last executing test programs: 17.212220019s ago: executing program 1 (id=2056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x200, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffffc, 0x2) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='eth\aool\x00', 0x102, &(0x7f0000000140)={@align=0xb, {0x8, 0x3, 0x8, 0x7fb}}, 0x5, &(0x7f00000002c0), &(0x7f0000000200)=0x206}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247}) socket(0x25, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af24, &(0x7f0000000000)={0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 13.093584179s ago: executing program 1 (id=2063): syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) mq_open(&(0x7f0000000680)='\x84\a\xf1\x14\xf5O\xe9vp\x142\xfcB\xc4\x0fH\xcaT\x1a\xf6\x82$\xf7\x9d\xe9~\xfb\x1a\xcb \x89\xff\x12\xa1F\xdeS\xc9\x18\x13\xda\x0f\xee\x05QK\xd1\x03p\xed\xbe\xfdY3rJ\x02\x9a\nlb\xd3\xd0/\xf9\xbd\x86\r\xccg\x16\x8fH\xa6\x8f\n+^\x87\x00\xcbXuw\xccD\xc6\x1a\xdd_{\xbc\xd0\x85\"\xf9\xc3\x94\fE\xe1C{\xa8\xa2\xe1T\xf8\xeb\xcd\xb4\xb5D\x00\xfa\x00\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) syz_io_uring_setup(0x5b4f, &(0x7f0000000700)={0x0, 0x5323, 0x1, 0x0, 0x2a0}, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000780)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='aufs\x00', 0x9010, &(0x7f0000000300)='eth0\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000616000/0x1000)=nil, 0x1000, 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080200004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d9", 0x69}], 0x1}, 0x40) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbad03656e10d77f85d1028e60ab", 0x1b, 0xfffffffffffffffe) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000900)={{r2}, 0x0, 0x14, @inherit={0x60, &(0x7f0000000080)=ANY=[]}, @name="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"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0x1, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x1, 0x4, 0x9}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 12.928308371s ago: executing program 2 (id=2065): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) write$P9_RSTATu(r6, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) socket$nl_route(0x10, 0x3, 0x0) 10.890552564s ago: executing program 0 (id=2068): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, 0x0, 0xc8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r3, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000140)=0x4) r4 = dup2(r2, r2) read$FUSE(r4, &(0x7f0000003340)={0x2020}, 0x2037) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0x15f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10.656666407s ago: executing program 1 (id=2069): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = dup2(r1, r1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x810) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x3) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f9823"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0x2004c800) recvmmsg(r8, &(0x7f00000002c0)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000200)=""/151, 0x97}], 0x2, &(0x7f00000005c0)=""/4096, 0x1000}, 0xee}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1, &(0x7f00000015c0)=""/229, 0xe5}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10) 10.489626345s ago: executing program 3 (id=2070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x200, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffffc, 0x2) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='eth\aool\x00', 0x102, &(0x7f0000000140)={@align=0xb, {0x8, 0x3, 0x8, 0x7fb}}, 0x5, &(0x7f00000002c0), &(0x7f0000000200)=0x206}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247}) socket(0x25, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af24, &(0x7f0000000000)={0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 9.952378347s ago: executing program 0 (id=2071): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = dup2(r1, r1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x810) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x3) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d3940"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0x2004c800) recvmmsg(r8, &(0x7f00000002c0)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000200)=""/151, 0x97}], 0x2, &(0x7f00000005c0)=""/4096, 0x1000}, 0xee}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1, &(0x7f00000015c0)=""/229, 0xe5}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10) write$dsp(r0, &(0x7f0000000380)="8f02b1145e6308d98e553f07835f9de2b8389279a5becfcec34a3d806185be01242abe00d48cc72f5609a070748b29eb2f75f44e93bda8a5efda9fdb8d81de5cbbff7e635ebc47f0b24291f53d43b66ae3dd06c0069e175964893c027fac58c40a24024b0b942528acd3204bbe5753d7ba65845d9eafd7ea834778c2c99b33f9", 0x80) 9.211637077s ago: executing program 1 (id=2072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff7) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x14}, 0x12, 0x1}}) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000300)={'\be\f\x00', 0x3, 0x5, 0xb7, 0x1, 0x20c, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000007000003000000ff7f00"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x8, 0x53, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 9.002688026s ago: executing program 0 (id=2073): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d001280cf45600ee71d67ff39013408262cfeb1f3106733c096050600ee102b3f22ca6791cfc4a3ad25ae884a292d12ab267e995baf99e346bee0c691ceb5f49beb5f98dd56ac0f373958d73a0000001e0106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x4b) close(r3) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864d2, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8], [0xffffffff, 0x0, 0x9], [0x0, 0xb]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r5, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, r6, 0x1, 0x0, 0x1000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000019080)={0x4c, r8, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) socket$netlink(0x10, 0x3, 0x0) 8.565591717s ago: executing program 2 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r7, &(0x7f0000000000)=@known='system.posix_acl_access\x00') ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x2000000000000003}]}) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, 0x0, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r9 = dup(0xffffffffffffffff) write$UHID_INPUT(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r10, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 8.497075504s ago: executing program 4 (id=2075): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x349041, 0x60) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r2 = syz_clone(0x21800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r2) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x20}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40002, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x15ff21b3, &(0x7f00000043c0)={0x8, 0x4000000, 0x6}) syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0xa904, 0x100, 0x2, 0x10120}, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000480)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x400060}, 0x80, 0x0}}], 0x2, 0x4048055) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 8.437953379s ago: executing program 4 (id=2076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) semget$private(0x0, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 8.370759096s ago: executing program 1 (id=2077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000001280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) 7.577582696s ago: executing program 2 (id=2078): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) ptrace$setregset(0x4205, r2, 0x4, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e", 0x7a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fcntl$setlease(r10, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r11, 0x89e0, &(0x7f0000000040)={0x1}) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, r12, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x94}, 0xc0) writev(r0, &(0x7f0000002180)=[{&(0x7f0000002080)="4bd7310a", 0x4}], 0x1) 7.511333179s ago: executing program 4 (id=2079): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0x10000, 0xffffffffffffffff, 'id1\x00'}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)={0x0, 0xc, 0xd, "3b4bee4573d6653f554ba8e523"}, 0x0, 0x0, 0x0, 0x0, 0x0}) landlock_restrict_self(0xffffffffffffffff, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(&(0x7f0000000000)={0x24, 0x1}, 0x18, 0x2) sendmsg$OSF_MSG_ADD(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="68020000000501040000000000000000030000065402010002000000000200000909f4e015812c"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf8, r11, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4840}, 0x4000000) 7.398023069s ago: executing program 3 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x7a, 0x0, &(0x7f00000002c0)="e3c20325c0df0b7604ea6bec5bcf881458a6e2e3a2eeed666dcac226f810bb94fbaf550ffac1731616882e212d30b326e49b88937932f320c0127789d3915f324d829667f2a45acce10fe4f74d5d312ff69a843551633db642713becaeb8fa64dbc3cb485bc7cad2b6f087c763bc540e67769d555fdb4c9b9297", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x7, 0x16, 0x0, 0x1, [@generic="92276d"]}, @typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 5.994379104s ago: executing program 3 (id=2081): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES64=r0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r5) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000280)={0xffff1325, "a109052995fd9fe47865ac0650737d70959f2da4ff2c68224d4e5945960040ea"}) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r8, 0x0, 0x0, 0x1}}, 0x20) 5.955667479s ago: executing program 2 (id=2082): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0), 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x0, 'ip6_vti0\x00', 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) 4.741923871s ago: executing program 3 (id=2083): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44], 0x30}], 0x1, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x0, 'ip6_vti0\x00', 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) 4.234248883s ago: executing program 1 (id=2084): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0xe, 0x65c100) r0 = socket$kcm(0x10, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x5e1140, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000100)='5\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x84840, 0x0) write$P9_RSTATu(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=r0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r5, 0xffffd000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x34) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.233906488s ago: executing program 4 (id=2085): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000400000000000000e0000002000000000000000000000000fc00000000000000000000000000000000100008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000feffffffffffffff00000000000000000100000000000040ffffffffffffffff000000000000000000000000000000000000000000000800000a122e000000000000000000804000020000000000000800040000000000000000010000000000"], 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') r4 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000006c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004054}, 0x20044000) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) getsockopt(r2, 0x401, 0x7, &(0x7f0000000340)=""/73, &(0x7f0000000480)=0x49) socket$igmp(0x2, 0x3, 0x2) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) 3.395753479s ago: executing program 2 (id=2086): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) chmod(0x0, 0x57eeb83c9526c7ac) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000000)=""/30, 0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 3.290025907s ago: executing program 4 (id=2087): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x349041, 0x60) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r2 = syz_clone(0x21800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r2) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x20}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40002, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x15ff21b3, &(0x7f00000043c0)={0x8, 0x4000000, 0x6}) syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0xa904, 0x100, 0x2, 0x10120}, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000480)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x400060}, 0x80, 0x0}}], 0x2, 0x4048055) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 3.016161371s ago: executing program 3 (id=2088): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = dup2(r1, r1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x810) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x3) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0x2004c800) recvmmsg(r8, &(0x7f00000002c0)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000200)=""/151, 0x97}], 0x2, &(0x7f00000005c0)=""/4096, 0x1000}, 0xee}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1, &(0x7f00000015c0)=""/229, 0xe5}, 0x5}], 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10) write$dsp(r0, &(0x7f0000000380)="8f02b1145e6308d98e553f07835f9de2b8389279a5becfcec34a3d806185be01242abe00d48cc72f5609a070748b29eb2f75f44e93bda8a5efda9fdb8d81de5cbbff7e635ebc47f0b24291f53d43b66ae3dd06c0069e175964893c027fac58c40a24024b0b942528acd3204bbe5753d7ba65845d9eafd7ea834778c2c99b33f9", 0x80) 2.993561173s ago: executing program 0 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) semget$private(0x0, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.419902459s ago: executing program 4 (id=2090): socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xc8, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, {0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x15}}, "5cfb5a1b6b1d8b0c"}}}}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000001100)={0x4000000, 0x4, 0x4}) close(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4109, 0x100d) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x10000000}) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) 972.087144ms ago: executing program 0 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) write$P9_RSTATu(r6, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) socket$nl_route(0x10, 0x3, 0x0) 971.445209ms ago: executing program 3 (id=2092): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x7a, 0x0, &(0x7f00000002c0)="e3c20325c0df0b7604ea6bec5bcf881458a6e2e3a2eeed666dcac226f810bb94fbaf550ffac1731616882e212d30b326e49b88937932f320c0127789d3915f324d829667f2a45acce10fe4f74d5d312ff69a843551633db642713becaeb8fa64dbc3cb485bc7cad2b6f087c763bc540e67769d555fdb4c9b9297", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x7, 0x16, 0x0, 0x1, [@generic="92276d"]}, @typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 179.583388ms ago: executing program 2 (id=2093): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xbd9281b0608df352, &(0x7f0000000040)=0x3, 0xfffffffffffffffd) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0xc080) syz_usbip_server_init(0x5) syz_usbip_server_init(0x6) sendmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)='5', 0x1}], 0x1, &(0x7f0000002c00)=ANY=[], 0x10}}], 0x2, 0x404c044) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0xc000000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000d0a01030000000000000000050000000900020073797a320000000008"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000003380)=@newtfilter={0x4c0, 0x2c, 0x200, 0x870bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x92}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_RATE={0x6, 0x5, {0xb5, 0x6}}, @filter_kind_options=@f_flow={{0x9}, {0x394, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}, @TCA_FLOW_EMATCHES={0x384, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xab60, 0x8, 0x2}, {0x0, 0x0, 0x4}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x1ff}, {0x4, 0x5, 0x3}}}, @TCF_EM_META={0xac, 0x2, 0x0, 0x0, {{0x4}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="3b858476085742da9992", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="94801a377d", @TCF_META_TYPE_VAR="09df9f", @TCF_META_TYPE_VAR="1e7e2609"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="872a621551cb4f00b7", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="db9096ab062e57a0", @TCF_META_TYPE_VAR="ee", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="6f67ba455fcbbe6aef45", @TCF_META_TYPE_VAR='\'', @TCF_META_TYPE_VAR="5178ddefd98c7b2dba", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_VAR="b62e436887a9eb0fc7", @TCF_META_TYPE_VAR="7fd6822a9f2e660c34", @TCF_META_TYPE_VAR='-@', @TCF_META_TYPE_VAR="79192c1946", @TCF_META_TYPE_VAR="0d825bb0a759b788"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0xf9, 