0x400, [0xffc0c0, 0xc00f, 0x3f, 0x8, 0x3f00, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xa, 0x9, 0x5}]}, 0x1, [{0xdc, &(0x7f0000000900)=@string={0xdc, 0x3, "f9884783a33a58329f545f287b06361770564f22121c4c4845b1505b0717c01c6683adc57eb6df32d43c85ba7a0896c804026ea86b84089432d88612e242a70b76b5c100192c06f20200812e1443d3852488087da6d1fe5db71f447a196756b6d8872ed509978f911aadfc498ef16cc0d45c120aca523ce568876ab2b2c4affb090cc4fd2b06a7f422fcbd65c861fcb6e2043f82dde022cdfb0aa66c20484a54225207699c7a42df0f573f76fdb534c820813ae111be5279089b2eb42a8eb7600a2d17ae674d968cecdf87072c2113fbd982fdf941b2f6471aa3"}}]}) write$P9_RVERSION(r4, &(0x7f0000002200)=ANY=[], 0xfffffcd9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4104aec6, &(0x7f00000003c0)={0x1, [{0x3, 0x18, 0x7f, &(0x7f0000000500)="e8bfff"}, {0x2, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x0, 0x0, 0xc9a, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8000, 0x0}, {0x1, 0x0, 0xa09, 0x0}, {0x1, 0x0, 0xc0, 0x0}]}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000a40)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffff9c, &(0x7f0000000300)='./file0\x00', 0x8000, 0x16d) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000680), &(0x7f00000006c0)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.692174325s ago: executing program 0 (id=2250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001780)="b9ffedc1ddcccdf175537d53888edfcef6e29651b93740c78f6509a2", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_pidfd_open(0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @loopback}], 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={0x0}}, 0xc840) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001900)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='7', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000011c0)={0x0, 0x10, &(0x7f0000001200)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000001240)=0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x11, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x8001}}}]}, 0x38}}, 0x20000000) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) mount_setattr(0xffffffffffffff9c, 0x0, 0x9100, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000017c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000001b40), 0x651, 0x0) 1m44.583530777s ago: executing program 6 (id=2251): getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002640)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000002680)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002740)={'lo\x00', 0x0}) bind$xdp(r3, &(0x7f0000002780)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x80000000) pselect6(0x40, &(0x7f00000027c0)={0x4, 0x8001, 0x6, 0x300, 0x0, 0x3ff000000, 0x9c2a, 0x4}, 0x0, &(0x7f0000002800)={0x3ff, 0x4000000000002, 0x7ffffffffffff, 0x9, 0x4, 0x0, 0x8000000000000000, 0x9}, 0x0, 0x0) connect$inet(r2, &(0x7f0000002840)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002880)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfd, 0x28c, 0x1, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb9, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000002980), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000003f0009000000000000080000030000000400000010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x9, 0xfff3}, {0xffff, 0xfff2}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xfff}]}}]}, 0x40}}, 0x2004c840) 1m44.334768922s ago: executing program 3 (id=2252): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f00000002c0), 0xa7, 0x80) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x1, 0x2, 0x36315247, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x0, 0x1, 0x7}}) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x2603) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000010400"]) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000140)=0x7b, 0x4) shutdown(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f00000001c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f00000005c0)='n', 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) recvmmsg(r3, &(0x7f0000000600), 0xa0d, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x278d81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x7) 1m44.036360881s ago: executing program 4 (id=2253): socket(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000640), 0x1, 0x2) inotify_init1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x100000000007f, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0x5, 0x0, 0xfffffffffffff2eb, 0x2000000000003ff, 0x2, 0x0, 0x400000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m43.688847372s ago: executing program 0 (id=2254): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x129202, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x1000000}, 0x0, [0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x40800000000000, 0x0, 0x4, 0x7785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x10, 0xfffffffffffffffe, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x59ed, 0x1000000000000000, 0x1bf3f8c2, 0x4001ff, 0x0, 0x0, 0x0, 0x3, 0xd, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x8, 0x2, 0x0, 0x80000000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x1, 0x0, 0x80000000, 0xd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000800)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000aa00)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x50d8}}, 0xc000) r7 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000880)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x7fff, 0xffffffffffffffff, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x4, 0x0, 0x0, 0x0, 0x5, 0x2000000000, 0xffffffffffffffff, 0x20000000002, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x2, 0xff, 0x800, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0xfffffffffffffffc, 0x800, 0x1772cf4f, 0x0, 0x0, 0x7ffffffffc, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffd, 0x4a, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x40000000000, 0x4, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x2, 0x2001, 0x0, 0x0, 0x400000, 0x40, 0x0, 0x40000000000, 0x801, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x8, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000000000002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1000000003, 0x10000000010, 0x4000100000001]}) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0xffff, 0x5}) 1m43.536633572s ago: executing program 5 (id=2255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0) read$msr(r3, &(0x7f00000008c0)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x200a0204) r4 = memfd_create(&(0x7f00000198c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) ftruncate(r4, 0x80007) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000019c80)={r5}, 0x4) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000019d00)={@my=0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000240)={0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) 1m43.459977223s ago: executing program 6 (id=2256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r2, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000025bd7000fbdbdf25093b1486d03d4264b32c5d4b19de5fbb607e081338387d7c140000007fe292000800"/56], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x9000000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 1m43.427547932s ago: executing program 4 (id=2257): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x40004) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom$l2tp(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m41.14817757s ago: executing program 5 (id=2258): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r5) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 1m41.008343304s ago: executing program 6 (id=2259): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) 1m40.859730212s ago: executing program 3 (id=2260): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b52, 0x0) r4 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r6, &(0x7f0000000440)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000019440)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000194c0)=0x15) pselect6(0x900, 0x0, 0x0, &(0x7f0000019500)={0x1f}, &(0x7f0000019540)={0x0, 0x3938700}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m40.752311462s ago: executing program 0 (id=2261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0x44, 0x13, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) 1m38.236130954s ago: executing program 0 (id=2262): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0xffffffffffffffff) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r2, 0x10ada85e65c25359, 0x0, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x69}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daadb0) 1m38.233231733s ago: executing program 6 (id=2263): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x181a01, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0xfffffffffffffc00, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @multicast2}, "d850da37284d1872"}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r3, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/llc/core\x00') madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x1) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) eventfd(0x5f0) 1m38.07556043s ago: executing program 4 (id=2264): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000240)="1b5b3f36681b5b3f366e", 0xa) socket$rds(0x15, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}, 0x3}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x214000, 0x800}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r5}) mincore(&(0x7f00003a6000/0x1000)=nil, 0x1000, &(0x7f0000000280)=""/86) r6 = eventfd2(0x8001, 0x800) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000100)={0x0, r6}) 1m37.807804623s ago: executing program 3 (id=2265): mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) r3 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './proc/mtrr\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=w', 0x23) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c630e}], 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000009200000000000000000000319d8b7d00000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000fcffffff000002000000"]}, 0xda) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x4c40, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) 1m37.775280575s ago: executing program 6 (id=2266): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) shutdown(r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000000c0)="510003000000", 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 0s ago: executing program 6 (id=2267): setns(0xc9, 0x0) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000640)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001a40)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001b00)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r5 = gettid() r6 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001780)={{0xfffffffe, 0x0, 0x6, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, r5, 0x0, 0x800000, 'syz1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 626.564348][ T3295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 626.564710][ T3295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.978117][ T9089] net_ratelimit: 11 callbacks suppressed [ 627.978131][ T9089] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 628.145926][ T3295] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 628.510651][ T3295] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 628.627666][ T9089] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 628.730409][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 628.839157][ T3295] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 628.950166][ T3295] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.194624][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.298956][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 629.422422][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 632.287973][ T9083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 632.288609][ T9083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 632.797560][ T31] audit: type=1400 audit(1792128949.811:1268): avc: denied { write } for pid=12219 comm="syz.4.1675" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 633.688161][ T9092] net_ratelimit: 36 callbacks suppressed [ 633.688177][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 633.796846][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 633.929102][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.135264][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.323447][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.565096][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.671940][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 634.837590][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 635.091761][ T3295] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 635.148212][ T31] audit: type=1400 audit(1792128952.162:1269): avc: denied { lock } for pid=12236 comm="syz.5.1672" path="socket:[36976]" dev="sockfs" ino=36976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 635.196939][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 635.455978][T12246] PKCS7: Unknown OID: [83] 2.16.840.17.101.3.4.2.1 [ 635.455994][T12246] Unsupported digest algo: 106 [ 635.460526][ T31] audit: type=1400 audit(1792128952.473:1270): avc: denied { connect } for pid=12243 comm="syz.5.