0x2}, {0x8, 0x3, 0x2}}}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x2, 0xff}, {0xfff8, 0x9, 0x1, "217c12312e664bdc6c"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x1000}, {0x53, 0x1, 0x2, 0x2, 0x4}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xf36c, 0x2, 0x9f3}, {0x60, 0x8, 0x1, "1a95fe2964cf057c"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa06, 0x3, 0x6}, {0x5, 0x6, 0x6caf, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfffe, 0x3, 0xfffe}, {0xb4, 0xfff, 0x5de, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x8000}, {{0x3}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x40}, {0xffffffffffffffff, 0x5, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x3ff}, {0xffffffffffffffff, 0x2, 0x1}}}, @TCF_EM_META={0x50, 0x3, 0x0, 0x0, {{0x3ff, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="bf54f469", @TCF_META_TYPE_VAR="d831", @TCF_META_TYPE_VAR="a0bf3f118750fc74087b", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="fbec5c", @TCF_META_TYPE_INT=0xb, @TCF_META_TYPE_VAR="97f333f6c09c52", @TCF_META_TYPE_VAR="44ed4d6df0", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x14, 0x2, 0xc9}, {0x9, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0xf4, 0x3, 0x0, 0x0, {{0x1000, 0x0, 0x6}, "a1e6f9eb5caced467fdc12286df23063849a2cf23b7624e54279f6102aac291f17f3302007baa5ae2681da0e39673ddfdb36efecf54964556d79286eb7a7360a2d2db60bdc8e7d3b87fd1f184662ecdeaf9e366a752a9092dd1cb1fc5b7a9fbc5f81302fb10b59ec980b42ca19e020644dba374b731cde495c89f2113b457f350897e84974af7ccc22496cd4028cb2956f461205931588d18f22204dc918789b5d9a51456f3ff9ba909f71e4e280e40ba90bbbd05d6c608847055b72b1a83331f4d2a9c64c9272be63c2c328605d0df1ddb160aa50bf508c0f4beab9445a07f698f1a51a1a"}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x70, 0x1, 0x53a}, {0xfffffffe, 0x1000, 0xe, 0x4, 0xb, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x58, 0x2, 0x0, 0x0, {{0xfffa, 0x0, 0x2}, "cc0e23a42c0d553967e0642c5638e0d7758c2d73889493caa889b72eff762fe888480616d97db21e8981fcf40d78f58a8a51b2ae999909c186a61c1227d1123816394119db0ab1912a6b"}}]}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0xd4, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xf, 0xfff1}}, @TCA_U32_SEL={0x14, 0x5, {0xe, 0xfd, 0xa, 0x0, 0x9, 0x6eaf, 0x0, 0x3}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_ACT={0xac, 0x7, [@m_ctinfo={0x68, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x39, 0x6, "0d76738cc19cb2b5081b6f8319738a116bf96408f7dd158d84fe7037e3b8ea13082f958c9213d9247c3f998e23606584f40ab0e8ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x40, 0xa, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x10000}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x81}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x48080}, 0x20008040) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 0 (id=2094): socket$igmp(0x2, 0x3, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = openat(r1, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x100c02, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20c, 0x0, 0x41, 0x2b3}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x80, 0x0}, 0xe07e872420db67cb) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): ][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 714.768064][ T30] audit: type=1400 audit(1776805494.646:675): avc: denied { create } for pid=11801 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 714.785517][T11802] delete_channel: no stack [ 714.980357][T11827] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1184'. [ 715.103303][T11829] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 715.109838][T11829] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 715.143809][T11829] vhci_hcd vhci_hcd.0: Device attached [ 715.653336][T11827] vhci_hcd vhci_hcd.0: port 0 already used [ 715.681038][T11830] vhci_hcd: connection closed [ 715.686260][ T13] vhci_hcd vhci_hcd.3: stop threads [ 715.711671][ T13] vhci_hcd vhci_hcd.3: release socket [ 715.725201][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 722.048016][T11878] lo speed is unknown, defaulting to 1000 [ 722.056099][T11878] lo speed is unknown, defaulting to 1000 [ 726.740639][T11923] netlink: 'syz.3.1200': attribute type 61 has an invalid length. [ 726.765032][T11923] netlink: 'syz.3.1200': attribute type 150 has an invalid length. [ 726.775506][T11923] netlink: 5088 bytes leftover after parsing attributes in process `syz.3.1200'. [ 729.754582][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 733.915632][T11977] netlink: 'syz.1.1215': attribute type 1 has an invalid length. [ 733.923455][T11977] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1215'. [ 735.020106][ T30] audit: type=1400 audit(1776805514.896:676): avc: denied { ioctl } for pid=11984 comm="syz.1.1218" path="socket:[32964]" dev="sockfs" ino=32964 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 736.226567][T11998] delete_channel: no stack [ 736.300677][ T30] audit: type=1400 audit(1776805516.187:677): avc: denied { create } for pid=11999 comm="syz.1.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 736.389894][T12001] bond1: option arp_interval: invalid value (18446744073709551615) [ 736.421539][T12001] bond1: option arp_interval: allowed values 0 - 2147483647 [ 736.440139][T12005] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1222'. [ 736.544308][T12009] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 736.550872][T12009] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 736.622695][T12012] netlink: 'syz.4.1223': attribute type 1 has an invalid length. [ 736.631488][T12012] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1223'. [ 736.724588][T12001] bond1 (unregistering): Released all slaves [ 736.738750][T12009] vhci_hcd vhci_hcd.0: Device attached [ 736.756591][T12016] vhci_hcd vhci_hcd.0: port 0 already used [ 736.796042][T12010] vhci_hcd: connection closed [ 736.796214][ T13] vhci_hcd vhci_hcd.3: stop threads [ 736.807875][ T13] vhci_hcd vhci_hcd.3: release socket [ 736.817685][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 737.639103][T12028] fuse: fd is not a fuse device [ 737.735799][T12026] net_ratelimit: 10 callbacks suppressed [ 737.735809][T12026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 737.821921][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1229'. [ 737.987138][T12036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1228'. [ 739.003615][T12053] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 739.010146][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 739.311258][T12048] lo speed is unknown, defaulting to 1000 [ 739.329531][T12048] lo speed is unknown, defaulting to 1000 [ 739.592657][T12056] Mount JFS Failure: -22 [ 739.596972][T12056] jfs_mount failed w/return code = -22 [ 739.987317][T12053] vhci_hcd vhci_hcd.0: Device attached [ 740.003056][T12036] vhci_hcd vhci_hcd.0: port 0 already used [ 740.228438][T12054] vhci_hcd: connection closed [ 740.228752][ T57] vhci_hcd vhci_hcd.1: stop threads [ 740.284073][ T57] vhci_hcd vhci_hcd.1: release socket [ 740.327083][ T57] vhci_hcd vhci_hcd.1: disconnect device [ 740.336578][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 740.353808][ T5880] usb 36-1: enqueue for inactive port 0 [ 740.885193][ T5880] usb usb36-port1: attempt power cycle [ 741.524389][ T5880] usb usb36-port1: unable to enumerate USB device [ 741.673781][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 741.684261][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 741.713726][T12079] ceph: No mds server is up or the cluster is laggy [ 742.111980][T12086] hpfs: Bad magic ... probably not HPFS [ 742.267594][T12091] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1237'. [ 742.478229][T12093] netlink: 'syz.3.1236': attribute type 1 has an invalid length. [ 742.486575][T12093] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1236'. [ 743.694782][T12105] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1240'. [ 746.429341][T12137] xt_recent: Unsupported userspace flags (000000de) [ 746.542707][T12139] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 747.014912][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.036679][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.056831][ T30] audit: type=1400 audit(1776805526.452:678): avc: denied { map } for pid=12130 comm="syz.3.1245" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 747.439753][ T30] audit: type=1400 audit(1776805526.452:679): avc: denied { execute } for pid=12130 comm="syz.3.1245" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 747.465170][ T30] audit: type=1400 audit(1776805526.892:680): avc: denied { listen } for pid=12134 comm="syz.1.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 748.326305][T12149] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 748.332831][T12149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 748.509969][T12149] vhci_hcd vhci_hcd.0: Device attached [ 748.552053][T12156] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1250'. [ 748.621006][ T30] audit: type=1400 audit(1776805528.513:681): avc: denied { connect } for pid=12148 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 748.747872][ T5825] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 749.144939][T12161] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 749.153462][T12161] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1251'. [ 749.165950][T12150] vhci_hcd: connection reset by peer [ 749.172325][ T1168] vhci_hcd vhci_hcd.1: stop threads [ 749.197839][ T1168] vhci_hcd vhci_hcd.1: release socket [ 749.223434][ T1168] vhci_hcd vhci_hcd.1: disconnect device [ 749.563697][T12170] IPv6: syztnl0: Disabled Multicast RS [ 750.001049][T12168] overlayfs: failed to clone upperpath [ 750.203953][ T30] audit: type=1400 audit(1776805530.094:682): avc: denied { append } for pid=12169 comm="syz.3.1254" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 750.252764][ T9] libceph: connect (1)[c::]:6789 error -101 [ 750.375843][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 750.414342][ T9] libceph: connect (1)[c::]:6789 error -101 [ 750.421571][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 750.991006][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 751.019713][T12174] ceph: No mds server is up or the cluster is laggy [ 751.117307][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 751.688390][T12185] netlink: 'syz.2.1256': attribute type 13 has an invalid length. [ 751.705398][T12185] netlink: 'syz.2.1256': attribute type 17 has an invalid length. [ 751.772346][T12200] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 751.781187][T12200] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1259'. [ 752.811682][T12185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 752.982999][T12215] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1262'. [ 753.067813][T12216] veth0_macvtap: left promiscuous mode [ 754.369807][ T5825] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 755.368398][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 757.611565][T12262] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1269'. [ 757.958236][T12266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1270'. [ 758.120705][T12268] --map-set only usable from mangle table [ 758.375834][ T5492] veth0_macvtap: entered promiscuous mode [ 758.411300][ T5492] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 758.619208][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'. [ 758.643283][T12283] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1272'. [ 760.812239][T12298] overlayfs: missing 'lowerdir' [ 760.872560][T12299] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 761.767094][ T30] audit: type=1400 audit(1776805541.660:683): avc: denied { connect } for pid=12303 comm="syz.3.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 761.823356][T12304] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 761.843320][ T1235] IPVS: starting estimator thread 0... [ 761.877522][T12311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1278'. [ 762.007368][T12311] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 762.013919][T12311] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 762.553771][T12306] IPVS: using max 65 ests per chain, 156000 per kthread [ 762.585170][T12311] vhci_hcd vhci_hcd.0: Device attached [ 762.689481][T12313] vhci_hcd vhci_hcd.0: port 0 already used [ 762.710926][T12312] vhci_hcd: connection closed [ 762.736192][ T57] vhci_hcd vhci_hcd.1: stop threads [ 762.797458][ T57] vhci_hcd vhci_hcd.1: release socket [ 762.891155][ T57] vhci_hcd vhci_hcd.1: disconnect device [ 763.724983][T12337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1290'. [ 763.734613][T12333] bond2: option arp_interval: invalid value (18446744073709551615) [ 763.770459][T12333] bond2: option arp_interval: allowed values 0 - 2147483647 [ 763.798149][T12340] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 763.804691][T12340] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 763.816218][T12340] vhci_hcd vhci_hcd.0: Device attached [ 763.817543][T12333] bond2 (unregistering): Released all slaves [ 763.855579][T12340] vhci_hcd vhci_hcd.0: port 0 already used [ 763.940305][ T24] usb 36-1: SetAddress Request (13) to port 0 [ 763.972752][ T24] usb 36-1: new SuperSpeed USB device number 13 using vhci_hcd [ 763.996587][T12341] vhci_hcd: connection closed [ 763.997023][ T57] vhci_hcd vhci_hcd.1: stop threads [ 764.038302][ T57] vhci_hcd vhci_hcd.1: release socket [ 764.051610][ T57] vhci_hcd vhci_hcd.1: disconnect device [ 764.084802][ T24] usb 36-1: enqueue for inactive port 0 [ 764.816753][T12359] overlayfs: missing 'lowerdir' [ 765.292118][ T30] audit: type=1400 audit(1776805544.461:684): avc: denied { map } for pid=12350 comm="syz.2.1281" path="socket:[33777]" dev="sockfs" ino=33777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 765.294629][ T24] usb usb36-port1: attempt power cycle [ 765.781132][T12359] lo speed is unknown, defaulting to 1000 [ 765.788860][T12359] lo speed is unknown, defaulting to 1000 [ 766.665895][ T24] usb usb36-port1: unable to enumerate USB device [ 769.106889][T12378] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 769.114654][T12378] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1283'. [ 773.295598][T12400] overlayfs: missing 'lowerdir' [ 773.998540][T12402] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 776.336503][T12411] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1292'. [ 776.458732][T12405] lo speed is unknown, defaulting to 1000 [ 776.465870][T12405] lo speed is unknown, defaulting to 1000 [ 776.484648][T12411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 776.491204][T12411] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 776.515810][T12411] vhci_hcd vhci_hcd.0: Device attached [ 776.529646][T12413] vhci_hcd vhci_hcd.0: port 0 already used [ 776.605709][T12416] vhci_hcd: connection closed [ 776.606072][ T1168] vhci_hcd vhci_hcd.3: stop threads [ 776.693941][T12412] libceph: secret too big 289 [ 776.700215][ T1168] vhci_hcd vhci_hcd.3: release socket [ 776.707857][ T1168] vhci_hcd vhci_hcd.3: disconnect device [ 776.841318][T12422] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 776.849354][T12422] overlayfs: failed to set xattr on upper [ 776.855770][T12422] overlayfs: ...falling back to redirect_dir=nofollow. [ 776.862691][T12422] overlayfs: ...falling back to index=off. [ 776.869106][T12422] overlayfs: ...falling back to uuid=null. [ 776.875525][T12422] overlayfs: maximum fs stacking depth exceeded [ 776.908190][ T30] audit: type=1400 audit(1776805556.747:685): avc: denied { mounton } for pid=12421 comm="syz.4.1294" path="/file0" dev="hugetlbfs" ino=34945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 778.401581][ T30] audit: type=1400 audit(1776805557.798:686): avc: denied { ioctl } for pid=12433 comm="syz.4.1296" path="socket:[34453]" dev="sockfs" ino=34453 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 778.638401][T12437] slcan: can't register candev [ 778.831709][T12442] lo speed is unknown, defaulting to 1000 [ 778.838862][T12442] lo speed is unknown, defaulting to 1000 [ 780.170139][T12459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1299'. [ 781.603803][T12474] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 781.612666][T12474] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1301'. [ 782.673352][T12483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1304'. [ 783.741141][T12501] overlayfs: failed to clone lowerpath [ 784.096351][T12513] netlink: 'syz.3.1307': attribute type 1 has an invalid length. [ 784.105207][T12513] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1307'. [ 784.502661][T12501] overlayfs: failed to clone upperpath [ 785.463237][ T30] audit: type=1400 audit(1776805565.371:687): avc: denied { view } for pid=12526 comm="syz.1.1312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 785.999576][T12534] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 786.580889][ T30] audit: type=1400 audit(1776805566.452:688): avc: denied { read } for pid=12541 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 787.635735][ T30] audit: type=1400 audit(1776805566.522:689): avc: denied { setopt } for pid=12541 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 790.130668][T12562] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 790.139493][T12562] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1316'. [ 790.677316][T12565] netlink: 'syz.2.1317': attribute type 4 has an invalid length. [ 790.685181][T12565] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1317'. [ 790.700442][T12565] .`: renamed from bond0 (while UP) [ 791.108640][T12574] bond1: option arp_interval: invalid value (18446744073709551615) [ 791.118139][T12574] bond1: option arp_interval: allowed values 0 - 2147483647 [ 791.181838][T12574] bond1 (unregistering): Released all slaves [ 791.313228][ T30] audit: type=1800 audit(1776805571.224:690): pid=12579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1321" name="nullb0" dev="tmpfs" ino=1334 res=0 errno=0 [ 792.186845][T12589] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 792.194723][T12589] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1322'. [ 792.604792][ T30] audit: type=1400 audit(1776805572.045:691): avc: denied { create } for pid=12580 comm="syz.1.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 792.718269][T12595] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1324'. [ 793.598475][ T30] audit: type=1400 audit(1776805573.515:692): avc: denied { write } for pid=12601 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 793.735509][T12608] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 793.743819][T12608] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1328'. [ 800.600837][T12642] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 800.609370][T12642] netlink: 760 bytes leftover after parsing attributes in process `syz.2.1336'. [ 801.851538][T12651] 9pnet_fd: Insufficient options for proto=fd [ 801.862139][T12040] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 802.901217][T12660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1340'. [ 803.822721][T12674] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 803.831580][T12674] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1343'. [ 803.886029][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 804.778393][ T30] audit: type=1400 audit(1776805584.691:693): avc: denied { accept } for pid=12680 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 804.780587][T12682] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1344'. [ 805.844761][ T30] audit: type=1400 audit(1776805585.421:694): avc: denied { setopt } for pid=12680 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 808.259107][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.265950][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.668906][T12715] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 808.676763][T12715] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1352'. [ 809.125805][T12718] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1353'. [ 810.048420][T12723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1354'. [ 810.142109][T12743] binfmt_misc: register: failed to install interpreter file ./file0 [ 810.214670][T12745] overlayfs: failed to clone upperpath [ 814.968468][T12767] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1364'. [ 815.346630][T12775] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 815.355400][T12775] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1365'. [ 815.943247][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'. [ 818.627578][T12809] IPv6: Can't replace route, no match found [ 818.635989][T12809] IPv6: Can't replace route, no match found [ 818.725777][T12813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1376'. [ 819.489454][T12819] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1378'. [ 820.174268][T12825] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 820.183046][T12825] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1379'. [ 820.284806][T12829] bond1: option arp_interval: invalid value (18446744073709551615) [ 820.293541][T12829] bond1: option arp_interval: allowed values 0 - 2147483647 [ 820.304746][T12829] bond1 (unregistering): Released all slaves [ 821.980636][T12848] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 821.988485][T12848] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1384'. [ 823.876518][T12860] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1389'. [ 824.334251][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 824.676569][T12881] No such timeout policy "syz1" [ 825.107689][ T30] audit: type=1400 audit(1776805604.621:695): avc: denied { remount } for pid=12875 comm="syz.0.1392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 825.440992][T12884] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 825.449698][T12884] netlink: 2096 bytes leftover after parsing attributes in process `syz.0.1393'. [ 825.459706][T12884] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1393'. [ 826.096393][ T30] audit: type=1400 audit(1776805606.012:696): avc: denied { execute } for pid=12885 comm="syz.3.1394" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 826.199038][T12901] tipc: Started in network mode [ 826.204013][T12901] tipc: Node identity ac14140f, cluster identity 4711 [ 826.213774][T12901] tipc: New replicast peer: 255.255.255.255 [ 826.222085][T12901] tipc: Enabled bearer , priority 10 [ 827.309747][T12890] libceph: resolve '0..' (ret=-3): failed [ 827.340142][ T5901] tipc: Node number set to 2886997007 [ 828.228057][T12918] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 828.235950][T12918] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1400'. [ 829.753561][T12927] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1402'. [ 830.320613][T12933] overlayfs: failed to clone lowerpath [ 830.402304][T12934] overlay: Unknown parameter '/' [ 831.520616][T12947] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1405'. [ 832.491562][T12961] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1410'. [ 833.115892][ T30] audit: type=1400 audit(1776805613.055:697): avc: denied { setopt } for pid=12967 comm="syz.2.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 833.380160][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'. [ 833.481052][T12975] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 833.489307][T12975] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1412'. [ 836.217009][T12995] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1416'. [ 837.007787][ T30] audit: type=1400 audit(1776805616.947:698): avc: denied { name_bind } for pid=13001 comm="syz.0.1418" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 837.049042][T13003] netlink: 'syz.3.1417': attribute type 1 has an invalid length. [ 837.056926][T13003] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1417'. [ 837.092445][T13002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.194401][T13002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.245351][T13002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.861788][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 838.870770][T13020] openvswitch: netlink: Flow actions attr not present in new flow. [ 839.468252][T13025] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 839.858764][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 839.919437][T13021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.128336][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 841.463871][T13045] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 841.499612][T13045] Falling back ldisc for ttyS3. [ 841.924486][T13047] bond0: option arp_interval: invalid value (18446744073709551615) [ 841.935293][T13047] bond0: option arp_interval: allowed values 0 - 2147483647 [ 841.957783][T13047] bond0 (unregistering): Released all slaves [ 842.011494][T13055] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 842.019305][T13055] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1429'. [ 842.965161][T13069] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 842.997108][T13069] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 843.458150][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 843.573808][T13073] bond1: option arp_interval: invalid value (18446744073709551615) [ 843.594608][T13073] bond1: option arp_interval: allowed values 0 - 2147483647 [ 843.663220][T13073] bond1 (unregistering): Released all slaves [ 844.152290][T13086] netlink: 'syz.0.1436': attribute type 1 has an invalid length. [ 844.161428][T13086] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1436'. [ 844.826537][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 845.752996][T13091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.770459][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 845.972969][T13102] bond0: option arp_interval: invalid value (18446744073709551615) [ 846.042406][T13102] bond0: option arp_interval: allowed values 0 - 2147483647 [ 846.111206][T13102] bond0 (unregistering): Released all slaves [ 846.212946][T13099] fido_id[13099]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 847.680903][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 847.735192][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 847.799202][T13130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1446'. [ 849.016484][T13135] sp0: Synchronizing with TNC [ 849.052958][T13135] veth3: left promiscuous mode [ 849.060382][T13135] bridge1: left promiscuous mode [ 849.620579][T13135] lo speed is unknown, defaulting to 1000 [ 849.628839][T13135] lo speed is unknown, defaulting to 1000 [ 852.428112][T13163] bond5: option arp_interval: invalid value (18446744073709551615) [ 852.548257][T13163] bond5: option arp_interval: allowed values 0 - 2147483647 [ 852.599705][T13163] bond5 (unregistering): Released all slaves [ 853.448655][T13175] netlink: 'syz.4.1454': attribute type 10 has an invalid length. [ 854.237820][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1455'. [ 854.386110][T13180] bond5: option arp_interval: invalid value (18446744073709551615) [ 854.506777][T13180] bond5: option arp_interval: allowed values 0 - 2147483647 [ 855.056227][T13180] bond5 (unregistering): Released all slaves [ 857.035970][T13198] lo speed is unknown, defaulting to 1000 [ 857.044237][T13198] lo speed is unknown, defaulting to 1000 [ 858.084551][T13215] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1464'. [ 859.857707][T13227] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 859.866958][T13227] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1467'. [ 860.718617][T13240] bond1: option arp_interval: invalid value (18446744073709551615) [ 860.763832][T13240] bond1: option arp_interval: allowed values 0 - 2147483647 [ 860.823496][T13240] bond1 (unregistering): Released all slaves [ 860.942574][T13243] team_slave_1: Caught tx_queue_len zero misconfig [ 861.475002][T13258] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1473'. [ 863.651837][T13269] overlayfs: failed to clone lowerpath [ 863.772134][T13272] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 863.781541][T13272] overlayfs: failed to clone lowerpath [ 864.907893][T13279] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1478'. [ 864.950322][T13279] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 864.956873][T13279] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 865.123381][T13279] vhci_hcd vhci_hcd.0: Device attached [ 865.686282][T13287] vhci_hcd vhci_hcd.0: port 0 already used [ 865.719403][T13282] vhci_hcd: connection closed [ 865.731819][ T1168] vhci_hcd vhci_hcd.1: stop threads [ 865.752336][T13281] dvmrp1: entered allmulticast mode [ 865.781985][ T1168] vhci_hcd vhci_hcd.1: release socket [ 865.807068][ T1168] vhci_hcd vhci_hcd.1: disconnect device [ 865.876690][ T5901] usb 36-1: SetAddress Request (17) to port 0 [ 865.906407][ T5901] usb 36-1: new SuperSpeed USB device number 17 using vhci_hcd [ 865.960162][ T5901] usb 36-1: enqueue for inactive port 0 [ 866.069921][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 866.127741][T13275] dvmrp1: left allmulticast mode [ 866.379706][ T5901] usb usb36-port1: attempt power cycle [ 866.959566][ T5901] usb usb36-port1: unable to enumerate USB device [ 869.532097][T13336] overlayfs: failed to clone lowerpath [ 869.717854][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.724234][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.749460][T13338] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 869.758377][T13338] overlayfs: failed to clone lowerpath [ 871.740454][T13345] netlink: 'syz.1.1490': attribute type 1 has an invalid length. [ 871.749207][T13345] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1490'. [ 872.809919][T13353] bond1: option arp_interval: invalid value (18446744073709551615) [ 872.829961][T13353] bond1: option arp_interval: allowed values 0 - 2147483647 [ 872.833618][T13359] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 872.849213][T13353] bond1 (unregistering): Released all slaves [ 874.485075][T13372] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 874.998842][T13372] overlayfs: failed to clone lowerpath [ 876.180178][T13378] batman_adv: batadv0: Adding interface: macsec1 [ 876.187034][T13378] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.212861][T13378] batman_adv: batadv0: Interface activated: macsec1 [ 876.530654][T13400] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 876.619950][T13400] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1502'. [ 876.651670][T13400] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1502'. [ 876.832670][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 876.844052][T13407] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1504'. [ 876.871312][T13407] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 876.877839][T13407] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 876.886959][T13407] vhci_hcd vhci_hcd.0: Device attached [ 876.897054][T13407] vhci_hcd vhci_hcd.0: port 0 already used [ 876.908926][T13409] vhci_hcd: connection closed [ 876.909258][ T7203] vhci_hcd vhci_hcd.3: stop threads [ 876.921914][ T7203] vhci_hcd vhci_hcd.3: release socket [ 876.936124][ T7203] vhci_hcd vhci_hcd.3: disconnect device [ 878.222654][T13424] hpfs: Bad magic ... probably not HPFS [ 881.603934][T13446] netlink: 'syz.2.1511': attribute type 2 has an invalid length. [ 882.021446][T13446] openvswitch: : Dropping previously announced user features [ 882.093740][T13448] fuse: fd is not a fuse device [ 882.521506][T13456] netlink: 'syz.4.1514': attribute type 10 has an invalid length. [ 883.195475][T13456] netlink: 'syz.4.1514': attribute type 10 has an invalid length. [ 883.204255][T13456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1514'. [ 883.960745][ T30] audit: type=1400 audit(1776805663.921:699): avc: denied { setopt } for pid=13457 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 884.385342][T13462] bond0: option arp_interval: invalid value (18446744073709551615) [ 884.438455][T13462] bond0: option arp_interval: allowed values 0 - 2147483647 [ 884.451124][ T30] audit: type=1400 audit(1776805664.051:700): avc: denied { create } for pid=13457 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 884.498602][T13462] bond0 (unregistering): Released all slaves [ 884.644612][ T30] audit: type=1400 audit(1776805664.121:701): avc: denied { sys_admin } for pid=13457 comm="syz.1.1516" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 884.855910][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 885.452891][T13495] netlink: 'syz.4.1524': attribute type 1 has an invalid length. [ 