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 637.340051][ T9089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.450239][ T31] audit: type=1400 audit(1792128954.464:1271): avc: denied { read } for pid=12255 comm="syz.5.1684" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 637.450486][ T31] audit: type=1400 audit(1792128954.464:1272): avc: denied { open } for pid=12255 comm="syz.5.1684" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 638.531937][ T9083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 638.758480][ T3295] net_ratelimit: 17 callbacks suppressed [ 638.758495][ T3295] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 638.807967][ T31] audit: type=1326 audit(1792128955.824:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 638.808002][ T31] audit: type=1326 audit(1792128955.824:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 638.811129][ T31] audit: type=1326 audit(1792128955.824:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 638.812868][ T31] audit: type=1326 audit(1792128955.824:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 638.869986][ T3295] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 638.872799][ T31] audit: type=1326 audit(1792128955.884:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 638.872828][ T31] audit: type=1326 audit(1792128955.884:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 638.872852][ T31] audit: type=1326 audit(1792128955.884:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 638.999820][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 639.040237][ T31] audit: type=1326 audit(1792128956.054:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 639.040267][ T31] audit: type=1326 audit(1792128956.054:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 639.097638][ T31] audit: type=1326 audit(1792128956.114:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12260 comm="syz.4.1677" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e72f9e559 code=0x7ffc0000 [ 639.125780][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 639.251658][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 639.354033][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 640.345259][ T3295] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 640.391584][T12274] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1690'. [ 641.216974][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 641.323029][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 641.434572][ T3295] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 641.458595][T12280] netlink: 'syz.3.1692': attribute type 1 has an invalid length. [ 641.582991][T12280] 8021q: adding VLAN 0 to HW filter on device bond7 [ 641.655130][T12283] syzkaller0: entered promiscuous mode [ 641.655145][T12283] syzkaller0: entered allmulticast mode [ 641.913377][T12280] bond7: (slave geneve3): making interface the new active one [ 641.914239][T12280] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 642.320698][T12298] netlink: 'syz.4.1697': attribute type 2 has an invalid length. [ 642.320729][T12298] netlink: 'syz.4.1697': attribute type 2 has an invalid length. [ 642.524633][ T9089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 643.818993][ T9089] net_ratelimit: 8 callbacks suppressed [ 643.819008][ T9089] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 643.999164][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 644.104820][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 644.182941][T12320] jffs2: notice: (12320) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 644.194397][ T31] kauditd_printk_skb: 108 callbacks suppressed [ 644.194409][ T31] audit: type=1400 audit(1792128961.207:1391): avc: denied { write } for pid=12319 comm="syz.0.1701" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 644.212380][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 644.321468][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 645.372886][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 646.288175][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 646.421966][ T9089] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 646.532071][ T9084] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 646.640570][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 647.823452][T12333] random: crng reseeded on system resumption [ 649.233899][ T9084] net_ratelimit: 3 callbacks suppressed [ 649.233914][ T9084] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 649.292820][T12347] jffs2: notice: (12347) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 649.330610][ T31] audit: type=1400 audit(1792128966.350:1392): avc: denied { write } for pid=12331 comm="syz.4.1705" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 649.361829][ T9084] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.245786][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.349284][ T9084] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.460338][ T9084] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.568902][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.680446][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.788884][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 650.808076][T12359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1714'. [ 650.899672][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 651.011918][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 651.450940][ T9631] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 651.680197][ T9631] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 652.158021][ T9088] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.317742][ T9631] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 652.317769][ T9631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.414443][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 652.435519][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 652.435712][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 652.438078][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 652.438237][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 652.541474][ T9631] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 652.563372][ T9631] wwan wwan0: port wwan0qmi0 attached [ 652.664203][ T31] audit: type=1800 audit(1792128969.681:1393): pid=12370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1713" name="/" dev="fuse" ino=1 res=0 errno=0 [ 652.785119][ T9631] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 0e:83:15:91:82:27 [ 653.047793][ T9631] usb 1-1: USB disconnect, device number 19 [ 653.063447][ T9631] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 653.189785][ T9631] wwan wwan0: port wwan0qmi0 disconnected [ 654.309792][ T9088] net_ratelimit: 25 callbacks suppressed [ 654.309807][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 654.446975][ T9089] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 654.560497][ T9089] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 654.666290][ T9089] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 654.778222][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 654.886181][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 654.909642][ T31] audit: type=1400 audit(1792128971.932:1394): avc: denied { write } for pid=12374 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.001561][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.106139][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.207563][ T31] audit: type=1400 audit(1792128972.233:1395): avc: denied { write } for pid=12405 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.257145][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.366166][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.378183][ T9629] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 655.736062][ T9629] usb 7-1: Using ep0 maxpacket: 16 [ 655.737580][ T9629] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 655.738465][ T9629] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 655.738480][ T9629] usb 7-1: config 0 has no interface number 0 [ 655.738500][ T9629] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 655.738514][ T9629] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 655.740164][ T9629] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.740177][ T9629] usb 7-1: Product: syz [ 655.740186][ T9629] usb 7-1: Manufacturer: syz [ 655.740194][ T9629] usb 7-1: SerialNumber: syz [ 655.743950][ T9629] usb 7-1: config 0 descriptor?? [ 655.790435][T12400] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.790493][T12400] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 656.077397][T12400] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 656.077456][T12400] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 656.279000][ T9629] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 657.477093][ T9089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.711868][ T9629] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 657.711888][ T9629] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 657.729486][ T9629] asix 7-1:0.34: probe with driver asix failed with error -71 [ 657.766877][ T9629] usb 7-1: USB disconnect, device number 3 [ 657.878529][ T9084] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.956186][ T31] audit: type=1400 audit(1792128971.974:1396): avc: denied { write } for pid=12410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 658.815591][ T31] audit: type=1400 audit(1792128972.834:1397): avc: denied { write } for pid=12441 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.038637][T12332] net_ratelimit: 17 callbacks suppressed [ 660.038653][T12332] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 661.036116][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 662.265954][T12332] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 662.710194][T12332] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 662.938087][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 663.138049][ T9084] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.138838][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 663.245900][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 663.296370][ T9633] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 663.357322][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 664.173406][ T9089] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 664.184340][ T9092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.277676][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 664.323911][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 664.952643][ T31] audit: type=1400 audit(1792128978.974:1398): avc: denied { view } for pid=12471 comm="syz.5.1729" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 665.031019][T12473] jffs2: notice: (12473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 665.055844][ T9092] net_ratelimit: 5 callbacks suppressed [ 665.055856][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.037905][ T9089] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.271469][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.408698][T12332] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.522661][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.513882][T12332] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.619379][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.726097][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.760631][ T31] audit: type=1800 audit(1792128981.784:1399): pid=12485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1741" name="/" dev="fuse" ino=4 res=0 errno=0 [ 667.836152][T12332] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.946171][ T9084] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 668.760178][ T9083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.048228][ T31] audit: type=1400 audit(1792128984.074:1400): avc: denied { read } for pid=12490 comm="syz.6.1744" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 670.048260][ T31] audit: type=1400 audit(1792128984.074:1401): avc: denied { open } for pid=12490 comm="syz.6.1744" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 670.050460][ T9088] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.121584][ T9] kworker/0:0 (9) used greatest stack depth: 16888 bytes left [ 670.142754][T12496] syzkaller0: entered promiscuous mode [ 670.142766][T12496] syzkaller0: entered allmulticast mode [ 670.194125][ T9088] net_ratelimit: 8 callbacks suppressed [ 670.194137][ T9088] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 670.335989][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 670.363760][T12496] 0: reclassify loop, rule prio 0, protocol 700 [ 670.433454][T12503] netlink: 'syz.3.1749': attribute type 1 has an invalid length. [ 670.563409][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.565367][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.659688][T12508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1749'. [ 670.756440][ T5611] Bluetooth: hci5: command 0x0405 tx timeout [ 670.874331][ T31] audit: type=1400 audit(1792128984.894:1402): avc: denied { read } for pid=12509 comm="syz.5.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 670.874944][ T31] audit: type=1400 audit(1792128984.894:1403): avc: denied { ioctl } for pid=12509 comm="syz.5.1750" path="socket:[38036]" dev="sockfs" ino=38036 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 670.953431][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.953630][T12504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.953787][T12504] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.953843][T12504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.954148][T12504] bridge0: entered promiscuous mode [ 670.954159][T12504] bridge0: entered allmulticast mode [ 671.186798][T12505] 8021q: adding VLAN 0 to HW filter on device bond9 [ 671.204792][T12505] bond8: (slave bond9): making interface the new active one [ 671.236647][T12505] bond8: (slave bond9): Enslaving as an active interface with an up link [ 671.276913][ T31] audit: type=1400 audit(1792128985.304:1404): avc: denied { write } for pid=12517 comm="syz.6.1751" name="baSourceID" dev="configfs" ino=38066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 671.277126][ T31] audit: type=1400 audit(1792128985.304:1405): avc: denied { open } for pid=12517 comm="syz.6.1751" path="/51/config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID" dev="configfs" ino=38066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 671.373002][T12507] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 671.387167][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.495600][T12332] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.506337][ T9633] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 671.605051][ T9083] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.656087][ T9633] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 671.656835][ T9633] usb 6-1: config 1 has an invalid interface number: 27 but max is 1 [ 671.656850][ T9633] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.656860][ T9633] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 671.656872][ T9633] usb 6-1: config 1 has no interface number 2 [ 671.656896][ T9633] usb 6-1: config 1 interface 1 has no altsetting 0 [ 671.658377][ T9633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.658391][ T9633] usb 6-1: Product: syz [ 671.658399][ T9633] usb 6-1: Manufacturer: syz [ 671.658408][ T9633] usb 6-1: SerialNumber: syz [ 671.715616][T12332] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 672.255601][ T9631] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 672.285579][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 672.395616][ T9092] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 672.580238][T12332] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 673.023186][T12524] random: crng reseeded on system resumption [ 673.094977][T12524] jffs2: notice: (12524) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 673.134769][ T31] audit: type=1400 audit(1792128987.154:1406): avc: denied { write } for pid=12522 comm="syz.0.1753" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 673.205474][ T9631] usb 1-1: unable to get BOS descriptor or descriptor too short [ 673.205503][ T9631] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 673.206147][ T9631] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 673.206166][ T9631] usb 1-1: can't read configurations, error -71 [ 673.255610][T12533] lo: entered promiscuous mode [ 673.300741][T12533] tunl0: entered promiscuous mode [ 673.314316][T12533] gre0: entered promiscuous mode [ 673.321950][T12533] gretap0: entered promiscuous mode [ 673.331280][T12533] erspan0: entered promiscuous mode [ 673.332246][T12533] ip_vti0: entered promiscuous mode [ 673.349345][T12533] ip6_vti0: entered promiscuous mode [ 673.352103][T12533] sit0: entered promiscuous mode [ 673.354203][T12533] ip6tnl0: entered promiscuous mode [ 673.389661][T12533] ip6gre0: entered promiscuous mode [ 673.401464][T12533] syz_tun: entered promiscuous mode [ 673.412556][T12533] ip6gretap0: entered promiscuous mode [ 673.413901][T12533] vcan0: entered promiscuous mode [ 673.429996][T12533] dummy0: entered promiscuous mode [ 673.461542][ T9633] speedtch 6-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 673.461569][ T9633] usb 6-1: selecting invalid altsetting 0 [ 673.461624][ T9633] speedtch 6-1:1.0: probe with driver speedtch failed with error -22 [ 673.493732][T12533] nlmon0: entered promiscuous mode [ 673.494351][T12533] batadv0: entered promiscuous mode [ 673.494978][T12533] vxcan0: entered promiscuous mode [ 673.528972][T12533] vxcan1: entered promiscuous mode [ 673.529721][T12533] veth0: entered promiscuous mode [ 673.548206][T12533] veth1: entered promiscuous mode [ 673.553994][T12533] wg0: entered promiscuous mode [ 673.570610][T12533] wg1: entered promiscuous mode [ 673.571456][T12533] wg2: entered promiscuous mode [ 673.571997][T12533] veth0_to_bridge: entered promiscuous mode [ 673.592812][T12533] bridge_slave_0: entered promiscuous mode [ 673.604500][T12533] veth1_to_bridge: entered promiscuous mode [ 673.619517][T12533] bridge_slave_1: entered promiscuous mode [ 673.623898][T12533] veth0_to_bond: entered