885.461131][T13495] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1524'. [ 885.470749][T13495] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1524'. [ 888.209421][T13525] netlink: 'syz.0.1527': attribute type 23 has an invalid length. [ 889.055915][ T30] audit: type=1400 audit(1776805668.983:702): avc: denied { ioctl } for pid=13529 comm="syz.1.1530" path="socket:[39889]" dev="sockfs" ino=39889 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 890.324847][T13542] tmpfs: Unknown parameter 'grpquota_block_hardlimit}3' [ 890.488073][T13544] netlink: 'syz.1.1532': attribute type 10 has an invalid length. [ 890.489511][T13542] ISOFS: Unable to identify CD-ROM format. [ 891.482072][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 892.031810][T13570] xt_hashlimit: size too large, truncated to 1048576 [ 892.439790][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 892.584549][T13581] hub 1-0:1.0: USB hub found [ 892.591957][T13581] hub 1-0:1.0: 1 port detected [ 893.675438][T13596] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 893.683258][T13596] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1544'. [ 894.831421][T13600] netlink: 'syz.4.1545': attribute type 1 has an invalid length. [ 894.840087][T13600] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1545'. [ 895.250035][T13607] hpfs: Bad magic ... probably not HPFS [ 896.902438][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 897.248225][T13632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 897.268179][T13632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 898.474629][T13641] ipvlan2: entered allmulticast mode [ 898.479979][T13641] dummy0: entered allmulticast mode [ 900.086777][T13652] bond2: option arp_interval: invalid value (18446744073709551615) [ 900.121008][T13652] bond2: option arp_interval: allowed values 0 - 2147483647 [ 900.159401][T13660] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1558'. [ 900.209758][T13652] bond2 (unregistering): Released all slaves [ 900.420413][T13659] syzkaller0: entered allmulticast mode [ 900.624653][T13674] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1559'. [ 901.889524][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 902.327702][T13692] erspan0: left allmulticast mode [ 902.333807][T13692] erspan0: left promiscuous mode [ 902.341283][T13692] bridge0: port 3(erspan0) entered disabled state [ 903.517610][T13705] hpfs: Bad magic ... probably not HPFS [ 906.267696][ T30] audit: type=1400 audit(1776805686.212:703): avc: denied { ioctl } for pid=13717 comm="syz.3.1569" path="socket:[40379]" dev="sockfs" ino=40379 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 907.038934][ T30] audit: type=1400 audit(1776805687.002:704): avc: denied { read } for pid=13726 comm="syz.0.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 908.379017][ T30] audit: type=1400 audit(1776805688.343:705): avc: denied { name_bind } for pid=13736 comm="syz.1.1574" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 909.588418][T13740] bond0: option arp_interval: invalid value (18446744073709551615) [ 909.613532][T13740] bond0: option arp_interval: allowed values 0 - 2147483647 [ 909.644184][T13740] bond0 (unregistering): Released all slaves [ 909.818746][T13749] lo speed is unknown, defaulting to 1000 [ 909.825239][T13749] lo speed is unknown, defaulting to 1000 [ 910.784535][T13761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.882328][ T30] audit: type=1400 audit(1776805692.855:706): avc: denied { set_context_mgr } for pid=13757 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 913.900213][T13778] bond1: option arp_interval: invalid value (18446744073709551615) [ 914.012554][T13778] bond1: option arp_interval: allowed values 0 - 2147483647 [ 914.092349][T13778] bond1 (unregistering): Released all slaves [ 914.825194][T13808] hpfs: Bad magic ... probably not HPFS [ 916.883827][T13825] netlink: 'syz.2.1590': attribute type 10 has an invalid length. [ 916.892717][T13825] batadv0: left allmulticast mode [ 916.899155][T13825] batadv0: left promiscuous mode [ 916.907921][T13825] bridge0: port 2(batadv0) entered disabled state [ 916.939402][T13825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.956875][T13825] .`: (slave batadv0): Enslaving as an active interface with an up link [ 917.045807][T13825] netlink: 'syz.2.1590': attribute type 10 has an invalid length. [ 917.054639][T13825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1590'. [ 917.064630][T13825] batadv0: entered promiscuous mode [ 917.069961][T13825] batadv0: entered allmulticast mode [ 917.084438][T13825] .`: (slave batadv0): Releasing backup interface [ 917.111530][T13825] bridge0: port 2(batadv0) entered blocking state [ 917.118767][T13825] bridge0: port 2(batadv0) entered disabled state [ 917.816296][T13820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1589'. [ 918.156991][T13833] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[13833] [ 920.009801][T13844] bridge_slave_1: Caught tx_queue_len zero misconfig [ 920.688421][T13853] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 920.696664][T13853] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1596'. [ 920.706210][T13853] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1596'. [ 921.689088][T13869] bond1: option arp_interval: invalid value (18446744073709551615) [ 921.748291][T13869] bond1: option arp_interval: allowed values 0 - 2147483647 [ 921.780347][T13869] bond1 (unregistering): Released all slaves [ 925.983345][T13906] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 928.870702][ T30] audit: type=1400 audit(1776805708.853:707): avc: denied { connect } for pid=13935 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 930.101738][ T30] audit: type=1400 audit(1776805710.084:708): avc: denied { read } for pid=13935 comm="syz.4.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 930.240393][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1613'. [ 930.564295][ T30] audit: type=1400 audit(1776805710.544:709): avc: denied { create } for pid=13949 comm="syz.1.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 931.036294][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.089949][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.089949][ T30] audit: type=1400 audit(1776805710.574:710): avc: denied { connect } for pid=13949 comm="syz.1.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 931.396351][ T5825] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 931.559018][ T5825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 931.692753][ T5825] usb 2-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 931.762852][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.173476][ T5825] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 932.582447][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.910791][ T5825] usb 2-1: Product: syz [ 932.941539][ T5825] usb 2-1: Manufacturer: syz [ 932.955777][ T5825] usb 2-1: SerialNumber: syz [ 934.197504][ T5825] usb 2-1: USB disconnect, device number 9 [ 934.486817][T13993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1626'. [ 934.510066][ T30] audit: type=1400 audit(1776805714.496:711): avc: denied { ioctl } for pid=13992 comm="syz.2.1626" path="socket:[42006]" dev="sockfs" ino=42006 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 934.801825][T13999] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 934.926175][T14002] loop5: detected capacity change from 0 to 7 [ 935.081890][T14004] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 935.090734][T14004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1627'. [ 935.123026][T13999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.136792][T13999] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 935.196699][T14004] batadv0: entered promiscuous mode [ 935.202094][T14004] batadv0: entered allmulticast mode [ 935.641351][T14002] Dev loop5: unable to read RDB block 7 [ 935.647886][T14002] loop5: AHDI p1 [ 935.651532][T14002] loop5: partition table partially beyond EOD, truncated [ 935.695759][T14004] bond0: (slave batadv0): Releasing backup interface [ 935.706785][T14004] bridge0: port 2(batadv0) entered blocking state [ 935.713344][T14004] bridge0: port 2(batadv0) entered disabled state [ 935.960484][T14008] bond1: option arp_interval: invalid value (18446744073709551615) [ 935.969566][T14008] bond1: option arp_interval: allowed values 0 - 2147483647 [ 936.338823][ T57] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 936.349148][ T57] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 937.030220][T14008] bond1 (unregistering): Released all slaves [ 938.773063][T14035] macvtap0: entered promiscuous mode [ 938.778608][T14035] vlan0: entered promiscuous mode [ 938.788339][T14035] macvtap0: entered allmulticast mode [ 938.794857][T14035] vlan0: entered allmulticast mode [ 938.800179][T14035] veth0_vlan: entered allmulticast mode [ 939.019504][T14038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1636'. [ 945.424111][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1649'. [ 945.839434][ T5825] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 946.014142][T14103] bond5: option arp_interval: invalid value (18446744073709551615) [ 946.024857][ T5825] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 946.050888][ T5825] usb 2-1: config 0 has no interface number 0 [ 946.058115][T14103] bond5: option arp_interval: allowed values 0 - 2147483647 [ 946.084979][ T5825] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 946.123917][T14103] bond5 (unregistering): Released all slaves [ 946.146071][ T5825] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 946.212269][ T5825] usb 2-1: config 0 interface 113 has no altsetting 0 [ 946.343865][ T5825] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 946.373816][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.401215][ T5825] usb 2-1: Product: syz [ 946.417393][ T5825] usb 2-1: Manufacturer: syz [ 946.432225][ T5825] usb 2-1: SerialNumber: syz [ 946.464846][ T5825] usb 2-1: config 0 descriptor?? [ 946.500809][T14109] bond5: option arp_interval: invalid value (18446744073709551615) [ 946.509635][T14109] bond5: option arp_interval: allowed values 0 - 2147483647 [ 946.533816][T14109] bond5 (unregistering): Released all slaves [ 946.648530][ C1] usb 2-1: NFC: Urb failure (status -71) [ 946.671246][ T5825] usb 2-1: NFC: Unable to get FW version [ 946.694666][ T5825] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 948.478184][T14136] netlink: 'syz.2.1656': attribute type 1 has an invalid length. [ 948.486028][T14136] netlink: 760 bytes leftover after parsing attributes in process `syz.2.1656'. [ 948.968918][T14138] hpfs: Bad magic ... probably not HPFS [ 950.251671][T14150] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1660'. [ 950.901827][T14161] bond2: option arp_interval: invalid value (18446744073709551615) [ 950.910962][T14161] bond2: option arp_interval: allowed values 0 - 2147483647 [ 950.933760][T14161] bond2 (unregistering): Released all slaves [ 951.213009][ T5825] usb 2-1: USB disconnect, device number 10 [ 952.200526][T14179] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 952.219331][T14179] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:18 [ 952.241551][T14179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.258357][T14179] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 952.354388][T14179] loop5: detected capacity change from 0 to 7 [ 952.407269][T14180] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 952.416081][T14180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1667'. [ 952.426056][T14180] batadv0: entered promiscuous mode [ 952.431543][T14180] batadv0: entered allmulticast mode [ 952.870645][T14179] Dev loop5: unable to read RDB block 7 [ 952.876793][T14179] loop5: AHDI p1 [ 952.880510][T14179] loop5: partition table partially beyond EOD, truncated [ 952.890799][T14180] bond0: (slave batadv0): Releasing backup interface [ 953.058692][T14180] bridge0: port 3(batadv0) entered blocking state [ 953.066238][T14180] bridge0: port 3(batadv0) entered disabled state [ 953.076289][T14180] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 953.320451][ T30] audit: type=1400 audit(1776805733.275:712): avc: denied { getopt } for pid=14174 comm="syz.3.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 953.669149][T12040] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 953.678933][T12040] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 953.897630][T14191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1669'. [ 954.021304][T14193] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 954.519510][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'. [ 954.906311][T14206] bond2: option arp_interval: invalid value (18446744073709551615) [ 954.919469][T14206] bond2: option arp_interval: allowed values 0 - 2147483647 [ 954.945750][T14206] bond2 (unregistering): Released all slaves [ 955.408149][T14219] bond1: option arp_interval: invalid value (18446744073709551615) [ 955.416772][T14219] bond1: option arp_interval: allowed values 0 - 2147483647 [ 955.436620][T14219] bond1 (unregistering): Released all slaves [ 955.825887][T14228] netlink: 'syz.4.1677': attribute type 1 has an invalid length. [ 955.834679][T14228] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1677'. [ 956.728763][T14242] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.764780][T14242] bridge0: entered allmulticast mode [ 956.958185][ T30] audit: type=1400 audit(1776805736.957:713): avc: denied { accept } for pid=14247 comm="syz.4.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 957.286252][T14252] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1683'. [ 957.944019][T14259] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1687'. [ 959.591986][T14265] hpfs: Bad magic ... probably not HPFS [ 961.072761][T14285] No such timeout policy "syz1" [ 961.761822][T14293] netlink: 'syz.4.1691': attribute type 1 has an invalid length. [ 961.769658][T14293] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1691'. [ 962.429877][ T30] audit: type=1400 audit(1776805742.420:714): avc: denied { write } for pid=14299 comm="syz.1.1695" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 962.742543][T14302] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.102643][T14302] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.181211][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'. [ 963.318700][T14302] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.538579][T14302] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.631050][T14313] ubi16: attaching mtd0 [ 963.702412][T14313] ubi16: scanning is finished [ 963.707204][T14313] ubi16: empty MTD device detected [ 964.346780][T14319] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1699'. [ 964.543221][ T1168] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.619608][T14324] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 964.627425][T14324] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1700'. [ 965.048559][T12047] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.071761][T14313] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 965.134457][T12047] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.174985][T12047] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.367829][T14332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1703'. [ 965.382136][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1702'. [ 965.403188][T14332] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 965.409734][T14332] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 965.438491][T14332] vhci_hcd vhci_hcd.0: Device attached [ 965.453357][T14332] vhci_hcd vhci_hcd.0: port 0 already used [ 965.475420][T14334] vhci_hcd: connection closed [ 965.475736][T12047] vhci_hcd vhci_hcd.1: stop threads [ 965.499909][T12047] vhci_hcd vhci_hcd.1: release socket [ 965.508974][T12047] vhci_hcd vhci_hcd.1: disconnect device [ 965.683877][T14341] bond0: option arp_interval: invalid value (18446744073709551615) [ 965.692370][T14341] bond0: option arp_interval: allowed values 0 - 2147483647 [ 966.238072][T14341] bond0 (unregistering): Released all slaves [ 966.600586][T14357] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 966.609271][T14357] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1706'. [ 967.065142][T14360] fuse: fd is not a fuse device [ 967.481442][T14371] hpfs: Bad magic ... probably not HPFS [ 967.631576][ T30] audit: type=1400 audit(1776805747.632:715): avc: denied { audit_write } for pid=14373 comm="syz.4.1710" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 