promiscuous mode [ 673.624516][T12533] bond_slave_0: entered promiscuous mode [ 673.649286][T12533] veth1_to_bond: entered promiscuous mode [ 673.662131][T12533] bond_slave_1: entered promiscuous mode [ 673.663135][T12533] veth0_to_team: entered promiscuous mode [ 673.681689][ T9633] speedtch 6-1:1.27: speedtch_bind: setting interface to 1 failed (-71)! [ 673.682061][ T9633] usb 6-1: selecting invalid altsetting 0 [ 673.682075][ T9633] speedtch 6-1:1.27: usbatm_usb_probe: bind failed: -71! [ 673.682100][ T9633] speedtch 6-1:1.27: probe with driver speedtch failed with error -71 [ 673.722617][ T9633] usb 6-1: selecting invalid altsetting 0 [ 673.722632][ T9633] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 673.722778][ T9633] usb 6-1: selecting invalid altsetting 0 [ 673.722789][ T9633] speedtch 6-1:1.1: probe with driver speedtch failed with error -22 [ 673.759423][T12533] team_slave_0: entered promiscuous mode [ 673.762994][ T9633] usb 6-1: USB disconnect, device number 13 [ 673.806742][T12533] veth1_to_team: entered promiscuous mode [ 673.859950][T12533] team_slave_1: entered promiscuous mode [ 673.860922][T12533] veth0_to_batadv: entered promiscuous mode [ 673.890179][T12533] batadv_slave_0: entered promiscuous mode [ 673.892839][T12533] veth1_to_batadv: entered promiscuous mode [ 673.962164][T12533] batadv_slave_1: entered promiscuous mode [ 674.102475][T12533] xfrm0: entered promiscuous mode [ 674.104898][T12533] veth0_to_hsr: entered promiscuous mode [ 674.140403][T12533] veth1_to_hsr: entered promiscuous mode [ 675.087774][ T31] audit: type=1400 audit(1792128988.584:1407): avc: denied { ioctl } for pid=12538 comm="syz.0.1756" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 675.136591][T12533] hsr0: entered promiscuous mode [ 675.153355][T12533] veth1_virt_wifi: entered promiscuous mode [ 675.938968][T12533] veth0_virt_wifi: entered promiscuous mode [ 675.967824][T12533] virt_wifi0: entered promiscuous mode [ 675.993648][T12533] vlan0: entered promiscuous mode [ 676.019710][T12533] vlan1: entered promiscuous mode [ 676.062689][T12533] macvlan0: entered promiscuous mode [ 676.087358][T12533] macvlan1: entered promiscuous mode [ 676.089850][T12533] ipvlan0: entered promiscuous mode [ 676.101424][T12533] ipvlan1: entered promiscuous mode [ 677.070869][T12533] macvtap0: entered promiscuous mode [ 677.074765][T12533] macsec0: entered promiscuous mode [ 677.101519][T12533] geneve0: entered promiscuous mode [ 677.104810][T12533] geneve1: entered promiscuous mode [ 677.144239][T12533] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 677.247339][T12533] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 677.274573][T12533] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 677.304214][T12533] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 677.374962][T12533] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 677.409633][T12533] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 677.505944][T12533] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 677.510673][T12533] wireguard0: entered promiscuous mode [ 677.539055][T12533] erspan1: entered promiscuous mode [ 677.602711][T12533] bond1: entered promiscuous mode [ 677.618409][T12533] bridge0: entered promiscuous mode [ 677.619164][T12533] vlan2: entered promiscuous mode [ 677.695343][T12533] bridge1: entered promiscuous mode [ 677.702462][T12533] vlan3: entered promiscuous mode [ 677.703193][T12533] vxlan0: entered promiscuous mode [ 677.703747][T12533] bridge2: entered promiscuous mode [ 677.747971][T12533] bond2: entered promiscuous mode [ 677.747983][T12533] ip6gretap1: entered promiscuous mode [ 677.774128][T12533] bond0: entered promiscuous mode [ 677.875780][ T9088] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.875802][ T9088] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.877197][ T9083] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.877215][ T9083] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.877580][ T9083] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.877596][ T9083] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.877615][ T9083] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.877629][ T9083] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.002489][T12555] jffs2: notice: (12555) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 678.240071][ T31] audit: type=1400 audit(1792128992.264:1408): avc: denied { write } for pid=12560 comm="syz.4.1765" name="cluster" dev="configfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 678.271375][ T31] audit: type=1400 audit(1792128992.294:1409): avc: denied { write } for pid=12560 comm="syz.4.1765" name="node" dev="configfs" ino=38231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 678.314298][ T31] audit: type=1400 audit(1792128992.334:1410): avc: denied { read } for pid=12560 comm="syz.4.1765" name="ipv4_address" dev="configfs" ino=38238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 678.314377][T12559] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1764'. [ 679.379665][ T31] audit: type=1400 audit(1792128993.404:1411): avc: denied { write } for pid=12560 comm="syz.4.1765" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.481253][ T31] audit: type=1400 audit(1792128993.504:1412): avc: denied { write } for pid=12560 comm="syz.4.1765" name="heartbeat" dev="configfs" ino=38232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 680.657532][T12576] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1767'. [ 681.849709][ T31] audit: type=1800 audit(1792128995.874:1413): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1761" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 681.951202][T12576] bond0: (slave bond_slave_0): Releasing backup interface [ 682.518138][T12590] net_ratelimit: 5 callbacks suppressed [ 682.518151][T12590] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 682.518170][T12590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.561137][T12576] bond_slave_0: entered promiscuous mode [ 682.561151][T12576] bond_slave_0: entered allmulticast mode [ 682.791654][T12598] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 682.996635][ T9632] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 683.250318][T12593] random: crng reseeded on system resumption [ 684.005611][T12610] netlink: 131 bytes leftover after parsing attributes in process `syz.3.1774'. [ 684.581348][T12593] jffs2: notice: (12593) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 685.183660][ T9632] usb 6-1: unable to get BOS descriptor or descriptor too short [ 685.183689][ T9632] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 685.206138][ T9632] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 685.206158][ T9632] usb 6-1: can't read configurations, error -71 [ 685.660928][ T31] audit: type=1400 audit(1792128999.684:1414): avc: denied { write } for pid=12606 comm="syz.0.1775" name="core" dev="configfs" ino=3518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 685.661257][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.661286][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.936199][T12628] syzkaller0: entered promiscuous mode [ 686.936214][T12628] syzkaller0: entered allmulticast mode [ 688.033290][ T31] audit: type=1400 audit(1792129002.054:1415): avc: denied { write } for pid=12604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 689.159862][T12643] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1783'. [ 689.159884][T12643] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1783'. [ 689.159890][T12643] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 689.347748][T12644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.350730][T12644] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 689.540645][ T31] audit: type=1400 audit(1792129003.554:1416): avc: denied { write } for pid=12646 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.407668][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1780'. [ 698.182295][T12688] jffs2: notice: (12688) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 699.086965][ T31] audit: type=1400 audit(1792129013.114:1417): avc: denied { setopt } for pid=12705 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 701.675547][ T31] audit: type=1400 audit(1792129015.694:1418): avc: denied { ioctl } for pid=12723 comm="syz.3.1804" path="socket:[38844]" dev="sockfs" ino=38844 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 702.207520][T12726] syzkaller0: entered promiscuous mode [ 702.207534][T12726] syzkaller0: entered allmulticast mode [ 702.283602][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 702.283627][T12728] openvswitch: netlink: Message has 1 unknown bytes. [ 702.350040][ T31] audit: type=1400 audit(1792129016.374:1419): avc: denied { mount } for pid=12727 comm="syz.4.1802" name="/" dev="hugetlbfs" ino=38872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 702.613832][ T31] audit: type=1326 audit(1792129016.634:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.3.1806" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f622d99e559 code=0x0 [ 703.592140][ T31] audit: type=1400 audit(1792129017.564:1421): avc: denied { watch watch_reads } for pid=12738 comm="syz.5.1805" path="/proc/489/task" dev="proc" ino=38890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 703.592605][ T5694] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 703.736418][ T5694] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 703.737193][ T5694] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.737210][ T5694] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.737222][ T5694] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 703.737236][ T5694] usb 5-1: config 0 interface 0 has no altsetting 0 [ 703.737253][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.738732][ T5694] usb 5-1: config 0 descriptor?? [ 704.171295][ T5694] elan 0003:04F3:074D.0005: ignoring exceeding usage max [ 704.186612][ T5694] elan 0003:04F3:074D.0005: failed to start in urb: -90 [ 704.208714][ T5694] elan 0003:04F3:074D.0005: hidraw0: USB HID v0.10 Joystick [HID 04f3:074d] on usb-dummy_hcd.4-1/input0 [ 705.974215][ T9629] usb 5-1: USB disconnect, device number 20 [ 705.997321][ T31] audit: type=1400 audit(1792129020.024:1422): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 706.533397][T12763] gadgetfs: bound to dummy_udc driver [ 706.988523][ T9629] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 706.989534][ C0] gadgetfs: connected [ 706.992928][ T9629] gadgetfs: disconnected [ 707.136794][ C0] gadgetfs: connected [ 707.138032][ T9629] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 707.138280][ T9629] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 707.138302][ T9629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.141955][ C0] gadgetfs: configuration #1 [ 707.219037][T12784] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1811'. [ 707.318389][ T9632] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 707.393054][T12770] gadgetfs: suspended from state 3 [ 707.411762][T12770] gadgetfs: disconnected [ 707.420347][ T9629] usb 1-1: USB disconnect, device number 23 [ 707.676674][T12777] random: crng reseeded on system resumption [ 708.657999][ T9632] usb 6-1: unable to get BOS descriptor or descriptor too short [ 708.658028][ T9632] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 708.661475][ T9632] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 708.661495][ T9632] usb 6-1: can't read configurations, error -71 [ 708.733864][ T31] audit: type=1400 audit(1792129022.754:1423): avc: denied { write } for pid=12765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 709.902602][ T31] audit: type=1400 audit(1792129023.924:1424): avc: denied { ioctl } for pid=12794 comm="syz.0.1817" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 710.667518][ T31] audit: type=1400 audit(1792129024.694:1425): avc: denied { write } for pid=12802 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.785620][ T5726] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 711.586729][ T5726] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 711.657127][ T5726] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 711.657150][ T5726] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 711.657165][ T5726] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.858113][ T31] audit: type=1400 audit(1792129025.884:1426): avc: denied { write } for pid=12808 comm="syz.5.1822" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 712.054757][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 712.054775][ T5726] usb 7-1: Product: syz [ 712.505518][ T5726] usb 7-1: config 0 descriptor?? [ 712.596762][ T5726] usb 7-1: can't set config #0, error -71 [ 713.468073][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 713.500099][ T5726] usb 7-1: USB disconnect, device number 4 [ 714.162211][T12835] lo: entered promiscuous mode [ 714.162314][T12835] tunl0: entered promiscuous mode [ 714.162391][T12835] gre0: entered promiscuous mode [ 714.162450][T12835] gretap0: entered promiscuous mode [ 714.162506][T12835] erspan0: entered promiscuous mode [ 714.162565][T12835] ip_vti0: entered promiscuous mode [ 714.162635][T12835] ip6_vti0: entered promiscuous mode [ 714.162692][T12835] sit0: entered promiscuous mode [ 714.162748][T12835] ip6tnl0: entered promiscuous mode [ 714.162809][T12835] ip6gre0: entered promiscuous mode [ 714.162915][T12835] ip6gretap0: entered promiscuous mode [ 714.163073][T12835] vcan0: entered promiscuous mode [ 714.163150][T12835] bond0: entered promiscuous mode [ 714.163213][T12835] team0: entered promiscuous mode [ 714.163285][T12835] nlmon0: entered promiscuous mode [ 714.163354][T12835] vxcan0: entered promiscuous mode [ 714.163426][T12835] vxcan1: entered promiscuous mode [ 714.163496][T12835] veth0: entered promiscuous mode [ 714.213905][T12835] veth1: entered promiscuous mode [ 714.300082][T12835] wg0: entered promiscuous mode [ 714.300180][T12835] wg1: entered promiscuous mode [ 714.300267][T12835] wg2: entered promiscuous mode [ 714.300341][T12835] veth0_to_bridge: entered promiscuous mode [ 714.300414][T12835] bridge_slave_0: entered promiscuous mode [ 714.300484][T12835] veth1_to_bridge: entered promiscuous mode [ 714.300554][T12835] bridge_slave_1: entered promiscuous mode [ 714.300624][T12835] veth0_to_bond: entered promiscuous mode [ 714.300699][T12835] bond_slave_0: entered promiscuous mode [ 714.300769][T12835] veth1_to_bond: entered promiscuous mode [ 714.300845][T12835] bond_slave_1: entered promiscuous mode [ 714.300918][T12835] veth0_to_team: entered promiscuous mode [ 714.300989][T12835] team_slave_0: entered promiscuous mode [ 714.301063][T12835] veth1_to_team: entered promiscuous mode [ 714.301134][T12835] team_slave_1: entered promiscuous mode [ 714.301206][T12835] veth1_to_batadv: entered promiscuous mode [ 714.301278][T12835] batadv_slave_1: entered promiscuous mode [ 714.301347][T12835] xfrm0: entered promiscuous mode [ 714.301417][T12835] veth0_to_hsr: entered promiscuous mode [ 714.301490][T12835] hsr_slave_0: entered promiscuous mode [ 714.301560][T12835] veth1_to_hsr: entered promiscuous mode [ 715.075493][T12835] hsr_slave_1: entered promiscuous mode [ 715.075594][T12835] veth1_virt_wifi: entered promiscuous mode [ 715.075672][T12835] veth0_virt_wifi: entered promiscuous mode [ 715.075747][T12835] virt_wifi0: entered promiscuous mode [ 715.075946][T12835] vlan0: entered promiscuous mode [ 715.076101][T12835] vlan1: entered promiscuous mode [ 715.076240][T12835] macvlan0: entered promiscuous mode [ 715.076314][T12835] macvlan1: entered promiscuous mode [ 715.076393][T12835] ipvlan0: entered promiscuous mode [ 715.076467][T12835] ipvlan1: entered promiscuous mode [ 715.076663][T12835] macvtap0: entered promiscuous mode [ 715.076736][T12835] macsec0: entered promiscuous mode [ 715.076795][T12835] geneve0: entered promiscuous mode [ 715.076869][T12835] geneve1: entered promiscuous mode [ 715.596499][T12835] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 715.596572][T12835] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 715.596638][T12835] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 715.596702][T12835] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 715.596796][T12835] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 715.596869][T12835] ip6erspan0: entered promiscuous mode [ 715.596930][T12835] macsec1: entered promiscuous mode [ 715.596987][T12835] bridge1: entered promiscuous mode [ 715.597053][T12835] bond1: entered promiscuous mode [ 715.597115][T12835] bond2: entered promiscuous mode [ 715.597130][T12835] bridge2: entered promiscuous mode [ 715.597257][T12835] vlan2: entered promiscuous mode [ 715.597438][T12835] macsec2: entered promiscuous mode [ 715.597494][T12835] bond3: entered promiscuous mode [ 715.597634][T12835] ifb0: entered promiscuous mode [ 715.597705][T12835] ifb2: entered promiscuous mode [ 715.597775][T12835] ipvlan2: entered promiscuous mode [ 715.736229][T12835] bridge3: entered promiscuous mode [ 715.736325][T12835] bond4: entered promiscuous mode [ 715.736345][T12835] geneve2: entered promiscuous mode [ 715.772895][T12835] erspan0.1: entered promiscuous mode [ 715.775615][ T9088] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 715.775634][ T9088] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 54399 - 0 [ 715.775656][ T9088] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 715.775671][ T9088] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 54399 - 0 [ 715.775690][ T9088] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 715.775704][ T9088] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 54399 - 0 [ 715.775723][ T9088] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 715.775738][ T9088] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 54399 - 0 [ 715.908641][T12836] syzkaller0: entered promiscuous mode [ 715.908654][T12836] syzkaller0: entered allmulticast mode [ 715.953863][T12828] SELinux: invalid class [ 715.977325][T12828] SELinux: failed to load policy [ 716.846477][T12846] netlink: 'syz.0.1829': attribute type 4 has an invalid length. [ 716.846494][T12846] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1829'. [ 717.032444][ T31] audit: type=1400 audit(1792129031.054:1427): avc: denied { write } for pid=12817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.425982][T12858] @0Ù: renamed from dummy0 [ 718.629371][ T31] audit: type=1400 audit(1792129032.654:1428): avc: denied { write } for pid=12863 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.704684][ T5726] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 720.779337][T12861] random: crng reseeded on system resumption [ 721.070548][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 721.070577][ T5726] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 721.071631][ T5726] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 721.071652][ T5726] usb 5-1: can't read configurations, error -71 [ 721.998542][T12902] overlayfs: failed to clone upperpath [ 722.433852][T12907] batman_adv: batadv0: Adding interface: gretap1 [ 722.433906][T12907] batman_adv: batadv0: Interface activated: gretap1 [ 724.485767][T12918] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1842'. [ 725.507860][T12917] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.1843' sets config #1 [ 728.839318][T12946] overlayfs: failed to clone upperpath [ 734.164232][T12972] jffs2: notice: (12972) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 734.364665][T12974] 9p: Bad value for 'rfdno' [ 738.675683][ T5602] Bluetooth: hci4: command 0x0406 tx timeout [ 739.583446][T12989] syz.5.1865 (12989): drop_caches: 2 [ 741.060696][ T31] audit: type=1400 audit(1792129055.044:1429): avc: denied { setopt } for pid=12996 comm="syz.5.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 744.026694][T13010] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 746.859935][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.859969][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.046311][T13035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.051672][ T9632] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 747.201182][T13023] random: crng reseeded on system resumption [ 747.250293][T13023] jffs2: notice: (13023) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 747.277260][ T31] audit: type=1400 audit(1792129061.304:1430): avc: denied { write } for pid=13022 comm="syz.0.1873" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 747.337959][ T9632] usb 1-1: unable to get BOS descriptor or descriptor too short [ 747.337986][ T9632] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 747.340000][ T9632] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 747.340020][ T9632] usb 1-1: can't read configurations, error -71 [ 747.977523][T13045] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 748.759127][T13048] overlayfs: failed to resolve './bus': -2 [ 748.905700][ T5726] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 750.244615][ T5726] usb 7-1: unable to get BOS descriptor or descriptor too short [ 750.244646][ T5726] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 750.264672][ T5726] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 750.264691][ T5726] usb 7-1: can't read configurations, error -71 [ 750.941766][T13061] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 751.005644][ T31] audit: type=1400 audit(1792129065.024:1431): avc: denied { relabelto } for pid=13060 comm="syz.6.1883" name="console" dev="sysfs" ino=12218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_mac_exec_t:s0" [ 751.070349][ T31] audit: type=1400 audit(1792129065.034:1432): avc: denied { associate } for pid=13060 comm="syz.6.1883" name="console" dev="sysfs" ino=12218 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_mac_exec_t:s0" [ 751.148067][ T31] audit: type=1400 audit(1792129065.174:1433): avc: denied { read write } for pid=13060 comm="syz.6.1883" name="console" dev="sysfs" ino=12218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_mac_exec_t:s0" [ 751.148313][ T31] audit: type=1400 audit(1792129065.174:1434): avc: denied { open } for pid=13060 comm="syz.6.1883" path="/80/sys/devices/pnp0/00:02/00:02:0/00:02:0.0/tty/ttyS0/console" dev="sysfs" ino=12218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_mac_exec_t:s0" [ 753.970800][T13068] bond3: (slave veth0_to_bond): Releasing backup interface [ 753.972192][T13068] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 754.132177][T13068] bridge0: port 1(netdevsim0) entered disabled state [ 754.188435][T13068] bond2: (slave bridge2): Releasing active interface [ 754.224113][T13068] bond4: (slave geneve2): Releasing active interface [ 755.051800][ T31] audit: type=1400 audit(1792129069.074:1435): avc: denied { create } for pid=13090 comm="syz.6.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 755.086812][ T31] audit: type=1400 audit(1792129069.114:1436): avc: denied { ioctl } for pid=13090 comm="syz.6.1887" path="socket:[40442]" dev="sockfs" ino=40442 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 755.131402][T13097] Bluetooth: MGMT ver 1.23 [ 755.190781][T13096] input: syz1 as /devices/virtual/input/input18 [ 756.567248][ T31] audit: type=1400 audit(1792129070.594:1437): avc: denied { read } for pid=13099 comm="syz.5.1891" path="socket:[40469]" dev="sockfs" ino=40469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 756.866169][T13113] netlink: 'syz.6.1897': attribute type 1 has an invalid length. [ 758.108249][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1897'. [ 758.112296][T13119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 758.113199][T13119] bond1: (slave bond2): making interface the new active one [ 758.113388][T13119] bond1: (slave bond2): Enslaving as an active interface with an up link [ 759.272425][T13113] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 761.199075][T13152] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5600] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[13152] [ 761.275746][T13153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1902'. [ 762.590319][T13168] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 762.748921][T13168] 8021q: adding VLAN 0 to HW filter on device bond10 [ 762.775557][T13170] macvlan3: entered promiscuous mode [ 762.775571][T13170] macvlan3: entered allmulticast mode [ 762.775766][T13170] bond10: entered allmulticast mode [ 762.775785][T13170] bond10: entered promiscuous mode [ 762.776086][T13170] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 762.783259][T13170] team0: Port device macvlan3 added [ 762.892844][T13168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59819 sclass=netlink_route_socket pid=13168 comm=syz.3.1908 [ 763.039058][T13176] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 763.635752][T13176] 8021q: adding VLAN 0 to HW filter on device bond6 [ 763.639762][T13176] bond5: (slave bond6): making interface the new active one [ 763.696043][T13176] bond5: (slave bond6): Enslaving as an active interface with an up link [ 763.724467][T13176] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 763.741943][T13176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1911'. [ 768.811957][ T31] audit: type=1800 audit(1792129082.834:1438): pid=13204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1916" name="nullb0" dev="tmpfs" ino=2369 res=0 errno=0 [ 770.712688][T13213] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 770.859064][T13218] 8021q: adding VLAN 0 to HW filter on device bond4 [ 770.872363][T13218] bond3: (slave bond4): making interface the new active one [ 770.887660][T13218] bond3: (slave bond4): Enslaving as an active interface with an up link [ 770.980238][T13218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1923'. [ 771.038640][T13213] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 771.760272][T13224] loop7: detected capacity change from 0 to 16384 [ 771.897602][T13227] fuse: fd is not a fuse device [ 773.220603][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 773.581298][T13239] ubi0: attaching mtd0 [ 773.618855][T13239] ubi0: scanning is finished [ 773.618892][T13239] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 773.682481][ T31] audit: type=1400 audit(1792129087.704:1439): avc: denied { write } for pid=13240 comm="syz.0.1931" name="functions" dev="configfs" ino=17602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 773.763888][ T31] audit: type=1400 audit(1792129087.784:1440): avc: denied { write } for pid=13240 comm="syz.0.1931" name="os_desc" dev="configfs" ino=17605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 773.836186][ T31] audit: type=1400 audit(1792129087.864:1441): avc: denied { create } for pid=13240 comm="syz.0.1931" name="c.1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 773.838628][ T31] audit: type=1400 audit(1792129087.864:1442): avc: denied { write } for pid=13240 comm="syz.0.1931" name="os_desc" dev="configfs" ino=17605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 775.192312][T13246] ALSA: mixer_oss: invalid OSS volume '' [ 776.138542][T13239] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 780.708224][ T31] audit: type=1326 audit(1792129094.734:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13280 comm="syz.4.1941" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e72f9e559 code=0x0 [ 780.979605][T13288] jffs2: notice: (13288) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 781.026819][ T5726] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 781.177461][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 781.178838][ T5726] usb 1-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=71.fa [ 781.233215][ T5726] usb 1-1: config 9 has an invalid interface number: 27 but max is 0 [ 781.233231][ T5726] usb 1-1: config 9 has no interface number 0 [ 781.233247][ T5726] usb 1-1: config 9 interface 27 has no altsetting 0 [ 781.308285][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.308300][ T5726] usb 1-1: Product: syz [ 781.308308][ T5726] usb 1-1: Manufacturer: syz [ 781.308316][ T5726] usb 1-1: SerialNumber: syz [ 782.427986][ T31] audit: type=1400 audit(1792129096.454:1444): avc: denied { bind } for pid=13294 comm="syz.4.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 783.230993][T13302] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 784.278752][T13310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.293177][T13310] bond5: (slave bond6): making interface the new active one [ 784.303050][T13310] bond5: (slave bond6): Enslaving as an active interface with an up link [ 784.327399][ T5726] qmi_wwan 1-1:9.27: bogus CDC Union: master=0, slave=1 [ 784.327511][ T5726] qmi_wwan 1-1:9.27: probe with driver qmi_wwan failed with error -22 [ 784.370849][ T5726] usb 1-1: USB disconnect, device number 26 [ 784.418529][T13302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1948'. [ 784.611778][T13315] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 784.682244][T13315] kvm: pic: level sensitive irq not supported [ 784.682288][T13315] kvm: pic: non byte read [ 784.712507][T13315] kvm: pic: level sensitive irq not supported [ 784.712562][T13315] kvm: pic: non byte read [ 784.712673][T13315] kvm: pic: level sensitive irq not supported [ 784.712704][T13315] kvm: pic: non byte read [ 784.712791][T13315] kvm: pic: level sensitive irq not supported [ 784.713508][T13315] kvm: pic: non byte read [ 784.713610][T13315] kvm: pic: level sensitive irq not supported [ 784.713642][T13315] kvm: pic: non byte read [ 784.713766][T13315] kvm: pic: level sensitive irq not supported [ 784.713807][T13315] kvm: pic: non byte read [ 784.713899][T13315] kvm: pic: level sensitive irq not supported [ 784.713929][T13315] kvm: pic: non byte read [ 784.714024][T13315] kvm: pic: level sensitive irq not supported [ 784.714054][T13315] kvm: pic: non byte read [ 784.810950][T13315] kvm: pic: level sensitive irq not supported [ 784.810992][T13315] kvm: pic: non byte read [ 784.962256][T13321] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 785.119776][T13325] 8021q: adding VLAN 0 to HW filter on device bond8 [ 785.120686][T13325] bond7: (slave bond8): making interface the new active one [ 785.120887][T13325] bond7: (slave bond8): Enslaving as an active interface with an up link [ 785.181364][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1952'. [ 787.809147][ T5726] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 788.850385][T13337] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 788.867883][T13337] kvm: pic: non byte read [ 788.870116][T13337] kvm: pic: level sensitive irq not supported [ 789.331600][T13347] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 791.383514][ T31] audit: type=1400 audit(1792129105.404:1445): avc: denied { attach_queue } for pid=13356 comm="syz.0.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 791.696279][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1962'. [ 791.696310][T13359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1962'. [ 792.001858][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1966'. [ 792.086444][ T31] audit: type=1400 audit(1792129106.114:1446): avc: denied { setopt } for pid=13364 comm="syz.5.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 793.987897][ T31] audit: type=1400 audit(1792129108.014:1447): avc: denied { create } for pid=13379 comm="syz.5.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 793.993523][ T31] audit: type=1400 audit(1792129108.014:1448): avc: denied { connect } for pid=13379 comm="syz.5.