968.407813][T14381] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 968.415628][T14381] netlink: 760 bytes leftover after parsing attributes in process `syz.2.1712'. [ 968.950769][T14384] bond1: option arp_interval: invalid value (18446744073709551615) [ 968.968927][T14384] bond1: option arp_interval: allowed values 0 - 2147483647 [ 968.980398][T14384] bond1 (unregistering): Released all slaves [ 969.240314][T14393] overlayfs: failed to clone upperpath [ 969.942608][T14399] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 969.951334][T14399] netlink: 760 bytes leftover after parsing attributes in process `syz.2.1716'. [ 970.514937][T14405] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1718'. [ 971.173860][T14404] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 971.182500][T14404] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1717'. [ 971.198539][T14407] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 971.205069][T14407] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 971.217468][T14407] vhci_hcd vhci_hcd.0: Device attached [ 971.239141][T14405] vhci_hcd vhci_hcd.0: port 0 already used [ 971.287317][T14408] vhci_hcd: connection closed [ 971.287679][ T36] vhci_hcd vhci_hcd.3: stop threads [ 971.320265][ T36] vhci_hcd vhci_hcd.3: release socket [ 971.334933][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 973.172887][T14423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 973.180127][T14423] IPv6: NLM_F_CREATE should be set when creating new route [ 973.187376][T14423] IPv6: NLM_F_CREATE should be set when creating new route [ 973.194570][T14423] IPv6: NLM_F_CREATE should be set when creating new route [ 973.222891][T14423] fuse: fd is not a fuse device [ 973.309537][ T30] audit: type=1400 audit(1776805753.305:716): avc: denied { mount } for pid=14430 comm="syz.3.1723" name="/" dev="autofs" ino=44131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 973.641850][T14435] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1724'. [ 975.343314][T14444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1727'. [ 975.605670][T14446] netlink: 'syz.3.1726': attribute type 1 has an invalid length. [ 975.614491][T14446] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1726'. [ 976.139790][T14449] bond1: option arp_interval: invalid value (18446744073709551615) [ 976.195887][T14449] bond1: option arp_interval: allowed values 0 - 2147483647 [ 976.245503][T14449] bond1 (unregistering): Released all slaves [ 976.488692][T14462] netlink: 'syz.3.1729': attribute type 1 has an invalid length. [ 976.497442][T14462] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1729'. [ 976.597604][T14459] bond2: option arp_interval: invalid value (18446744073709551615) [ 976.622010][T14459] bond2: option arp_interval: allowed values 0 - 2147483647 [ 976.647761][T14459] bond2 (unregistering): Released all slaves [ 976.887612][T14471] netlink: 'syz.0.1732': attribute type 1 has an invalid length. [ 976.896437][T14471] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1732'. [ 977.555333][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1734'. [ 979.884576][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 979.924632][T14506] futex_wake_op: syz.0.1741 tries to shift op by 144; fix this program [ 980.669974][T14513] bond0: option arp_interval: invalid value (18446744073709551615) [ 980.693500][T14513] bond0: option arp_interval: allowed values 0 - 2147483647 [ 980.717954][T14513] bond0 (unregistering): Released all slaves [ 981.835751][T14524] bond5: option arp_interval: invalid value (18446744073709551615) [ 981.848637][ T30] audit: type=1400 audit(1776805761.860:717): avc: denied { sys_module } for pid=14517 comm="syz.2.1744" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 981.885594][T14524] bond5: option arp_interval: allowed values 0 - 2147483647 [ 981.954203][T14524] bond5 (unregistering): Released all slaves [ 982.127321][T14533] netlink: 'syz.1.1746': attribute type 1 has an invalid length. [ 982.136265][T14533] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1746'. [ 983.941516][T14541] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 983.949887][T14541] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1747'. [ 985.500216][ T30] audit: type=1400 audit(1776805765.501:718): avc: denied { read } for pid=14555 comm="syz.3.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 987.742250][T14572] vlan0: left promiscuous mode [ 989.250305][T14574] lo speed is unknown, defaulting to 1000 [ 989.264736][T14574] lo speed is unknown, defaulting to 1000 [ 989.593373][T14577] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1757'. [ 989.771267][T14575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.831303][T14581] bond5: option arp_interval: invalid value (18446744073709551615) [ 989.842384][T14581] bond5: option arp_interval: allowed values 0 - 2147483647 [ 989.887859][T14581] bond5 (unregistering): Released all slaves [ 991.013634][T14594] netlink: 'syz.0.1760': attribute type 1 has an invalid length. [ 991.022033][T14594] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1760'. [ 991.031515][T14594] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1760'. [ 991.199462][T14599] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 991.234160][T14599] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 991.322496][T14605] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 991.331015][T14605] netlink: 760 bytes leftover after parsing attributes in process `syz.2.1762'. [ 991.759898][T14606] tmpfs: Unknown parameter 'grpquota_block_hardlimit}3' [ 991.801259][T14606] /dev/nullb0: Can't lookup blockdev [ 991.825197][T14606] netlink: 'syz.4.1761': attribute type 10 has an invalid length. [ 991.846882][T14606] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 992.427676][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.434273][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.042280][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 993.171112][T14630] ubi16: attaching mtd0 [ 993.201532][T14630] ubi16: scanning is finished [ 993.359931][ T30] audit: type=1400 audit(1776805773.375:719): avc: denied { create } for pid=14627 comm="syz.1.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 993.382837][ T30] audit: type=1400 audit(1776805773.375:720): avc: denied { setopt } for pid=14627 comm="syz.1.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 993.410549][ T30] audit: type=1400 audit(1776805773.375:721): avc: denied { write } for pid=14627 comm="syz.1.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 993.828640][T14630] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 993.881176][T14630] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 993.913263][T14630] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 993.949013][T14630] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 993.987758][T14630] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 994.022440][T14630] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 994.071761][T14630] ubi16: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4157998481 [ 994.131744][T14630] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 994.183267][T14645] ubi16: background thread "ubi_bgt16d" started, PID 14645 [ 996.029151][T14656] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1774'. [ 996.280968][T14658] netlink: 'syz.1.1773': attribute type 39 has an invalid length. [ 996.507485][T14666] netlink: 'syz.0.1775': attribute type 1 has an invalid length. [ 996.516225][T14666] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1775'. [ 998.358418][T14671] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 998.368775][T14671] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 998.381557][T14671] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 998.483107][ T30] audit: type=1400 audit(1776805778.398:722): avc: denied { firmware_load } for pid=14668 comm="syz.4.1777" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 998.754855][T14680] libceph: resolve '0..' (ret=-3): failed [ 999.275094][T14689] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1782'. [ 1000.687714][T14697] Cannot find add_set index 0 as target [ 1001.808972][T14699] bond5: option arp_interval: invalid value (18446744073709551615) [ 1001.992776][T14699] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1002.013113][T14699] bond5 (unregistering): Released all slaves [ 1002.746544][T14718] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 1002.755319][T14718] netlink: 760 bytes leftover after parsing attributes in process `syz.2.1788'. [ 1003.498810][T14734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1789'. [ 1003.508981][T14734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1789'. [ 1003.850488][T14736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1789'. [ 1003.861986][T14736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1789'. [ 1003.917261][ T30] audit: type=1326 audit(1776805783.931:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1004.003483][ T30] audit: type=1326 audit(1776805783.931:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1004.032776][ T30] audit: type=1326 audit(1776805783.961:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1004.206415][ T30] audit: type=1326 audit(1776805783.961:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1004.237627][ T30] audit: type=1326 audit(1776805783.961:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1004.454396][ T30] audit: type=1326 audit(1776805783.961:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1004.544225][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 1005.491027][ T30] audit: type=1326 audit(1776805783.961:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1005.732585][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 1005.773606][ T30] audit: type=1326 audit(1776805783.961:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1005.907185][ T30] audit: type=1326 audit(1776805783.961:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1006.060178][ T30] audit: type=1326 audit(1776805783.961:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14724 comm="syz.4.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1007.017225][T14782] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 1007.025631][T14782] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1801'. [ 1008.153989][T14788] hpfs: Bad magic ... probably not HPFS [ 1011.941248][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 1011.968411][T14818] input: syz0 as /devices/virtual/input/input22 [ 1012.089547][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1012.089562][ T30] audit: type=1400 audit(1776805792.075:741): avc: denied { read } for pid=5182 comm="acpid" name="event4" dev="devtmpfs" ino=2906 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1012.168136][ T30] audit: type=1400 audit(1776805792.075:742): avc: denied { open } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2906 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1012.225100][ T30] audit: type=1400 audit(1776805792.075:743): avc: denied { ioctl } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2906 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1012.254624][ T30] audit: type=1326 audit(1776805792.085:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14810 comm="syz.2.1808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08219c819 code=0x0 [ 1014.920268][T14847] tmpfs: Unknown parameter 'grpquota_block_hardlimit}3' [ 1014.960305][ T30] audit: type=1400 audit(1776805794.986:745): avc: denied { getopt } for pid=14835 comm="syz.1.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1015.034836][T14838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1824'. [ 1015.205593][T14847] ISOFS: Unable to identify CD-ROM format. [ 1015.287119][T14850] netlink: 'syz.3.1813': attribute type 10 has an invalid length. [ 1015.329810][T14850] team0: Device ipvlan1 failed to register rx_handler [ 1017.042355][T14863] netlink: 'syz.4.1815': attribute type 1 has an invalid length. [ 1017.051203][T14863] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1815'. [ 1017.593869][ T5492] veth0_macvtap: left promiscuous mode [ 1017.950714][T14872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1817'. [ 1018.248598][T14879] vlan2: left promiscuous mode [ 1018.254492][T14879] bridge0: left promiscuous mode [ 1018.268998][T14879] bridge1: left promiscuous mode [ 1019.328536][T14879] lo speed is unknown, defaulting to 1000 [ 1019.336781][T14879] lo speed is unknown, defaulting to 1000 [ 1019.820946][T14883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1020.376499][ T30] audit: type=1400 audit(1776805800.409:746): avc: denied { lock } for pid=14889 comm="syz.0.1818" path="socket:[46339]" dev="sockfs" ino=46339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1020.404843][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 1020.434966][ T30] audit: type=1400 audit(1776805800.459:747): avc: denied { bind } for pid=14889 comm="syz.0.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1021.174048][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 1021.383324][T14919] 9p: Could not find request transport: f0x0000000000000005 [ 1021.607078][T14929] input: syz0 as /devices/virtual/input/input23 [ 1022.966751][ T9234] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1024.060357][ T9234] usb 4-1: Using ep0 maxpacket: 8 [ 1024.421002][ T9234] usb 4-1: device descriptor read/all, error -71 [ 1024.435169][T14944] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 1024.491793][ T30] audit: type=1400 audit(1776805804.521:748): avc: denied { getopt } for pid=14942 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1025.220477][T14945] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 1025.273122][T14945] CPU: 1 UID: 0 PID: 14945 Comm: syz.1.1829 Tainted: G L syzkaller #0 PREEMPT(full) [ 1025.273163][T14945] Tainted: [L]=SOFTLOCKUP [ 1025.273172][T14945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1025.273193][T14945] Call Trace: [ 1025.273201][T14945] [ 1025.273211][T14945] dump_stack_lvl+0x100/0x190 [ 1025.273247][T14945] sysfs_warn_dup.cold+0x1c/0x28 [ 1025.273284][T14945] sysfs_do_create_link_sd+0x113/0x140 [ 1025.273315][T14945] sysfs_create_link+0x61/0xc0 [ 1025.273342][T14945] device_add+0x675/0x1950 [ 1025.273389][T14945] ? __pfx_device_add+0x10/0x10 [ 1025.273424][T14945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1025.273456][T14945] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 1025.273497][T14945] wiphy_register+0x1edd/0x2d90 [ 1025.273520][T14945] ? __rtnl_unlock+0xb9/0xf0 [ 1025.273563][T14945] ? __pfx_wiphy_register+0x10/0x10 [ 1025.273588][T14945] ? __asan_memset+0x23/0x50 [ 1025.273623][T14945] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 1025.273668][T14945] ieee80211_register_hw+0x3055/0x4570 [ 1025.273713][T14945] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1025.273740][T14945] ? __pfx___debug_object_init+0x10/0x10 [ 1025.273767][T14945] ? find_held_lock+0x2b/0x80 [ 1025.273788][T14945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1025.273816][T14945] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1025.273843][T14945] ? __hrtimer_setup+0x208/0x330 [ 1025.273878][T14945] mac80211_hwsim_new_radio+0x2a01/0x5ae0 [ 1025.273933][T14945] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1025.273971][T14945] ? __asan_memcpy+0x3c/0x60 [ 1025.274002][T14945] hwsim_new_radio_nl+0xc5f/0x1370 [ 1025.274034][T14945] ? rcu_is_watching+0x12/0xc0 [ 1025.274067][T14945] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1025.274111][T14945] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1025.274137][T14945] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1025.274173][T14945] genl_family_rcv_msg_doit+0x214/0x300 [ 1025.274204][T14945] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1025.274243][T14945] ? bpf_lsm_capable+0x9/0x10 [ 1025.274265][T14945] ? security_capable+0x80/0x260 [ 1025.274300][T14945] ? ns_capable+0xd2/0xf0 [ 1025.274333][T14945] genl_rcv_msg+0x560/0x800 [ 1025.274365][T14945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1025.274401][T14945] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1025.274449][T14945] netlink_rcv_skb+0x159/0x420 [ 1025.274475][T14945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1025.274505][T14945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1025.274542][T14945] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1025.274571][T14945] genl_rcv+0x28/0x40 [ 1025.274594][T14945] netlink_unicast+0x585/0x850 [ 1025.274622][T14945] ? __pfx_netlink_unicast+0x10/0x10 [ 1025.274656][T14945] netlink_sendmsg+0x8b0/0xda0 [ 1025.274686][T14945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.274708][T14945] ? __might_fault+0x30/0x140 [ 1025.274751][T14945] ____sys_sendmsg+0x9e1/0xb70 [ 1025.274773][T14945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.274800][T14945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1025.274830][T14945] ? __pfx_futex_wake_mark+0x10/0x10 [ 1025.274859][T14945] ___sys_sendmsg+0x190/0x1e0 [ 1025.274885][T14945] ? __pfx____sys_sendmsg+0x10/0x10 [ 1025.274952][T14945] __sys_sendmsg+0x170/0x220 [ 1025.274984][T14945] ? __pfx___sys_sendmsg+0x10/0x10 [ 1025.275015][T14945] ? __x64_sys_futex+0x34f/0x4d0 [ 1025.275060][T14945] ? rcu_is_watching+0x12/0xc0 [ 1025.275096][T14945] do_syscall_64+0x10b/0xf80 [ 1025.275124][T14945] ? clear_bhb_loop+0x40/0x90 [ 1025.275152][T14945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.275175][T14945] RIP: 0033:0x7f6bded9c819 [ 1025.275205][T14945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.275229][T14945] RSP: 002b:00007f6bdfcaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1025.275257][T14945] RAX: ffffffffffffffda RBX: 00007f6bdf016090 RCX: 00007f6bded9c819 [ 1025.275273][T14945] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000009 [ 1025.275286][T14945] RBP: 00007f6bdee32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1025.275299][T14945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.275312][T14945] R13: 00007f6bdf016128 R14: 00007f6bdf016090 R15: 00007fff46deb2f8 [ 1025.275343][T14945] [ 1025.903944][T14958] ip6_vti0: Caught tx_queue_len zero misconfig [ 1026.210671][T14970] sp0: Synchronizing with TNC [ 1026.364561][T14970] macvtap0: left promiscuous mode [ 1026.369906][T14970] vlan0: left promiscuous mode [ 1027.731760][T14972] lo speed is unknown, defaulting to 1000 [ 1027.956282][T14972] lo speed is unknown, defaulting to 1000 [ 1028.505737][T14968] IPv6: Can't replace route, no match found [ 1028.516309][T14968] IPv6: Can't replace route, no match found [ 1028.700127][T14963] netlink: 'syz.4.1831': attribute type 8 has an invalid length. [ 1028.766660][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1831'. [ 1030.732726][T15004] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1841'. [ 1031.170272][ T5880] lo speed is unknown, defaulting to 1000 [ 1031.221213][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 1032.466059][ T5825] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1032.847464][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 1032.979117][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 1033.079244][T15033] xt_hashlimit: size too large, truncated to 1048576 [ 1033.284498][ T5825] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.330975][ T5825] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.375175][ T5825] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.475679][ T5825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1033.482401][ T5825] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 1033.492806][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.513744][ T5825] usb 4-1: config 0 descriptor?? [ 1033.952845][T15018] Illegal XDP return value 4294967294 on prog (id 102) dev N/A, expect packet loss! [ 1033.969022][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 1034.015369][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1034.160218][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 1034.173188][ T5825] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 1034.175176][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1034.185370][ T5825] lg-g15 0003:046D:C22D.0002: unknown main item tag 0x0 [ 1034.195588][ T5825] lg-g15 0003:046D:C22D.0002: item fetching failed at offset 2/40 [ 1034.212919][ T5825] lg-g15 0003:046D:C22D.0002: probe with driver lg-g15 failed with error -22 [ 1034.266998][T15052] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 1034.275906][T15052] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1846'. [ 1034.410594][ T9] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1034.538206][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1034.588172][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1034.598305][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1034.609440][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1034.620111][ T9] usb 2-1: config 0 has no interface number 0 [ 1034.628051][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1034.640915][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1034.828510][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1034.838578][ T9] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1034.851865][ T9] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1034.898956][ T9] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1034.939735][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1034.956255][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.973134][ T9] usb 2-1: Product: syz [ 1034.985147][ T9] usb 2-1: Manufacturer: syz [ 1034.989930][ T9] usb 2-1: SerialNumber: syz [ 1034.999218][T15058] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1847'. [ 1035.012642][ T9] usb 2-1: config 0 descriptor?? [ 1035.027601][ T9] usb 2-1: selecting invalid altsetting 2 [ 1035.173268][ T5825] usb 4-1: USB disconnect, device number 17 [ 1035.384519][T15042] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1840'. [ 1035.394662][T15042] batman_adv: batadv0: Interface deactivated: dummy0 [ 1035.448392][ T30] audit: type=1400 audit(1776805815.486:749): avc: denied { map } for pid=15041 comm="syz.1.1840" path="socket:[46642]" dev="sockfs" ino=46642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1035.499502][T15065] netlink: 'syz.0.1849': attribute type 1 has an invalid length. [ 1035.508324][T15065] netlink: 760 bytes leftover after parsing attributes in process `syz.0.1849'. [ 1035.530096][ T30] audit: type=1400 audit(1776805815.486:750): avc: denied { read } for pid=15041 comm="syz.1.1840" path="socket:[46642]" dev="sockfs" ino=46642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1035.561523][T15042] batman_adv: batadv0: Removing interface: dummy0 [ 1036.165542][ T9] get_1284_register timeout [ 1036.178100][ C0] usb 2-1: async_complete: urb error -104 [ 1036.184041][ C0] usb 2-1: async_complete: urb error -104 [ 1036.189930][ C0] usb 2-1: async_complete: urb error -104 [ 1036.195822][ C0] usb 2-1: async_complete: urb error -104 [ 1036.402154][T15076] bond1: option arp_interval: invalid value (18446744073709551615) [ 1036.416607][T15076] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1036.597632][T15076] bond1 (unregistering): Released all slaves [ 1036.620157][ T5825] usb 2-1: USB disconnect, device number 11 [ 1038.087347][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 1038.275920][T15090] lo speed is unknown, defaulting to 1000 [ 1038.283440][T15090] lo speed is unknown, defaulting to 1000 [ 1038.951197][T15099] bridge0: port 3(syz_tun) entered blocking state [ 1038.958709][T15099] bridge0: port 3(syz_tun) entered disabled state [ 1038.966433][T15099] syz_tun: entered allmulticast mode [ 1038.976265][T15099] syz_tun: entered promiscuous mode [ 1038.987666][T15099] bridge0: port 3(syz_tun) entered blocking state [ 1038.994256][T15099] bridge0: port 3(syz_tun) entered forwarding state [ 1039.009519][T15099] netlink: 'syz.3.1855': attribute type 10 has an invalid length. [ 1039.020305][T15099] bridge0: port 3(syz_tun) entered disabled state [ 1039.027202][T15099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.210538][T15099] bridge0: port 3(syz_tun) entered blocking state [ 1039.217096][T15099] bridge0: port 3(syz_tun) entered forwarding state [ 1039.223907][T15099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.231021][T15099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.245437][T15099] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1039.693476][T15110] bond5: option arp_interval: invalid value (18446744073709551615) [ 1039.702907][T15110] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1039.715606][T15110] bond5 (unregistering): Released all slaves [ 1039.841099][T15120] netlink: 'syz.1.1858': attribute type 10 has an invalid length. [ 1039.850990][T15120] batadv0: left allmulticast mode [ 1039.857079][T15120] batadv0: left promiscuous mode [ 1039.863725][T15120] bridge0: port 3(batadv0) entered disabled state [ 1040.368899][T15120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.378143][T15120] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1040.588332][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1860'. [ 1040.795046][T15132] SELinux: Context ϧ is not valid (left unmapped). [ 1040.835033][ T30] audit: type=1400 audit(1776805820.869:751): avc: denied { create } for pid=15125 comm="syz.0.1860" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 1041.008621][T15137] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 1041.017402][T15137] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1861'. [ 1041.347659][ T30] audit: type=1400 audit(1776805820.869:752): avc: denied { associate } for pid=15125 comm="syz.0.1860" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE [ 1041.377314][T15132] overlayfs: failed to clone upperpath [ 1041.415725][ T30] audit: type=1400 audit(1776805820.909:753): avc: denied { mounton } for pid=15125 comm="syz.0.1860" path="/363/file0" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 1041.457852][ T30] audit: type=1400 audit(1776805821.419:754): avc: denied { map_create } for pid=15134 comm="syz.4.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1041.485777][ T30] audit: type=1400 audit(1776805821.419:755): avc: denied { bpf } for pid=15134 comm="syz.4.1862" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1041.547921][ T30] audit: type=1400 audit(1776805821.419:756): avc: denied { map_read map_write } for pid=15134 comm="syz.4.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1041.569341][ T30] audit: type=1400 audit(1776805821.449:757): avc: denied { add_name } for pid=15125 comm="syz.0.1860" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 1041.629856][ T30] audit: type=1400 audit(1776805821.449:758): avc: denied { create } for pid=15125 comm="syz.0.1860" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1041.732953][T15145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1864'. [ 1041.748265][ T30] audit: type=1400 audit(1776805821.449:759): avc: denied { associate } for pid=15125 comm="syz.0.1860" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1041.788232][T15145] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1041.794824][T15145] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1041.814465][ T30] audit: type=1400 audit(1776805821.449:760): avc: denied { read open } for pid=15125 comm="syz.0.1860" path="/363/file0/file1" dev="tmpfs" ino=1918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1041.850081][T15145] vhci_hcd vhci_hcd.0: Device attached [ 1041.875468][T15148] vhci_hcd vhci_hcd.0: port 0 already used [ 1041.907954][T15146] vhci_hcd: connection closed [ 1041.908265][ T36] vhci_hcd vhci_hcd.1: stop threads [ 1041.931989][ T36] vhci_hcd vhci_hcd.1: release socket [ 1041.949860][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 1043.653463][T15165] 9p: Bad value for 'rfdno' [ 1043.997602][T15161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1867'. [ 1044.016528][T15161] unsupported nlmsg_type 40 [ 1044.187452][T15161] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1867'. [ 1045.694783][T15182] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1045.707804][T15182] overlayfs: failed to set xattr on upper [ 1045.721647][T15182] overlayfs: ...falling back to redirect_dir=nofollow. [ 1045.732021][T15182] overlayfs: ...falling back to index=off. [ 1045.738066][T15182] overlayfs: ...falling back to uuid=null. [ 1045.747065][T15182] overlayfs: maximum fs stacking depth exceeded [ 1046.041127][T15185] openvswitch: netlink: Multiple metadata blocks provided [ 1046.061105][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1046.061121][ T30] audit: type=1326 audit(1776805826.102:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1046.213964][ T30] audit: type=1326 audit(1776805826.102:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1046.255983][ T30] audit: type=1326 audit(1776805826.132:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1046.772539][ T30] audit: type=1326 audit(1776805826.132:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1046.832915][ T30] audit: type=1326 audit(1776805826.132:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1046.869957][ T30] audit: type=1326 audit(1776805826.132:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1046.935023][ T30] audit: type=1326 audit(1776805826.132:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1047.000515][ T30] audit: type=1326 audit(1776805826.132:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1047.042246][ T30] audit: type=1326 audit(1776805826.132:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1047.176319][ T30] audit: type=1326 audit(1776805826.132:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15184 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f127f19c819 code=0x7ffc0000 [ 1047.389134][T15206] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 1047.398954][T15206] netlink: 760 bytes leftover after parsing attributes in process `syz.1.1874'. [ 1047.642542][T15196] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1049.421003][T15224] block device autoloading is deprecated and will be removed. [ 1050.221614][T15232] netlink: 'syz.3.1879': attribute type 1 has an invalid length. [ 1050.230060][T15232] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1879'. [ 1052.116721][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 1052.116766][ T30] audit: type=1804 audit(1776805832.155:869): pid=15253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1881" name="/newroot/338/file0" dev="tmpfs" ino=1808 res=1 errno=0 [ 1052.610477][ T30] audit: type=1400 audit(1776805832.165:870): avc: denied { prog_run } for pid=15242 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1052.700778][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 1052.846506][T15270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1887'. [ 1052.872216][T15270] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1052.878754][T15270] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1052.893470][T15270] vhci_hcd vhci_hcd.0: Device attached [ 1052.957595][T15270] vhci_hcd vhci_hcd.0: port 0 already used [ 1052.964253][T15279] siw: device registration error -23 [ 1053.010430][T15272] vhci_hcd: connection closed [ 1053.010804][ T1168] vhci_hcd vhci_hcd.1: stop threads [ 1053.041343][ T1168] vhci_hcd vhci_hcd.1: release socket [ 1053.054285][ T1168] vhci_hcd vhci_hcd.1: disconnect device [ 1054.006207][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.034381][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.808216][T15304] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1889'. [ 1055.391273][T15308] bond1: option arp_interval: invalid value (18446744073709551615) [ 1055.418079][T15308] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1055.463193][T15308] bond1 (unregistering): Released all slaves [ 1056.620644][T15332] tmpfs: Bad value for 'mpol' [ 1056.878609][T15332] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1056.939454][T15326] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[15326] [ 1056.997128][T15336] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1057.397899][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1895'. [ 1057.585166][T15341] Can't find ip_set type ha [ 1057.673812][ T30] audit: type=1400 audit(1776805837.718:871): avc: denied { setattr } for pid=15344 comm="syz.3.1898" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1057.793666][T15348] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1058.195882][ T30] audit: type=1400 audit(1776805837.858:872): avc: denied { setopt } for pid=15344 comm="syz.3.