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 794.236048][ T5726] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 794.275580][T13368] Bluetooth: hci4: command 0x0406 tx timeout [ 794.288758][T13390] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1969'. [ 794.397023][ T5726] usb 7-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 794.397811][ T5726] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 794.397826][ T5726] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 794.399366][ T5726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.399379][ T5726] usb 7-1: Product: syz [ 794.399389][ T5726] usb 7-1: Manufacturer: syz [ 794.399397][ T5726] usb 7-1: SerialNumber: syz [ 794.468699][ T5726] whiteheat 7-1:1.0: Connect Tech - WhiteHEAT converter detected [ 796.583126][ T5726] usb 7-1: Connect Tech - WhiteHEAT: Couldn't send command [-110] [ 796.583143][ T5726] usb 7-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 796.583153][ T5726] usb 7-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 796.583162][ T5726] usb 7-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 797.133240][T13394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.191846][T13397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=13397 comm=syz.0.1970 [ 797.250685][ T5726] usb 7-1: USB disconnect, device number 7 [ 798.427905][ T31] audit: type=1800 audit(1792129112.444:1449): pid=13413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1977" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 798.718774][ T5726] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 798.754587][T13416] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 798.867070][ T5726] usb 6-1: unable to get BOS descriptor or descriptor too short [ 798.867097][ T5726] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 798.867857][ T5726] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 798.867873][ T5726] usb 6-1: config 142 has no interface number 0 [ 798.867893][ T5726] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 798.867908][ T5726] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 798.867921][ T5726] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 798.867933][ T5726] usb 6-1: config 142 interface 251 has no altsetting 0 [ 798.872087][ T5726] usb 6-1: string descriptor 0 read error: -22 [ 798.872158][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.874410][T13414] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 798.874467][T13414] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 798.963489][ T5726] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 799.005581][ T5694] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 799.006895][ T5726] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 799.220129][ T5694] usb 5-1: unable to get BOS descriptor or descriptor too short [ 799.220159][ T5694] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 799.221713][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.221727][ T5694] usb 5-1: config 0 has no interfaces? [ 799.263813][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.263827][ T5694] usb 5-1: Product: syz [ 799.263836][ T5694] usb 5-1: Manufacturer: syz [ 799.263844][ T5694] usb 5-1: SerialNumber: syz [ 799.279073][ T5694] usb 5-1: config 0 descriptor?? [ 799.694730][ T31] audit: type=1400 audit(1792129113.714:1450): avc: denied { write } for pid=13411 comm="syz.5.1978" name="functions" dev="configfs" ino=17602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 799.907812][T13414] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 799.907837][T13414] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 799.908018][ C0] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 800.280552][ T5694] usb 5-1: USB disconnect, device number 23 [ 800.318966][ T5726] usb 6-1: USB disconnect, device number 18 [ 800.363025][ T5726] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 800.378098][ T5726] cypress_m8 6-1:142.251: device disconnected [ 806.301339][T13462] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 806.301339][T13462] [ 806.301354][T13462] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 806.301416][T13462] CIFS: Attempting to mount //172.20.20.170/share [ 807.793453][T13462] CIFS: VFS: Error connecting to socket. Aborting operation. [ 807.793481][T13462] CIFS: VFS: cifs_mount failed w/return code = -4 [ 808.277029][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.277062][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.431107][ T31] audit: type=1400 audit(1792129123.454:1451): avc: denied { cmd } for pid=13467 comm="syz.6.1992" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 812.274332][ T5611] Bluetooth: hci5: unexpected event for opcode 0x2040 [ 814.721936][T13511] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2006'. [ 814.944536][T13516] bridge_slave_0: left allmulticast mode [ 814.944675][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.973108][T13516] bridge_slave_1: left allmulticast mode [ 814.973216][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.027039][T13516] bond0: (slave bond_slave_0): Releasing backup interface [ 815.047211][T13516] bond0: (slave bond_slave_1): Releasing backup interface [ 815.063090][T13516] team0: Port device team_slave_0 removed [ 815.078482][T13516] team0: Port device team_slave_1 removed [ 815.078691][T13516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 820.062193][T13541] jffs2: notice: (13541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 821.532208][T13544] SET target dimension over the limit! [ 821.543148][T13544] sctp: [Deprecated]: syz.5.2017 (pid 13544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 821.543148][T13544] Use struct sctp_sack_info instead [ 822.497085][T13553] netlink: 'syz.6.2015': attribute type 1 has an invalid length. [ 822.642220][T13553] 8021q: adding VLAN 0 to HW filter on device bond4 [ 822.656195][T13553] bond3: (slave bond4): making interface the new active one [ 822.656472][T13553] bond3: (slave bond4): Enslaving as an active interface with an up link [ 822.698208][T13553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2015'. [ 822.708607][ T31] audit: type=1400 audit(1792129136.724:1452): avc: denied { setattr } for pid=13558 comm="syz.5.2022" name="NETLINK" dev="sockfs" ino=42973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 823.579248][T13563] binder: 13562:13563 unknown command 0 [ 823.579262][T13563] binder: 13562:13563 ioctl c0306201 200000000c00 returned -22 [ 823.734616][ T31] audit: type=1400 audit(1792129137.754:1453): avc: denied { mounton } for pid=13558 comm="syz.5.2022" path="/file0" dev="ramfs" ino=43000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 823.949341][ T31] audit: type=1400 audit(1792129137.974:1454): avc: denied { create } for pid=13565 comm="syz.0.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 823.949372][ T31] audit: type=1400 audit(1792129137.974:1455): avc: denied { write } for pid=13565 comm="syz.0.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 825.020550][T13578] netlink: 'syz.6.2026': attribute type 1 has an invalid length. [ 825.191952][T13578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 825.204443][T13578] bond5: (slave bond6): making interface the new active one [ 825.204725][T13578] bond5: (slave bond6): Enslaving as an active interface with an up link [ 825.269593][T13578] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2026'. [ 827.490592][T13603] cgroup: none used incorrectly [ 828.466454][ T31] audit: type=1400 audit(1792129142.394:1456): avc: denied { validate_trans } for pid=13604 comm="syz.0.2033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 835.799371][ T31] audit: type=1800 audit(1792129148.818:1457): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2041" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 836.017696][T13641] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 836.086432][T13641] picdev_read: 4 callbacks suppressed [ 836.086444][T13641] kvm: pic: non byte read [ 836.087493][T13641] pic_ioport_write: 3 callbacks suppressed [ 836.087501][T13641] kvm: pic: level sensitive irq not supported [ 836.087580][T13641] kvm: pic: non byte read [ 836.087690][T13641] kvm: pic: level sensitive irq not supported [ 836.088695][T13641] kvm: pic: non byte read [ 836.089016][T13641] kvm: pic: level sensitive irq not supported [ 836.089051][T13641] kvm: pic: non byte read [ 836.090112][T13641] kvm: pic: level sensitive irq not supported [ 836.090370][T13641] kvm: pic: non byte read [ 837.178973][T13646] netlink: 'syz.4.2045': attribute type 1 has an invalid length. [ 837.408775][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2045'. [ 837.505833][T13650] 8021q: adding VLAN 0 to HW filter on device bond10 [ 837.508342][T13650] bond9: (slave bond10): making interface the new active one [ 837.544467][T13650] bond9: (slave bond10): Enslaving as an active interface with an up link [ 839.152552][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 840.533796][T13668] overlayfs: failed to clone upperpath [ 841.141903][T13669] netlink: zone id is out of range [ 841.141923][T13669] netlink: zone id is out of range [ 841.141936][T13669] netlink: zone id is out of range [ 841.141939][T13669] netlink: zone id is out of range [ 841.141947][T13669] netlink: zone id is out of range [ 841.141951][T13669] netlink: zone id is out of range [ 843.383167][T13684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13684 comm=syz.3.2053 [ 843.405981][T13684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13684 comm=syz.3.2053 [ 845.503905][T13696] fuse: fd is not a fuse device [ 845.696081][T13691] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 845.696099][T13691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 845.696597][T13691] vhci_hcd vhci_hcd.0: Device attached [ 845.696940][T13695] vhci_hcd: connection closed [ 845.732864][ T31] audit: type=1800 audit(1792129158.748:1458): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2054" name="file0" dev="overlay" ino=2250 res=0 errno=0 [ 845.779409][ T9093] vhci_hcd vhci_hcd.5: stop threads [ 845.780004][ T9093] vhci_hcd vhci_hcd.5: release socket [ 845.780031][ T9093] vhci_hcd vhci_hcd.5: disconnect device [ 846.900978][T13709] ip_tables: iptables: counters copy to user failed while replacing table [ 848.432913][T13718] IPVS: lc: FWM 3 0x00000003 - no destination available [ 848.488421][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2061'. [ 848.717326][ T5694] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 848.865515][ T5694] usb 5-1: Using ep0 maxpacket: 16 [ 848.865927][ T5694] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 848.893235][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.893253][ T5694] usb 5-1: Product: syz [ 848.893264][ T5694] usb 5-1: Manufacturer: syz [ 848.893273][ T5694] usb 5-1: SerialNumber: syz [ 848.951879][ T5694] r8152-cfgselector 5-1: Unknown version 0x0000 [ 848.951894][ T5694] r8152-cfgselector 5-1: config 0 descriptor?? [ 849.174015][ T5694] r8152-cfgselector 5-1: Unknown version 0x0000 [ 849.174302][ T5694] r8152-cfgselector 5-1: No union descriptors [ 849.414740][T13726] overlayfs: failed to clone upperpath [ 849.557777][T13728] futex_wake_op: syz.3.2065 tries to shift op by 144; fix this program [ 850.722966][ T9633] r8152-cfgselector 5-1: USB disconnect, device number 24 [ 850.773610][ T31] audit: type=1800 audit(1792129163.788:1459): pid=13739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2067" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 852.194332][T13749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 852.381367][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2069'. [ 852.382693][T13742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.103739][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2073'. [ 854.248706][T13765] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2076'. [ 855.317958][T13763] block nbd4: shutting down sockets [ 858.289999][ T31] audit: type=1800 audit(1792129171.308:1460): pid=13785 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2082" name=08 dev="sda1" ino=2048 res=0 errno=0 [ 858.646328][T13797] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 858.647555][T13797] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 858.651586][ T31] audit: type=1400 audit(1792129171.668:1461): avc: denied { firmware_load } for pid=13795 comm="syz.3.2075" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 858.839816][T13801] netlink: 'syz.5.2079': attribute type 1 has an invalid length. [ 859.624402][T13804] binder: 13803:13804 unknown command 0 [ 859.624421][T13804] binder: 13803:13804 ioctl c0306201 200000000c00 returned -22 [ 859.835963][T13808] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2079'. [ 860.370730][T13811] overlayfs: failed to clone upperpath [ 860.415608][T13806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 860.418722][T13812] netlink: 'syz.6.2090': attribute type 1 has an invalid length. [ 860.421041][T13806] bond0: (slave bond3): making interface the new active one [ 860.421234][T13806] bond0: (slave bond3): Enslaving as an active interface with an up link [ 860.515835][T13801] bond0: (slave gretap2): Enslaving as a backup interface with an up link [ 860.615565][T13817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2090'. [ 860.675812][T13815] 8021q: adding VLAN 0 to HW filter on device bond8 [ 860.701543][T13815] bond7: (slave bond8): making interface the new active one [ 860.704378][T13815] bond7: (slave bond8): Enslaving as an active interface with an up link [ 861.083071][ T31] audit: type=1400 audit(1792129174.098:1462): avc: denied { checkpoint_restore } for pid=13820 comm="syz.5.2093" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 863.793874][T13832] netlink: 'syz.6.2095': attribute type 2 has an invalid length. [ 863.848146][T13832] : entered promiscuous mode [ 863.852386][T13824] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 863.852595][T13824] block device autoloading is deprecated and will be removed. [ 864.152094][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2088'. [ 864.206588][T13841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2096'. [ 864.880572][T13843] netlink: 'syz.4.2097': attribute type 1 has an invalid length. [ 865.998027][T13853] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2098'. [ 865.998042][T13853] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2098'. [ 865.998049][T13853] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 866.837337][T13850] binder: 13849:13850 unknown command 0 [ 866.837354][T13850] binder: 13849:13850 ioctl c0306201 200000000c00 returned -22 [ 867.058350][T13858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2097'. [ 868.347325][T13848] 8021q: adding VLAN 0 to HW filter on device bond12 [ 868.349250][T13848] bond11: (slave bond12): making interface the new active one [ 868.349471][T13848] bond11: (slave bond12): Enslaving as an active interface with an up link [ 868.351115][T13852] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 869.754287][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.754322][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.901937][T13884] input: syz1 as /devices/virtual/input/input19 [ 875.149676][T13897] xt_IDLETIMER: timeout value is zero [ 876.715661][ T9633] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 876.721880][ T9093] IPVS: starting estimator thread 0... [ 876.815574][T13909] IPVS: using max 64 ests per chain, 153600 per kthread [ 876.965737][ T9633] usb 5-1: Using ep0 maxpacket: 16 [ 876.967684][ T9633] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 876.969772][ T9633] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.969814][ T9633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 876.969830][ T9633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 876.969843][ T9633] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 876.969856][ T9633] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.970806][ T9633] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 876.970819][ T9633] usb 5-1: Manufacturer: syz [ 877.345636][T13912] Invalid ELF header magic: != ELF [ 878.090462][ T9633] usb 5-1: config 0 descriptor?? [ 880.336446][ T9633] rc_core: IR keymap rc-hauppauge not found [ 880.336459][ T9633] Registered IR keymap rc-empty [ 880.336829][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 880.357559][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 880.621784][ T9633] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 880.907052][ T9633] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 881.570734][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.590026][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.606316][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.627769][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.645587][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.665644][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.687853][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.710635][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.725981][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.747977][ T9633] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 881.767063][ T9633] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 881.767080][ T9633] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 881.796573][ T9633] usb 5-1: USB disconnect, device number 25 [ 881.884177][T13933] random: crng reseeded on system resumption [ 881.941991][ T31] audit: type=1400 audit(1792129194.958:1463): avc: denied { ioctl } for pid=13932 comm="syz.0.2119" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 882.490022][T13942] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 883.394121][T13952] xt_hashlimit: max too large, truncated to 1048576 [ 883.569381][T13956] futex_wake_op: syz.3.2116 tries to shift op by 144; fix this program [ 883.715572][ T9633] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 883.845660][ T9633] usb 6-1: device descriptor read/64, error -71 [ 883.865851][ T31] audit: type=1400 audit(1792129196.888:1464): avc: denied { lock } for pid=13957 comm="syz.4.2124" path="socket:[45017]" dev="sockfs" ino=45017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 883.944475][T13956] futex_wake_op: syz.3.2116 tries to shift op by 144; fix this program [ 884.085506][ T9633] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 884.215603][ T9633] usb 6-1: device descriptor read/64, error -71 [ 884.325694][ T9633] usb usb6-port1: attempt power cycle [ 884.665514][ T9633] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 884.689398][ T9633] usb 6-1: device descriptor read/8, error -71 [ 884.925520][ T9633] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 884.949534][ T9633] usb 6-1: device descriptor read/8, error -71 [ 885.220606][ T9633] usb usb6-port1: unable to enumerate USB device [ 887.324770][T13961] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 887.324788][T13961] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 888.658946][T13978] netlink: 'syz.5.2129': attribute type 1 has an invalid length. [ 889.572090][T13980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 889.572993][T13980] bond4: (slave bond5): making interface the new active one [ 889.573197][T13980] bond4: (slave bond5): Enslaving as an active interface with an up link [ 889.644313][T13987] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 889.666515][T13980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2129'. [ 889.791001][ T31] audit: type=1400 audit(1792129202.808:1465): avc: denied { read } for pid=9440 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 889.791212][ T31] audit: type=1400 audit(1792129202.808:1466): avc: denied { open } for pid=9440 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 889.791411][ T31] audit: type=1400 audit(1792129202.808:1467): avc: denied { ioctl } for pid=9440 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 889.904219][ T31] audit: type=1400 audit(1792129202.918:1468): avc: denied { prog_load } for pid=13984 comm="syz.4.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 889.904247][ T31] audit: type=1400 audit(1792129202.918:1469): avc: denied { bpf } for pid=13984 comm="syz.4.2130" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 890.050750][ T31] audit: type=1400 audit(1792129203.068:1470): avc: denied { read write } for pid=13995 comm="syz.5.2133" name="radio1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 890.050780][ T31] audit: type=1400 audit(1792129203.068:1471): avc: denied { open } for pid=13995 comm="syz.5.2133" path="/dev/radio1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 890.107674][ T31] audit: type=1400 audit(1792129203.128:1472): avc: denied { read } for pid=13995 comm="syz.5.2133" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 890.109712][ T31] audit: type=1400 audit(1792129203.128:1473): avc: denied { open } for pid=13995 comm="syz.5.2133" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 890.178133][ T31] audit: type=1400 audit(1792129203.198:1474): avc: denied { ioctl } for pid=13995 comm="syz.5.2133" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 890.260256][T13991] 8021q: adding VLAN 0 to HW filter on device bond14 [ 890.296591][T13991] bond13: (slave bond14): making interface the new active one [ 890.296799][T13991] bond13: (slave bond14): Enslaving as an active interface with an up link [ 890.302847][T13997] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 890.529103][T14007] random: crng reseeded on system resumption [ 891.190721][T14019] netlink: 'syz.4.2138': attribute type 1 has an invalid length. [ 891.320250][T14015] jffs2: notice: (14015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 891.446616][T14022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2138'. [ 891.453680][T14021] 8021q: adding VLAN 0 to HW filter on device bond16 [ 891.482476][T14021] bond15: (slave bond16): making interface the new active one [ 891.482668][T14021] bond15: (slave bond16): Enslaving as an active interface with an up link [ 894.634254][T14057] netlink: 'syz.6.2147': attribute type 1 has an invalid length. [ 894.812097][ T31] kauditd_printk_skb: 64 callbacks suppressed [ 894.812110][ T31] audit: type=1400 audit(1792129207.828:1539): avc: denied { mount } for pid=14053 comm="syz.0.2146" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 894.812138][ T31] audit: type=1400 audit(1792129207.828:1540): avc: denied { search } for pid=14053 comm="syz.0.2146" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 894.812161][ T31] audit: type=1400 audit(1792129207.828:1541): avc: denied { search } for pid=14053 comm="syz.0.2146" name="events" dev="tracefs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 894.812184][ T31] audit: type=1400 audit(1792129207.828:1542): avc: denied { search } for pid=14053 comm="syz.0.2146" name="sched" dev="tracefs" ino=23362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 894.812206][ T31] audit: type=1400 audit(1792129207.828:1543): avc: denied { write } for pid=14053 comm="syz.0.2146" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 894.812229][ T31] audit: type=1400 audit(1792129207.828:1544): avc: denied { open } for pid=14053 comm="syz.0.2146" path="/430/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 895.061278][ T31] audit: type=1400 audit(1792129208.078:1545): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 895.172577][T14061] 8021q: adding VLAN 0 to HW filter on device bond10 [ 895.186467][T14069] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 895.189429][ T31] audit: type=1400 audit(1792129208.208:1546): avc: denied { mount } for pid=14064 comm="syz.5.2150" name="/" dev="autofs" ino=45530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 895.190808][T14061] bond9: (slave bond10): making interface the new active one [ 895.191070][T14061] bond9: (slave bond10): Enslaving as an active interface with an up link [ 895.370479][T14069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2151'. [ 895.411395][T14071] 8021q: adding VLAN 0 to HW filter on device bond8 [ 895.434162][T14071] bond7: (slave bond8): making interface the new active one [ 895.434368][T14071] bond7: (slave bond8): Enslaving as an active interface with an up link [ 896.123013][ T31] audit: type=1400 audit(1792129209.138:1547): avc: denied { unmount } for pid=9440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 896.239353][ T31] audit: type=1400 audit(1792129209.258:1548): avc: denied { mmap_zero } for pid=14080 comm="syz.0.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 896.368616][T14083] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 897.465807][ T9629] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 897.597263][T14104] binder: BINDER_SET_CONTEXT_MGR already set [ 897.597272][T14104] binder: 14096:14104 ioctl 4018620d 200000000b00 returned -16 [ 897.621785][ T9629] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 897.622657][ T9629] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 897.622682][ T9629] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 169, setting to 64 [ 897.622698][ T9629] usb 6-1: config 0 interface 0 has no altsetting 0 [ 897.624199][ T9629] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 897.624214][ T9629] usb 6-1: Product: syz [ 897.624222][ T9629] usb 6-1: Manufacturer: syz [ 897.624230][ T9629] usb 6-1: SerialNumber: syz [ 897.677678][ T9629] usb 6-1: config 0 descriptor?? [ 897.678472][T14090] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 897.717909][ T9629] usb 6-1: selecting invalid altsetting 0 [ 898.112784][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.113078][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.113266][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.114492][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.158358][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.158541][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.158702][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.158882][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.161145][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.162439][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.162621][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.162780][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.237107][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.237289][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.237449][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.237607][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.237776][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.237934][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.242245][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.242417][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.315896][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.316078][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.316240][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.316399][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.316566][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.316726][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.377934][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.378112][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.401992][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.402167][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.402328][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.402490][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.402657][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.402816][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.404054][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.404223][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.404384][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.516945][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.517119][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.517279][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.517451][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.517617][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.517777][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.517943][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.518103][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.518262][T14090] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 898.628095][ T9629] usb 6-1: USB disconnect, device number 23 [ 898.738284][T14111] udevd[14111]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.057204][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 900.057218][ T31] audit: type=1400 audit(1792129213.078:1565): avc: denied { create } for pid=14110 comm="syz.6.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 900.058098][ T31] audit: type=1400 audit(1792129213.078:1566): avc: denied { listen } for pid=14110 comm="syz.6.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 900.120303][ T31] audit: type=1400 audit(1792129213.138:1567): avc: denied { create } for pid=14118 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 900.122015][ T31] audit: type=1400 audit(1792129213.138:1568): avc: denied { accept } for pid=14110 comm="syz.6.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 900.393387][ T31] audit: type=1400 audit(1792129213.408:1569): avc: denied { mount } for pid=14118 comm="syz.0.2157" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 901.373967][ T9629] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 901.484448][T14131] netlink: 'syz.4.2165': attribute type 1 has an invalid length. [ 901.535559][ T9629] usb 6-1: Using ep0 maxpacket: 16 [ 901.535958][ T9629] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 901.538565][ T9629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.538579][ T9629] usb 6-1: Product: syz [ 901.538587][ T9629] usb 6-1: Manufacturer: syz [ 901.538596][ T9629] usb 6-1: SerialNumber: syz [ 901.541191][ T9629] usb 6-1: config 0 descriptor?? [ 901.596719][ T9629] gspca_main: spca508-2.14.0 probing 041e:4018 [ 901.656161][T14131] 8021q: adding VLAN 0 to HW filter on device bond18 [ 901.659885][T14131] bond17: (slave bond18): making interface the new active one [ 901.661907][T14131] bond17: (slave bond18): Enslaving as an active interface with an up link [ 901.695750][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2165'. [ 902.289843][ T31] audit: type=1400 audit(1792129215.308:1570): avc: denied { execute } for pid=14122 comm="syz.5.2161" path="/219/bus" dev="tmpfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 902.319167][ T9629] gspca_spca508: reg_read err -110 [ 902.319445][ T9629] gspca_spca508: reg_read err -32 [ 902.321487][ T9629] gspca_spca508: reg_read err -32 [ 902.321861][ T9629] gspca_spca508: reg_read err -32 [ 902.322093][ T9629] gspca_spca508: reg write: error -32 [ 902.322144][ T9629] spca508 6-1:0.0: probe with driver spca508 failed with error -32 [ 902.487518][ T31] audit: type=1400 audit(1792129215.498:1571): avc: denied { mount } for pid=14137 comm="syz.4.2167" name="/" dev="rpc_pipefs" ino=45877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 902.631149][ T9629] usb 6-1: USB disconnect, device number 24 [ 902.775910][ T31] audit: type=1400 audit(1792129215.798:1572): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 902.914056][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2169'. [ 902.931335][ T31] audit: type=1400 audit(1792129215.948:1573): avc: denied { create } for pid=14142 comm="syz.6.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 902.969645][ T31] audit: type=1400 audit(1792129215.988:1574): avc: denied { ioctl } for pid=14143 comm="syz.4.2168" path="socket:[45918]" dev="sockfs" ino=45918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 908.340176][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 908.340190][ T31] audit: type=1400 audit(1792129221.358:1585): avc: denied { setopt } for pid=14168 comm="syz.3.