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1060.003444][T15356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 1060.463254][T15360] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1060.851728][T15362] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1902'. [ 1060.890361][T15364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1904'. [ 1060.902814][T15362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1060.909338][T15362] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1060.920099][T15362] vhci_hcd vhci_hcd.0: Device attached [ 1060.930210][T15364] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1060.936725][T15364] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1060.946694][T15364] vhci_hcd vhci_hcd.0: Device attached [ 1060.956337][T15362] vhci_hcd vhci_hcd.0: port 0 already used [ 1060.968320][T15365] vhci_hcd: connection closed [ 1060.968825][ T1168] vhci_hcd vhci_hcd.3: stop threads [ 1060.982164][ T1168] vhci_hcd vhci_hcd.3: release socket [ 1060.987641][ T1168] vhci_hcd vhci_hcd.3: disconnect device [ 1061.004505][T15371] vhci_hcd vhci_hcd.0: port 0 already used [ 1061.030304][T15367] vhci_hcd: connection closed [ 1061.031807][ T1168] vhci_hcd vhci_hcd.1: stop threads [ 1061.052007][ T1168] vhci_hcd vhci_hcd.1: release socket [ 1061.164623][ T1168] vhci_hcd vhci_hcd.1: disconnect device [ 1061.222828][ T1235] usb 36-1: enqueue for inactive port 0 [ 1061.537491][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 1061.713576][ T1235] usb usb36-port1: attempt power cycle [ 1062.522173][ T1235] usb usb36-port1: unable to enumerate USB device [ 1065.670130][T15414] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1066.114827][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1915'. [ 1067.119794][ T30] audit: type=1400 audit(1776805846.072:873): avc: denied { relabelto } for pid=15415 comm="syz.4.1915" name="file0" dev="tmpfs" ino=2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:sudo_exec_t:s0" [ 1067.446700][T15424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1917'. [ 1068.311671][T15437] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 1068.541251][ T5825] lo speed is unknown, defaulting to 1000 [ 1068.550217][ T5825] syz0: Port: 1 Link DOWN [ 1069.583827][T15454] netlink: 'syz.2.1923': attribute type 1 has an invalid length. [ 1069.592982][T15454] netlink: 760 bytes leftover after parsing attributes in process `syz.2.1923'. [ 1070.500172][ T30] audit: type=1400 audit(1776805850.544:874): avc: denied { read } for pid=15470 comm="syz.3.1929" path="socket:[48715]" dev="sockfs" ino=48715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1070.560419][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 1070.696840][ T30] audit: type=1400 audit(1776805850.754:875): avc: denied { ioctl } for pid=15470 comm="syz.3.1929" path="socket:[49373]" dev="sockfs" ino=49373 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1071.666061][T15483] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 1071.673861][T15483] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1930'. [ 1072.094394][T15482] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1931'. [ 1072.141385][T15482] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1072.147913][T15482] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1072.400469][T15482] vhci_hcd vhci_hcd.0: Device attached [ 1072.416196][T15491] vhci_hcd vhci_hcd.0: port 0 already used [ 1072.929684][ T5825] usb 40-1: SetAddress Request (28) to port 0 [ 1072.938640][T15488] vhci_hcd: connection closed [ 1072.953990][T12047] vhci_hcd vhci_hcd.3: stop threads [ 1072.965668][ T5825] usb 40-1: new SuperSpeed USB device number 28 using vhci_hcd [ 1072.991090][T12047] vhci_hcd vhci_hcd.3: release socket [ 1073.018999][T12047] vhci_hcd vhci_hcd.3: disconnect device [ 1073.721970][T15490] futex_wake_op: syz.1.1932 tries to shift op by 144; fix this program [ 1073.897498][T15490] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1073.910875][T15490] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1073.923583][T15490] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1074.577783][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'. [ 1075.649429][T15527] ip6t_srh: unknown srh invflags 4000 [ 1076.918209][T15545] netlink: 'syz.4.1943': attribute type 1 has an invalid length. [ 1076.927106][T15545] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1943'. [ 1077.583720][T15552] batman_adv: batadv0: Adding interface: macsec1 [ 1077.590078][T15552] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.615943][T15552] batman_adv: batadv0: Interface activated: macsec1 [ 1077.977914][T15556] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1945'. [ 1078.010808][T15556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1078.017312][T15556] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1078.031066][T15556] vhci_hcd vhci_hcd.0: Device attached [ 1078.061331][T15556] vhci_hcd vhci_hcd.0: port 0 already used [ 1078.070837][ T5825] usb 40-1: device descriptor read/8, error -110 [ 1078.109085][T15558] vhci_hcd: connection closed [ 1078.109331][T12045] vhci_hcd vhci_hcd.1: stop threads [ 1078.123771][T15565] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1947'. [ 1078.278605][T12045] vhci_hcd vhci_hcd.1: release socket [ 1078.285154][T12045] vhci_hcd vhci_hcd.1: disconnect device [ 1078.453953][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 1078.463031][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 1078.642966][T15572] CIFS: VFS: UNC: path must begin with // or \\ [ 1078.649272][T15572] Malformed UNC in devname [ 1078.649272][T15572] [ 1078.656498][T15572] CIFS: VFS: Malformed UNC in devname [ 1078.670242][T15572] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1078.682716][T15572] SET target dimension over the limit! [ 1078.968664][ T30] audit: type=1400 audit(1776805858.728:876): avc: denied { create } for pid=15569 comm="syz.2.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1079.204215][ T5825] usb usb40-port1: attempt power cycle [ 1079.227817][T15577] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 1079.236086][T15577] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1949'. [ 1079.245599][T15577] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1949'. [ 1079.327996][T15580] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1079.365583][T15580] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1079.849053][ T5825] usb usb40-port1: unable to enumerate USB device [ 1080.046124][T15588] bond1: option arp_interval: invalid value (18446744073709551615) [ 1080.047882][T15599] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1956'. [ 1080.104959][T15588] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1080.179338][T15588] bond1 (unregistering): Released all slaves [ 1080.355918][T15603] bond1: option arp_interval: invalid value (18446744073709551615) [ 1080.415719][T15603] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1080.546777][T15603] bond1 (unregistering): Released all slaves [ 1081.639126][T15625] kAFS: unable to lookup cell '(' [ 1081.869814][T15626] kAFS: unable to lookup cell '(,cL' [ 1081.937225][T15632] netlink: 'syz.2.1962': attribute type 1 has an invalid length. [ 1081.945591][T15632] netlink: 760 bytes leftover after parsing attributes in process `syz.2.1962'. [ 1082.692500][T15632] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1962'. [ 1083.618944][T15644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1964'. [ 1084.623057][T15653] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1084.679231][T15653] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1085.797336][T15662] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1970'. [ 1085.827930][T15662] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1085.834465][T15662] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1085.865388][T15662] vhci_hcd vhci_hcd.0: Device attached [ 1085.995035][T15666] vhci_hcd vhci_hcd.0: port 0 already used [ 1086.033452][T15663] vhci_hcd: connection closed [ 1086.033699][T12045] vhci_hcd vhci_hcd.1: stop threads [ 1086.059744][T15669] bond1: option arp_interval: invalid value (18446744073709551615) [ 1086.065567][T12045] vhci_hcd vhci_hcd.1: release socket [ 1086.067925][T15669] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1086.090928][T15669] bond1 (unregistering): Released all slaves [ 1086.105029][T12045] vhci_hcd vhci_hcd.1: disconnect device [ 1086.629583][T15682] blktrace: Concurrent blktraces are not allowed on loop8 [ 1088.338504][T15697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1976'. [ 1088.452288][T15699] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1088.458861][T15699] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1088.503967][T15699] vhci_hcd vhci_hcd.0: Device attached [ 1088.534751][T15702] vhci_hcd vhci_hcd.0: port 0 already used [ 1088.788353][ T29] usb 40-1: SetAddress Request (32) to port 0 [ 1088.796196][ T29] usb 40-1: new SuperSpeed USB device number 32 using vhci_hcd [ 1089.074439][T15700] vhci_hcd: connection reset by peer [ 1089.093251][T10301] vhci_hcd vhci_hcd.3: stop threads [ 1089.110455][T10301] vhci_hcd vhci_hcd.3: release socket [ 1089.129505][T10301] vhci_hcd vhci_hcd.3: disconnect device [ 1089.172829][T15710] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 1089.182081][T15710] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.1977'. [ 1089.608933][T15712] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1978'. [ 1089.630167][T15712] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1089.636735][T15712] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1089.672322][T15712] vhci_hcd vhci_hcd.0: Device attached [ 1089.694826][T15715] vhci_hcd vhci_hcd.0: port 0 already used [ 1089.720824][T15713] vhci_hcd: connection closed [ 1089.721059][T10301] vhci_hcd vhci_hcd.1: stop threads [ 1089.732927][T10301] vhci_hcd vhci_hcd.1: release socket [ 1089.800376][T10301] vhci_hcd vhci_hcd.1: disconnect device [ 1091.592550][ T30] audit: type=1400 audit(1776805871.654:877): avc: denied { bind } for pid=15730 comm="syz.4.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1091.639689][ T5825] IPVS: starting estimator thread 0... [ 1091.746977][T15736] IPVS: using max 65 ests per chain, 156000 per kthread [ 1092.107649][T15745] bond1: option arp_interval: invalid value (18446744073709551615) [ 1092.117027][T15745] bond1: option arp_interval: allowed values 0 - 2147483647 [ 1092.127809][T15745] bond1 (unregistering): Released all slaves [ 1092.268985][ T30] audit: type=1400 audit(1776805872.335:878): avc: denied { write } for pid=15739 comm="syz.4.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1092.320195][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 1092.327802][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 1092.363126][T15752] ceph: No mds server is up or the cluster is laggy [ 1093.147238][T15759] syz.1.1988 (15759): drop_caches: 2 [ 1093.509602][T15762] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1093.523335][T15762] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1094.429662][T15770] netlink: 'syz.2.1991': attribute type 1 has an invalid length. [ 1094.438380][T15770] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.1991'. [ 1094.460451][ T29] usb 40-1: device descriptor read/8, error -110 [ 1094.785719][T15789] kAFS: unable to lookup cell '' [ 1094.799872][T15789] kAFS: unable to lookup cell '(,c' [ 1094.916753][ T29] usb usb40-port1: attempt power cycle [ 1095.605125][ T29] usb usb40-port1: unable to enumerate USB device [ 1099.363315][T15832] netlink: 'syz.0.2006': attribute type 1 has an invalid length. [ 1099.371141][T15832] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.2006'. [ 1101.974857][T15860] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2013'. [ 1102.382230][T15865] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 1102.390128][T15865] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2014'. [ 1102.881753][T15867] overlayfs: missing 'workdir' [ 1104.151477][T15879] netlink: 'syz.2.2018': attribute type 1 has an invalid length. [ 1104.219205][T15879] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2018'. [ 1104.588544][ T30] audit: type=1326 audit(1776805884.651:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1104.661284][ T30] audit: type=1326 audit(1776805884.651:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1104.694449][ T30] audit: type=1326 audit(1776805884.691:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1104.857576][T15890] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2021'. [ 1104.927233][T15892] netlink: 'syz.4.2020': attribute type 1 has an invalid length. [ 1104.936323][T15892] netlink: 760 bytes leftover after parsing attributes in process `syz.4.2020'. [ 1105.130453][ T30] audit: type=1326 audit(1776805884.711:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1105.337241][ T30] audit: type=1326 audit(1776805884.711:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1105.361483][ T30] audit: type=1326 audit(1776805884.711:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1105.386360][ T30] audit: type=1326 audit(1776805884.711:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1105.412008][ T30] audit: type=1326 audit(1776805884.711:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1105.440510][ T30] audit: type=1326 audit(1776805884.711:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1105.440926][T15895] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1105.465474][ T30] audit: type=1326 audit(1776805884.711:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15868 comm="syz.3.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdb39c819 code=0x7ffc0000 [ 1105.470408][T15895] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1105.482376][T15895] vhci_hcd vhci_hcd.0: Device attached [ 1105.513026][T15903] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 1105.637906][T15897] vhci_hcd vhci_hcd.0: port 0 already used [ 1105.683246][T15899] vhci_hcd: connection closed [ 1105.684045][ T7203] vhci_hcd vhci_hcd.1: stop threads [ 1105.706024][ T7203] vhci_hcd vhci_hcd.1: release socket [ 1105.740409][ T7203] vhci_hcd vhci_hcd.1: disconnect device [ 1105.758543][ T9234] usb 36-1: SetAddress Request (29) to port 0 [ 1105.774674][ T9234] usb 36-1: new SuperSpeed USB device number 29 using vhci_hcd [ 1105.839532][ T9234] usb 36-1: enqueue for inactive port 0 [ 1106.239872][ T9234] usb usb36-port1: attempt power cycle [ 1106.570245][T15923] netlink: 'syz.3.2025': attribute type 1 has an invalid length. [ 1106.579048][T15923] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2025'. [ 1107.792849][T15929] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1107.889288][ T9234] usb usb36-port1: unable to enumerate USB device [ 1110.602735][T15956] netlink: 'syz.2.2033': attribute type 1 has an invalid length. [ 1110.611869][T15956] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2033'. [ 1111.119344][T15961] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1111.134313][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 1111.143766][T15961] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1112.831941][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1112.831956][ T30] audit: type=1400 audit(1776805892.905:892): avc: denied { create } for pid=15979 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1113.105128][ T30] audit: type=1400 audit(1776805893.025:893): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1113.133600][ T30] audit: type=1400 audit(1776805893.025:894): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1113.747766][ T30] audit: type=1400 audit(1776805893.035:895): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1113.867640][ T30] audit: type=1400 audit(1776805893.035:896): avc: denied { create } for pid=15979 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1113.887973][ T30] audit: type=1400 audit(1776805893.045:897): avc: denied { getopt } for pid=15979 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1114.921966][ T30] audit: type=1400 audit(1776805893.045:898): avc: denied { accept } for pid=15979 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1115.191938][ T30] audit: type=1400 audit(1776805893.055:899): avc: denied { execmem } for pid=15979 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1115.248403][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.255313][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.287272][ T30] audit: type=1400 audit(1776805893.315:900): avc: denied { write } for pid=15979 comm="syz.4.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1115.482633][ T30] audit: type=1400 audit(1776805893.816:901): avc: denied { prog_load } for pid=15982 comm="syz.3.