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 908.340217][ T31] audit: type=1400 audit(1792129221.358:1586): avc: denied { write } for pid=14168 comm="syz.3.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 909.735775][ T31] audit: type=1400 audit(1792129222.558:1587): avc: denied { write } for pid=14178 comm="syz.6.2179" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 910.888063][ T31] audit: type=1400 audit(1792129223.908:1588): avc: denied { create } for pid=14186 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 911.061032][ T31] audit: type=1400 audit(1792129224.078:1589): avc: denied { name_bind } for pid=14176 comm="syz.3.2178" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 911.103690][ T31] audit: type=1400 audit(1792129224.118:1590): avc: denied { connect } for pid=14186 comm="syz.0.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 911.127294][ T31] audit: type=1400 audit(1792129224.148:1591): avc: denied { ioctl } for pid=14186 comm="syz.0.2181" path="socket:[46034]" dev="sockfs" ino=46034 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 911.859400][ T31] audit: type=1400 audit(1792129224.878:1592): avc: denied { append } for pid=14189 comm="syz.0.2182" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 912.247008][ T31] audit: type=1400 audit(1792129225.268:1593): avc: denied { create } for pid=14198 comm="syz.4.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 912.252750][ T31] audit: type=1400 audit(1792129225.268:1594): avc: denied { bind } for pid=14198 comm="syz.4.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 913.345465][T14202] bridge0: port 1(syz_tun) entered blocking state [ 913.345549][T14202] bridge0: port 1(syz_tun) entered disabled state [ 913.345650][T14202] syz_tun: entered allmulticast mode [ 913.346536][T14202] syz_tun: entered promiscuous mode [ 913.377721][ T9629] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 913.406229][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 913.406239][ T31] audit: type=1400 audit(1792129226.428:1597): avc: denied { write } for pid=14198 comm="syz.4.2175" path="socket:[46089]" dev="sockfs" ino=46089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 913.409639][ T31] audit: type=1400 audit(1792129226.428:1598): avc: denied { mount } for pid=14198 comm="syz.4.2175" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 913.504666][ T31] audit: type=1400 audit(1792129226.518:1599): avc: denied { sys_module } for pid=14200 comm="syz.3.2184" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 913.569484][ T9629] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 913.573308][ T9629] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.573329][ T9629] usb 1-1: config 0 has no interfaces? [ 913.573346][ T9629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.576137][ T9629] usb 1-1: config 0 descriptor?? [ 915.015491][ T31] audit: type=1400 audit(1792129228.028:1600): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 915.883684][ T5694] usb 1-1: USB disconnect, device number 28 [ 915.960169][ T31] audit: type=1400 audit(1792129228.978:1601): avc: denied { read write } for pid=14225 comm="syz.4.2187" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 915.960199][ T31] audit: type=1400 audit(1792129228.978:1602): avc: denied { open } for pid=14225 comm="syz.4.2187" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 918.262757][ T31] audit: type=1400 audit(1792129231.278:1603): avc: denied { connect } for pid=14234 comm="syz.5.2191" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 918.263315][ T31] audit: type=1400 audit(1792129231.278:1604): avc: denied { bind } for pid=14234 comm="syz.5.2191" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 918.263341][ T31] audit: type=1400 audit(1792129231.278:1605): avc: denied { name_bind } for pid=14234 comm="syz.5.2191" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 918.263378][ T31] audit: type=1400 audit(1792129231.278:1606): avc: denied { node_bind } for pid=14234 comm="syz.5.2191" saddr=fc02::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 918.428722][T14239] netlink: 'syz.3.2192': attribute type 1 has an invalid length. [ 918.483693][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 918.483705][ T31] audit: type=1400 audit(1792129231.498:1608): avc: denied { create } for pid=14241 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 918.586975][ T31] audit: type=1400 audit(1792129231.598:1609): avc: denied { bind } for pid=14241 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 918.587007][ T31] audit: type=1400 audit(1792129231.598:1610): avc: denied { setopt } for pid=14241 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 918.587029][ T31] audit: type=1400 audit(1792129231.598:1611): avc: denied { listen } for pid=14241 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 918.589160][ T31] audit: type=1400 audit(1792129231.608:1612): avc: denied { connect } for pid=14241 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 918.617757][ T31] audit: type=1400 audit(1792129231.608:1613): avc: denied { accept } for pid=14241 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 918.760459][T14247] jffs2: notice: (14247) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 918.791943][ T31] audit: type=1400 audit(1792129231.808:1614): avc: denied { write } for pid=14241 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 918.837850][ T31] audit: type=1400 audit(1792129231.848:1615): avc: denied { write } for pid=14246 comm="syz.5.2194" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 918.843294][ T31] audit: type=1400 audit(1792129231.868:1616): avc: denied { read } for pid=14241 comm="syz.0.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 918.844415][T14243] 8021q: adding VLAN 0 to HW filter on device bond12 [ 918.904738][ T31] audit: type=1400 audit(1792129231.928:1617): avc: denied { create } for pid=14246 comm="syz.5.2194" name="mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 918.946447][ T5694] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 919.008249][T14243] bond11: (slave bond12): making interface the new active one [ 919.008960][T14243] bond11: (slave bond12): Enslaving as an active interface with an up link [ 920.760292][T14267] netlink: 'syz.4.2199': attribute type 2 has an invalid length. [ 920.806781][T14267] : entered promiscuous mode [ 922.274259][T14279] vlan1: left promiscuous mode [ 922.274386][T14279] vlan1: entered allmulticast mode [ 922.274395][T14279] veth0_vlan: entered allmulticast mode [ 923.371290][T14279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2203'. [ 923.411287][T14278] block nbd5: NBD_DISCONNECT [ 923.491690][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 923.491701][ T31] audit: type=1400 audit(1792129236.508:1625): avc: denied { read } for pid=14283 comm="syz.6.2204" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 923.491727][ T31] audit: type=1400 audit(1792129236.508:1626): avc: denied { open } for pid=14283 comm="syz.6.2204" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 924.472081][ T31] audit: type=1400 audit(1792129237.488:1627): avc: denied { ioctl } for pid=14283 comm="syz.6.2204" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 926.121628][T14292] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 926.121652][T14292] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 926.121675][T14292] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 926.127814][T14292] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 926.151227][ T31] audit: type=1400 audit(1792129239.138:1628): avc: denied { create } for pid=14289 comm="syz.6.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 926.151257][ T31] audit: type=1400 audit(1792129239.138:1629): avc: denied { write } for pid=14289 comm="syz.6.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 927.308591][T14299] binder: 14298:14299 unknown command 0 [ 927.308604][T14299] binder: 14298:14299 ioctl c0306201 200000000c00 returned -22 [ 927.401504][ T31] audit: type=1400 audit(1792129240.418:1630): avc: denied { ioctl } for pid=14296 comm="syz.5.2207" path="socket:[46431]" dev="sockfs" ino=46431 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 927.549289][T14303] netlink: 'syz.4.2211': attribute type 2 has an invalid length. [ 930.206111][ T31] audit: type=1400 audit(1792129243.228:1631): avc: denied { remount } for pid=14315 comm="syz.4.2215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 930.262549][T14316] batman_adv: batadv0: Adding interface: dummy0 [ 930.262560][T14316] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.262574][T14316] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 930.391121][ T31] audit: type=1400 audit(1792129243.408:1632): avc: denied { getopt } for pid=14315 comm="syz.4.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 931.083746][T14320] binder: 14319:14320 unknown command 0 [ 931.083760][T14320] binder: 14319:14320 ioctl c0306201 200000000c00 returned -22 [ 931.160745][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.160777][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.282563][ T31] audit: type=1400 audit(1792129244.298:1633): avc: denied { ioctl } for pid=14322 comm="syz.0.2210" path="socket:[46507]" dev="sockfs" ino=46507 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 931.344193][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 932.116544][ T31] audit: type=1400 audit(1792129245.138:1634): avc: denied { read } for pid=14324 comm="syz.5.2217" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 932.230475][T14323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.234728][T14323] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.473729][T14331] syz.4.2218(14331): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 932.643521][T14333] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 932.750351][T14323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 932.801025][T14323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 932.814137][T14323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 932.825825][T14323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 932.927181][T14323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 932.927693][T14323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 932.963737][T14323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 932.998623][T14323] 8021q: adding VLAN 0 to HW filter on device bond4 [ 933.030036][T14323] 8021q: adding VLAN 0 to HW filter on device bond5 [ 933.061167][T14323] 8021q: adding VLAN 0 to HW filter on device bond7 [ 933.082779][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2218'. [ 933.100293][ T31] audit: type=1400 audit(1792129246.118:1635): avc: denied { ioctl } for pid=14329 comm="syz.4.2218" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 934.767472][T14346] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:2051 [ 934.768451][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2221'. [ 934.836925][ T9093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.836944][ T9093] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 934.836958][ T9093] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 56108 - 0 [ 934.836982][ T9093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.836996][ T9093] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 934.837010][ T9093] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 56108 - 0 [ 934.837029][ T9093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.837043][ T9093] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 934.837057][ T9093] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 56108 - 0 [ 934.837075][ T9093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.837090][ T9093] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 934.837104][ T9093] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 56108 - 0 [ 935.323372][T14349] random: crng reseeded on system resumption [ 935.772896][ T31] audit: type=1400 audit(1792129248.788:1636): avc: denied { write } for pid=14351 comm="syz.6.2216" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 935.772929][ T31] audit: type=1400 audit(1792129248.788:1637): avc: denied { open } for pid=14351 comm="syz.6.2216" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 938.029482][T14364] binder: 14362:14364 unknown command 0 [ 938.029496][T14364] binder: 14362:14364 ioctl c0306201 200000000c00 returned -22 [ 945.055471][ T31] audit: type=1400 audit(1792129257.298:1638): avc: denied { write } for pid=14388 comm="syz.5.2233" name="route" dev="proc" ino=4026533983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 945.055509][ T31] audit: type=1400 audit(1792129257.298:1639): avc: denied { execute_no_trans } for pid=14388 comm="syz.5.2233" path="/234/file0" dev="tmpfs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 945.431044][ T31] audit: type=1400 audit(1792129258.448:1640): avc: denied { write } for pid=14393 comm="syz.0.2234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 946.672207][T14398] netlink: zone id is out of range [ 946.672217][T14398] netlink: zone id is out of range [ 946.672221][T14398] netlink: zone id is out of range [ 946.672225][T14398] netlink: zone id is out of range [ 946.672229][T14398] netlink: zone id is out of range [ 946.672233][T14398] netlink: zone id is out of range [ 946.672255][T14398] netlink: zone id is out of range [ 946.672259][T14398] netlink: zone id is out of range [ 946.672263][T14398] netlink: zone id is out of range [ 946.672267][T14398] netlink: zone id is out of range [ 946.745561][ T5694] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 946.940538][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short [ 946.940565][ T5694] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 946.942485][ T5694] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 946.942505][ T5694] usb 1-1: can't read configurations, error -71 [ 947.575760][ T31] audit: type=1400 audit(1792129260.598:1641): avc: denied { watch } for pid=14402 comm="syz.5.2237" path="/236/net_prio.prioidx" dev="tmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 947.575792][ T31] audit: type=1400 audit(1792129260.598:1642): avc: denied { watch_sb watch_reads } for pid=14402 comm="syz.5.2237" path="/236/net_prio.prioidx" dev="tmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 948.806548][T14414] binder: 14413:14414 unknown command 0 [ 948.806561][T14414] binder: 14413:14414 ioctl c0306201 200000000c00 returned -22 [ 948.991573][ T31] audit: type=1400 audit(1792129262.008:1643): avc: denied { mount } for pid=14417 comm="syz.3.2230" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 949.566507][ T31] audit: type=1400 audit(1792129262.578:1644): avc: denied { getopt } for pid=14422 comm="syz.5.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 949.702153][T14429] netlink: 'syz.6.2242': attribute type 1 has an invalid length. [ 950.906745][T14433] 8021q: adding VLAN 0 to HW filter on device bond12 [ 950.976429][T14433] bond11: (slave bond12): making interface the new active one [ 950.976634][T14433] bond11: (slave bond12): Enslaving as an active interface with an up link [ 950.977286][T14429] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2242'. [ 951.282556][ T31] audit: type=1400 audit(1792129264.298:1645): avc: denied { append } for pid=14437 comm="syz.5.2244" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 952.260778][ T31] audit: type=1400 audit(1792129265.278:1646): avc: denied { name_bind } for pid=14437 comm="syz.5.2244" src=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 953.482750][ T31] audit: type=1400 audit(1792129266.478:1647): avc: denied { write } for pid=14446 comm="syz.6.2247" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 953.816015][T14459] Invalid option length (1048314) for dns_resolver key [ 953.835748][T14459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2239'. [ 955.148737][ T31] audit: type=1400 audit(1792129268.168:1648): avc: denied { setopt } for pid=14465 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 955.149081][T14467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14467 comm=syz.0.2250 [ 955.192292][ T31] audit: type=1400 audit(1792129268.218:1649): avc: denied { bind } for pid=14465 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 955.192566][ T31] audit: type=1400 audit(1792129268.218:1650): avc: denied { map } for pid=14465 comm="syz.6.2251" path="socket:[47113]" dev="sockfs" ino=47113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 955.192712][ T31] audit: type=1400 audit(1792129268.218:1651): avc: denied { read write } for pid=14465 comm="syz.6.2251" path="socket:[47113]" dev="sockfs" ino=47113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 955.795955][T13368] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 955.871143][T14474] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 956.253973][ T31] audit: type=1400 audit(1792129269.268:1652): avc: denied { write } for pid=14482 comm="syz.5.2255" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 956.304240][T14483] binder: 14482:14483 ioctl c0306201 0 returned -14 [ 957.069777][T14483] binder: 14482:14483 ioctl c018620c 200000000240 returned -1 [ 957.208968][T14490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 957.230968][T14492] batman_adv: batadv0: Adding interface: veth0 [ 957.230977][T14492] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.230994][T14492] batman_adv: batadv0: Interface activated: veth0 [ 957.306156][T14486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.306170][T14486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.310223][T14486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.310235][T14486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.358942][T14486] batman_adv: batadv0: Interface deactivated: veth0 [ 957.358954][T14486] batman_adv: batadv0: Removing interface: veth0 [ 958.695279][T14494] net_ratelimit: 148 callbacks suppressed [ 958.695294][T14494] netlink: zone id is out of range [ 958.695298][T14494] netlink: zone id is out of range [ 958.695302][T14494] netlink: zone id is out of range [ 958.695306][T14494] netlink: zone id is out of range [ 958.695310][T14494] netlink: zone id is out of range [ 958.695314][T14494] netlink: zone id is out of range [ 958.695320][T14494] netlink: zone id is out of range [ 958.695324][T14494] netlink: zone id is out of range [ 958.695327][T14494] netlink: zone id is out of range [ 958.695331][T14494] netlink: zone id is out of range [ 961.296442][T14503] binder: 14499:14503 unknown command 0 [ 961.296456][T14503] binder: 14499:14503 ioctl c0306201 200000000c00 returned -22 [ 961.538049][T14507] random: crng reseeded on system resumption [ 967.560093][ T31] audit: type=1400 audit(1792129280.158:1653): avc: denied { shutdown } for pid=14515 comm="syz.6.2266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 968.100215][ C0] sched: DL replenish lagged too much [ 998.709611][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.716836][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.138249][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1058.145514][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1067.104842][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1067.111796][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P38/1:b..l [ 1067.119497][ C0] rcu: (detected by 0, t=10502 jiffies, g=153089, q=903723 ncpus=1) [ 1067.127525][ C0] task:khugepaged state:R running task stack:27640 pid:38 tgid:38 ppid:2 task_flags:0x200040 flags:0x00080000 [ 1067.140970][ C0] Call Trace: [ 1067.144218][ C0] [ 1067.147122][ C0] __schedule+0x1259/0x6920 [ 1067.151609][ C0] ? __pfx___schedule+0x10/0x10 [ 1067.156447][ C0] ? mark_held_locks+0x40/0x70 [ 1067.161187][ C0] preempt_schedule_irq+0x4e/0x90 [ 1067.166183][ C0] irqentry_exit+0x205/0xa10 [ 1067.170746][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1067.176694][ C0] RIP: 0010:copy_mc_enhanced_fast_string+0x6/0xf [ 1067.182992][ C0] Code: 89 ca e9 1d fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 f8 48 89 d1 a4 31 c0 e9 11 b4 04 00 48 89 c8 e9 09 b4 04 00 66 0f 1f 84 00 [ 1067.202570][ C0] RSP: 0018:ffffc90000ae77f8 EFLAGS: 00010246 [ 1067.208605][ C0] RAX: ffff888096206000 RBX: 0000000000001000 RCX: 0000000000000fc0 [ 1067.216890][ C0] RDX: 0000000000001000 RSI: ffff888067ae0040 RDI: ffff888096206040 [ 1067.224829][ C0] RBP: ffff888096206000 R08: 0000000000000000 R09: ffffed100cf5c1ff [ 1067.232766][ C0] R10: ffff888067ae0fff R11: 0000000000000000 R12: ffff888067ae0000 [ 1067.240705][ C0] R13: 0000000000000006 R14: 0000000067ae0867 R15: 0000000000000001 [ 1067.248650][ C0] copy_mc_to_kernel+0x47/0xc0 [ 1067.253386][ C0] collapse_huge_page+0x1a2e/0x39f0 [ 1067.258561][ C0] ? irqentry_exit+0x24d/0xa10 [ 1067.263296][ C0] ? __pfx_collapse_huge_page+0x10/0x10 [ 1067.268808][ C0] ? irqentry_exit+0x24d/0xa10 [ 1067.273549][ C0] ? __up_read+0x333/0x980 [ 1067.277936][ C0] ? collapse_single_pmd+0x2daf/0x41b0 [ 1067.283361][ C0] ? collapse_single_pmd+0x2daf/0x41b0 [ 1067.288788][ C0] ? __bitmap_weight+0xd7/0x110 [ 1067.293613][ C0] collapse_single_pmd+0x300d/0x41b0 [ 1067.298874][ C0] ? __pfx_collapse_single_pmd+0x10/0x10 [ 1067.304479][ C0] ? __pfx___might_resched+0x10/0x10 [ 1067.309735][ C0] khugepaged+0x10e6/0x14e0 [ 1067.314470][ C0] ? __pfx_khugepaged+0x10/0x10 [ 1067.319291][ C0] ? lock_acquire+0x1d1/0x380 [ 1067.323940][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1067.329976][ C0] ? find_held_lock+0x2b/0x80 [ 1067.334631][ C0] ? __kthread_parkme+0xbb/0x230 [ 1067.339542][ C0] ? __kthread_parkme+0x18f/0x230 [ 1067.344535][ C0] ? kthread+0x13a/0x450 [ 1067.348749][ C0] ? __pfx_khugepaged+0x10/0x10 [ 1067.353566][ C0] kthread+0x373/0x450 [ 1067.357604][ C0] ? __pfx_kthread+0x10/0x10 [ 1067.362166][ C0] ret_from_fork+0x730/0xd60 [ 1067.366724][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1067.371804][ C0] ? __switch_to+0x800/0x10f0 [ 1067.376452][ C0] ? __pfx_kthread+0x10/0x10 [ 1067.381013][ C0] ret_from_fork_asm+0x1a/0x30 [ 1067.385752][ C0] [ 1067.388754][ C0] rcu: rcu_preempt kthread starved for 280 jiffies! g153089 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1067.399649][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1067.409580][ C0] rcu: RCU grace-period kthread stack dump: [ 1067.415432][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1067.428871][ C0] Call Trace: [ 1067.432119][ C0] [ 1067.435021][ C0] __schedule+0x1259/0x6920 [ 1067.439493][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1067.444405][ C0] ? lock_acquire+0x1d1/0x380 [ 1067.449050][ C0] ? __pfx___schedule+0x10/0x10 [ 1067.453868][ C0] ? find_held_lock+0x2b/0x80 [ 1067.458518][ C0] ? schedule+0x225/0x2c0 [ 1067.462819][ C0] schedule+0xdd/0x2c0 [ 1067.466858][ C0] schedule_timeout+0x127/0x280 [ 1067.471677][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1067.477019][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1067.482274][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1067.488049][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1067.493478][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 1067.498211][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1067.503468][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1067.508376][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1067.513539][ C0] ? rcu_is_watching+0x13/0xc0 [ 1067.518275][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1067.524052][ C0] rcu_gp_kthread+0x17a/0x220 [ 1067.528699][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1067.533864][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1067.539640][ C0] ? __kthread_parkme+0x18f/0x230 [ 1067.544642][ C0] ? kthread+0x13a/0x450 [ 1067.548854][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1067.554018][ C0] kthread+0x373/0x450 [ 1067.558059][ C0] ? __pfx_kthread+0x10/0x10 [ 1067.562629][ C0] ret_from_fork+0x730/0xd60 [ 1067.567198][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1067.572293][ C0] ? __switch_to+0x800/0x10f0 [ 1067.576942][ C0] ? __pfx_kthread+0x10/0x10 [ 1067.581507][ C0] ret_from_fork_asm+0x1a/0x30 [ 1067.586253][ C0] [ 1067.589242][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1067.595544][ C0] CPU: 0 UID: 0 PID: 9083 Comm: kworker/u8:20 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1067.606618][ C0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1067.612729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1067.622762][ C0] Workqueue: bat_events batadv_tt_purge [ 1067.628280][ C0] RIP: 0010:unwind_next_frame+0x21/0x2090 [ 1067.633974][ C0] Code: 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 48 89 fa 41 56 48 c1 ea 03 41 55 49 89 fd 41 54 55 <53> 48 83 ec 38 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 42 0b 00 00 41 [ 1067.653551][ C0] RSP: 0018:ffffc90000007030 EFLAGS: 00000a06 [ 1067.659585][ C0] RAX: dffffc0000000000 RBX: ffffc90000007060 RCX: ffffc90000006fb4 [ 1067.667523][ C0] RDX: 1ffff92000000e0c RSI: ffffffff89a3025f RDI: ffffc90000007060 [ 1067.675461][ C0] RBP: ffffc900000070f0 R08: 0000000000000001 R09: 0000000000000007 [ 1067.683400][ C0] R10: 0000000000000200 R11: 000000000008a2d4 R12: ffffffff81f620c0 [ 1067.691338][ C0] R13: ffffc90000007060 R14: 0000000000000000 R15: ffff888054cfcb00 [ 1067.699275][ C0] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 1067.708171][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1067.714725][ C0] CR2: 000055556a022a48 CR3: 000000000fb96000 CR4: 00000000003526f0 [ 1067.722673][ C0] Call Trace: [ 1067.725920][ C0] [ 1067.728734][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1067.734865][ C0] arch_stack_walk+0x94/0xf0 [ 1067.739429][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 1067.744953][ C0] stack_trace_save+0x8e/0xc0 [ 1067.749596][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1067.754935][ C0] ? stack_trace_save+0x8e/0xc0 [ 1067.759753][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1067.765091][ C0] ? stack_depot_save_flags+0x27/0x9f0 [ 1067.770518][ C0] kasan_save_stack+0x30/0x50 [ 1067.775175][ C0] ? kasan_save_stack+0x30/0x50 [ 1067.779993][ C0] ? kasan_save_track+0x14/0x30 [ 1067.784811][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1067.789804][ C0] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 1067.795839][ C0] ? kmalloc_reserve+0x148/0x350 [ 1067.800745][ C0] ? __alloc_skb+0x185/0x710 [ 1067.805300][ C0] ? synproxy_send_client_synack+0x19e/0x970 [ 1067.811246][ C0] ? nft_synproxy_do_eval+0xa6a/0xd30 [ 1067.816589][ C0] ? nft_do_chain+0x2e5/0x19d0 [ 1067.821322][ C0] ? nft_do_chain_inet+0xf3/0x400 [ 1067.826314][ C0] ? nf_hook_slow+0xbf/0x220 [ 1067.830875][ C0] ? nf_hook.constprop.0+0x2a6/0x750 [ 1067.836126][ C0] ? ip_local_deliver+0x163/0x1f0 [ 1067.841115][ C0] ? ip_rcv+0x33a/0x3c0 [ 1067.845237][ C0] ? __netif_receive_skb_one_core+0x197/0x1e0 [ 1067.851274][ C0] ? __netif_receive_skb+0x1f/0x120 [ 1067.856442][ C0] ? process_backlog+0x487/0x1600 [ 1067.861437][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 1067.866973][ C0] kasan_save_track+0x14/0x30 [ 1067.871626][ C0] __kasan_slab_alloc+0x89/0x90 [ 1067.876449][ C0] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 1067.882312][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1067.887743][ C0] ? kmalloc_reserve+0x148/0x350 [ 1067.892664][ C0] kmalloc_reserve+0x148/0x350 [ 1067.897402][ C0] __alloc_skb+0x185/0x710 [ 1067.901784][ C0] ? __alloc_skb+0x5b7/0x710 [ 1067.906338][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1067.911245][ C0] ? lock_acquire+0x1d1/0x380 [ 1067.915890][ C0] ? ip_vs_conn_in_get+0x78/0x270 [ 1067.920885][ C0] ? find_held_lock+0x2b/0x80 [ 1067.925537][ C0] synproxy_send_client_synack+0x19e/0x970 [ 1067.931314][ C0] ? find_held_lock+0x2b/0x80 [ 1067.935963][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1067.942260][ C0] ? net_generic+0xea/0x2a0 [ 1067.946735][ C0] nft_synproxy_do_eval+0xa6a/0xd30 [ 1067.951903][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1067.957590][ C0] ? ip_vs_conn_in_get+0x85/0x270 [ 1067.962590][ C0] ? ip_vs_service_find+0x154/0x390 [ 1067.967760][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 1067.973190][ C0] nft_do_chain+0x2e5/0x19d0 [ 1067.977754][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1067.982746][ C0] ? mark_held_locks+0x40/0x70 [ 1067.987483][ C0] ? ip_vs_in_hook+0x9fe/0x2840 [ 1067.992300][ C0] ? ip_vs_in_hook+0xa7b/0x2840 [ 1067.997140][ C0] nft_do_chain_inet+0xf3/0x400 [ 1068.001961][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1068.007394][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 1068.012739][ C0] nf_hook_slow+0xbf/0x220 [ 1068.017129][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 1068.022207][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1068.028155][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1068.033751][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1068.038829][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1068.044774][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 1068.050029][ C0] ip_local_deliver+0x163/0x1f0 [ 1068.054847][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1068.060187][ C0] ip_rcv+0x33a/0x3c0 [ 1068.064148][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1068.068615][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 1068.074489][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1068.080885][ C0] ? lock_acquire+0x1d1/0x380 [ 1068.085535][ C0] ? process_backlog+0x437/0x1600 [ 1068.090532][ C0] ? process_backlog+0x437/0x1600 [ 1068.095525][ C0] __netif_receive_skb+0x1f/0x120 [ 1068.100521][ C0] process_backlog+0x487/0x1600 [ 1068.105347][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1068.110692][ C0] net_rx_action+0xa40/0xf20 [ 1068.115257][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1068.120341][ C0] ? mark_held_locks+0x40/0x70 [ 1068.125074][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1068.130243][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1068.135503][ C0] ? run_timer_base+0x121/0x190 [ 1068.140321][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1068.145489][ C0] handle_softirqs+0x1e6/0x9d0 [ 1068.150221][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1068.155474][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1068.160727][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1068.166327][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 1068.171754][ C0] do_softirq+0xaf/0xf0 [ 1068.175878][ C0] [ 1068.178779][ C0] [ 1068.181679][ C0] __local_bh_enable_ip+0xff/0x120 [ 1068.186758][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 1068.192017][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 1068.197795][ C0] batadv_tt_purge+0x8b/0xbd0 [ 1068.202446][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1068.207700][ C0] ? lock_acquire+0x1d1/0x380 [ 1068.212358][ C0] ? process_one_work+0xa2c/0x1b10 [ 1068.217448][ C0] ? process_one_work+0x906/0x1b10 [ 1068.222534][ C0] ? process_one_work+0x906/0x1b10 [ 1068.227619][ C0] process_one_work+0xac7/0x1b10 [ 1068.232534][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1068.237877][ C0] ? lock_acquire+0x1d1/0x380 [ 1068.242528][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1068.247781][ C0] worker_thread+0x5ef/0xe50 [ 1068.252347][ C0] ? kthread+0x13a/0x450 [ 1068.256560][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1068.261636][ C0] kthread+0x373/0x450 [ 1068.265676][ C0] ? __pfx_kthread+0x10/0x10 [ 1068.270241][ C0] ret_from_fork+0x730/0xd60 [ 1068.274800][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1068.279877][ C0] ? rcu_is_watching+0x13/0xc0 [ 1068.284612][ C0] ? __switch_to+0x800/0x10f0 [ 1068.289275][ C0] ? __pfx_kthread+0x10/0x10 [ 1068.293840][ C0] ret_from_fork_asm+0x1a/0x30 [ 1068.298579][ C0]