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1116.490941][T15999] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.501241][T15999] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.841279][T15999] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.852091][T15999] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.947072][T15999] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.957361][T15999] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.989568][T15999] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.999929][T15999] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.124799][T15696] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.168725][T15696] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.297173][T15696] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.454104][T15696] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.466192][T15696] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.560764][T16014] netlink: 'syz.2.2045': attribute type 1 has an invalid length. [ 1117.569616][T16014] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2045'. [ 1117.969291][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1117.969308][ T30] audit: type=1400 audit(1776805898.048:926): avc: denied { shutdown } for pid=16003 comm="syz.1.2044" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1117.977376][T15696] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.775223][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 1118.797793][T15696] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.806631][ T30] audit: type=1400 audit(1776805898.058:927): avc: denied { read } for pid=16003 comm="syz.1.2044" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1118.828801][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 1118.835428][T15696] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.875498][T16018] ceph: No mds server is up or the cluster is laggy [ 1118.954047][ T30] audit: type=1400 audit(1776805897.557:925): avc: denied { write } for pid=16003 comm="syz.1.2044" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1118.976368][ T30] audit: type=1400 audit(1776805898.708:928): avc: denied { create } for pid=16013 comm="syz.3.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1118.997289][ T30] audit: type=1400 audit(1776805898.718:929): avc: denied { create } for pid=16013 comm="syz.3.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1119.019032][ T30] audit: type=1400 audit(1776805898.728:930): avc: denied { getopt } for pid=16013 comm="syz.3.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1119.041090][ T30] audit: type=1400 audit(1776805898.728:931): avc: denied { read } for pid=16013 comm="syz.3.2046" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1119.065433][ T30] audit: type=1400 audit(1776805898.728:932): avc: denied { open } for pid=16013 comm="syz.3.2046" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1119.595685][ T30] audit: type=1400 audit(1776805899.378:933): avc: denied { firmware_load } for pid=16023 comm="syz.2.2047" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1120.532493][ T30] audit: type=1400 audit(1776805900.309:934): avc: denied { create } for pid=16027 comm="syz.2.2049" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1123.028144][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1123.028161][ T30] audit: type=1400 audit(1776805903.100:956): avc: denied { read } for pid=16056 comm="syz.1.2055" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1123.151049][T16059] tun0: tun_chr_ioctl cmd 1074025675 [ 1123.185915][ T30] audit: type=1400 audit(1776805903.100:957): avc: denied { open } for pid=16056 comm="syz.1.2055" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1123.237936][T16059] tun0: persist enabled [ 1123.259052][ T30] audit: type=1400 audit(1776805903.220:958): avc: denied { ioctl } for pid=16056 comm="syz.1.2055" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1123.306422][T16064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'. [ 1123.346302][ T30] audit: type=1400 audit(1776805903.380:959): avc: denied { prog_run } for pid=16056 comm="syz.1.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1123.366090][T16063] tun0: tun_chr_ioctl cmd 1074025675 [ 1123.444111][T16063] tun0: persist disabled [ 1123.504252][ T30] audit: type=1400 audit(1776805903.400:960): avc: denied { create } for pid=16056 comm="syz.1.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1123.614227][ T30] audit: type=1400 audit(1776805903.410:961): avc: denied { read write } for pid=16056 comm="syz.1.2055" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1123.757811][ T30] audit: type=1400 audit(1776805903.410:962): avc: denied { open } for pid=16056 comm="syz.1.2055" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1123.826540][ T30] audit: type=1400 audit(1776805903.540:963): avc: denied { create } for pid=16056 comm="syz.1.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1123.899744][ T30] audit: type=1400 audit(1776805903.550:964): avc: denied { setopt } for pid=16056 comm="syz.1.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1123.971992][ T30] audit: type=1400 audit(1776805903.931:965): avc: denied { name_bind } for pid=16069 comm="syz.1.2056" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1124.325148][T16077] netlink: 'syz.4.2057': attribute type 1 has an invalid length. [ 1124.333905][T16077] netlink: 760 bytes leftover after parsing attributes in process `syz.4.2057'. [ 1125.338467][T16089] netlink: 'syz.2.2060': attribute type 1 has an invalid length. [ 1125.338512][T16089] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.2060'. [ 1128.165215][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1128.165232][ T30] audit: type=1400 audit(1776805908.243:973): avc: denied { read } for pid=16103 comm="syz.1.2063" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1128.770275][ T30] audit: type=1400 audit(1776805908.273:974): avc: denied { open } for pid=16103 comm="syz.1.2063" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1129.001082][ T30] audit: type=1400 audit(1776805909.083:975): avc: denied { mounton } for pid=16113 comm="syz.4.2066" path="/465/file0" dev="tmpfs" ino=2492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1129.108666][ T30] audit: type=1400 audit(1776805909.103:976): avc: denied { mount } for pid=16113 comm="syz.4.2066" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1129.449926][ T30] audit: type=1400 audit(1776805909.533:977): avc: denied { write } for pid=16113 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1129.514163][ T30] audit: type=1400 audit(1776805909.563:978): avc: denied { bind } for pid=16113 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1129.538802][ T30] audit: type=1400 audit(1776805909.563:979): avc: denied { write } for pid=16113 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1129.592272][T16119] bond5: option arp_interval: invalid value (18446744073709551615) [ 1129.625132][T16119] bond5: option arp_interval: allowed values 0 - 2147483647 [ 1129.681187][T16119] bond5 (unregistering): Released all slaves [ 1130.075905][ T30] audit: type=1400 audit(1776805910.154:980): avc: denied { create } for pid=16126 comm="syz.0.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1130.104907][ T30] audit: type=1400 audit(1776805910.184:981): avc: denied { create } for pid=16126 comm="syz.0.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1130.318917][ T30] audit: type=1400 audit(1776805910.404:982): avc: denied { open } for pid=16130 comm="syz.1.2069" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1130.673115][T16136] netlink: 'syz.1.2069': attribute type 1 has an invalid length. [ 1130.681769][T16136] netlink: 760 bytes leftover after parsing attributes in process `syz.1.2069'. [ 1131.257241][T16143] netlink: 'syz.0.2071': attribute type 1 has an invalid length. [ 1131.265008][T16143] netlink: 760 bytes leftover after parsing attributes in process `syz.0.2071'. [ 1133.211883][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1133.211895][ T30] audit: type=1400 audit(1776805913.295:990): avc: denied { getopt } for pid=16158 comm="syz.2.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1133.256724][ T30] audit: type=1400 audit(1776805913.305:991): avc: denied { setopt } for pid=16158 comm="syz.2.2074" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1133.317273][T16173] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1133.893270][ T30] audit: type=1400 audit(1776805913.876:992): avc: denied { ioctl } for pid=16174 comm="syz.2.2078" path="socket:[51596]" dev="sockfs" ino=51596 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1135.017181][ T30] audit: type=1400 audit(1776805915.106:993): avc: denied { read write } for pid=16190 comm="syz.3.2081" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1135.205919][ T30] audit: type=1400 audit(1776805915.136:994): avc: denied { open } for pid=16190 comm="syz.3.2081" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1135.301933][T16195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16195 comm=syz.3.2081 [ 1135.353846][T16195] 9pnet_virtio: no channels available for device syz [ 1135.599346][ T30] audit: type=1400 audit(1776805915.436:995): avc: denied { create } for pid=16190 comm="syz.3.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1135.622742][ T30] audit: type=1400 audit(1776805915.436:996): avc: denied { mounton } for pid=16190 comm="syz.3.2081" path="/374/file0" dev="tmpfs" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1136.082551][T16200] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 1, id = 0 [ 1136.100978][T16195] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1136.110849][T16195] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1136.121718][T16195] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1136.121726][ T30] audit: type=1400 audit(1776805916.207:997): avc: denied { firmware_load } for pid=16190 comm="syz.3.2081" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1136.792422][ T30] audit: type=1400 audit(1776805916.877:998): avc: denied { write } for pid=16205 comm="syz.4.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1136.986849][ T30] audit: type=1400 audit(1776805916.877:999): avc: denied { nlmsg_write } for pid=16205 comm="syz.4.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1138.939845][T16233] netlink: 'syz.3.2088': attribute type 1 has an invalid length. [ 1138.948069][T16233] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2088'. [ 1140.179538][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1140.179556][ T30] audit: type=1400 audit(1776805920.269:1001): avc: denied { create } for pid=16228 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1140.824472][T16248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2093'. [ 1141.008152][T16251] siw: device registration error -23 [ 1141.020368][T16251] smc: removing ib device syz2 [ 1141.042429][T16251] smbdirect: ib_dev[syz2] removed [ 1141.648567][T16251] ------------[ cut here ]------------ [ 1141.654582][T16251] !xa_empty(&pool->xa) [ 1141.654610][T16251] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.0.2094/16251 [ 1141.670712][T16251] Modules linked in: [ 1141.675095][T16251] CPU: 0 UID: 0 PID: 16251 Comm: syz.0.2094 Tainted: G L syzkaller #0 PREEMPT(full) [ 1141.686555][T16251] Tainted: [L]=SOFTLOCKUP [ 1141.691617][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1141.702220][T16251] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1141.707715][T16251] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 96 68 49 f9 5b e9 90 58 dd 02 e8 8b 68 49 f9 90 <0f> 0b 90 e8 82 68 49 f9 5b e9 7c 58 dd 02 e8 97 21 b7 f9 eb d0 0f [ 1141.729510][T16251] RSP: 0018:ffffc9000588f160 EFLAGS: 00010246 [ 1141.736099][T16251] RAX: 0000000000080000 RBX: ffff888036b35398 RCX: ffffc90005f71000 [ 1141.744608][T16251] RDX: 0000000000080000 RSI: ffffffff88c01255 RDI: ffff888036b35418 [ 1141.753136][T16251] RBP: ffffffff88be6fb0 R08: 0000000000000005 R09: 0000000000000001 [ 1141.761714][T16251] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888036b34698 [ 1141.769686][T16251] R13: ffff888036b33fe0 R14: ffff888036b33fe0 R15: ffff888036b350f8 [ 1141.778225][T16251] FS: 00007f6bda6fd6c0(0000) GS:ffff8881242de000(0000) knlGS:0000000000000000 [ 1141.787708][T16251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1141.795119][T16251] CR2: 0000001b30903ff8 CR3: 0000000087872000 CR4: 00000000003526f0 [ 1141.803653][T16251] Call Trace: [ 1141.806927][T16251] [ 1141.809851][T16251] rxe_dealloc+0x25/0xc0 [ 1141.814618][T16251] ib_dealloc_device+0x49/0x230 [ 1141.819472][T16251] __ib_unregister_device+0x396/0x480 [ 1141.825380][T16251] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 1141.831687][T16251] ib_unregister_device_and_put+0x5a/0x80 [ 1141.837414][T16251] nldev_dellink+0x2a7/0x3c0 [ 1141.842519][T16251] ? __pfx_nldev_dellink+0x10/0x10 [ 1141.847672][T16251] ? rcu_is_watching+0x12/0xc0 [ 1141.852963][T16251] ? cap_capable+0x10b/0x440 [ 1141.857560][T16251] ? bpf_lsm_capable+0x9/0x10 [ 1141.862747][T16251] ? security_capable+0x80/0x260 [ 1141.867702][T16251] ? ns_capable+0xd2/0xf0 [ 1141.872693][T16251] ? __pfx_nldev_dellink+0x10/0x10 [ 1141.877827][T16251] rdma_nl_rcv_msg+0x392/0x6f0 [ 1141.883120][T16251] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1141.888436][T16251] ? __lock_acquire+0x4a5/0x2630 [ 1141.893907][T16251] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1141.901286][T16251] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1141.908242][T16251] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1141.914056][T16251] netlink_unicast+0x585/0x850 [ 1141.918824][T16251] ? __pfx_netlink_unicast+0x10/0x10 [ 1141.924647][T16251] netlink_sendmsg+0x8b0/0xda0 [ 1141.929417][T16251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.935255][T16251] ? __might_fault+0x30/0x140 [ 1141.939946][T16251] ____sys_sendmsg+0x9e1/0xb70 [ 1141.945145][T16251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.950499][T16251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1141.957822][T16251] ? __pfx_futex_wake_mark+0x10/0x10 [ 1141.963197][T16251] ___sys_sendmsg+0x190/0x1e0 [ 1141.967880][T16251] ? __pfx____sys_sendmsg+0x10/0x10 [ 1141.973996][T16251] __sys_sendmsg+0x170/0x220 [ 1141.978627][T16251] ? __pfx___sys_sendmsg+0x10/0x10 [ 1141.984817][T16251] ? __x64_sys_futex+0x34f/0x4d0 [ 1141.989818][T16251] ? rcu_is_watching+0x12/0xc0 [ 1141.996747][T16251] do_syscall_64+0x10b/0xf80 [ 1142.002243][T16251] ? clear_bhb_loop+0x40/0x90 [ 1142.006967][T16251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.013681][T16251] RIP: 0033:0x7f6bd979c819 [ 1142.018122][T16251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.038798][T16251] RSP: 002b:00007f6bda6fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1142.047892][T16251] RAX: ffffffffffffffda RBX: 00007f6bd9a15fa0 RCX: 00007f6bd979c819 [ 1142.056377][T16251] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 1142.064945][T16251] RBP: 00007f6bd9832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1142.073488][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.081994][T16251] R13: 00007f6bd9a16038 R14: 00007f6bd9a15fa0 R15: 00007ffd7af74878 [ 1142.089973][T16251] [ 1142.093546][T16251] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1142.100844][T16251] CPU: 0 UID: 0 PID: 16251 Comm: syz.0.2094 Tainted: G L syzkaller #0 PREEMPT(full) [ 1142.111793][T16251] Tainted: [L]=SOFTLOCKUP [ 1142.116099][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1142.126138][T16251] Call Trace: [ 1142.129403][T16251] [ 1142.132336][T16251] dump_stack_lvl+0x100/0x190 [ 1142.137005][T16251] vpanic+0x552/0x970 [ 1142.140974][T16251] ? __pfx_vpanic+0x10/0x10 [ 1142.145467][T16251] panic+0xd1/0xe0 [ 1142.149218][T16251] ? __pfx_panic+0x10/0x10 [ 1142.153643][T16251] check_panic_on_warn.cold+0x19/0x34 [ 1142.159047][T16251] ? rxe_pool_cleanup+0x46/0x60 [ 1142.163922][T16251] __warn.cold+0x191/0x328 [ 1142.168344][T16251] __report_bug+0x296/0x3d0 [ 1142.172847][T16251] ? rxe_pool_cleanup+0x46/0x60 [ 1142.177707][T16251] ? __pfx___report_bug+0x10/0x10 [ 1142.182733][T16251] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1142.188536][T16251] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1142.194351][T16251] ? __flush_workqueue+0x426/0x1200 [ 1142.199548][T16251] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1142.205190][T16251] ? rxe_pool_cleanup+0x46/0x60 [ 1142.210071][T16251] report_bug+0xb2/0x220 [ 1142.214313][T16251] ? rxe_pool_cleanup+0x46/0x60 [ 1142.219190][T16251] handle_bug+0x16a/0x2a0 [ 1142.223525][T16251] exc_invalid_op+0x17/0x50 [ 1142.228034][T16251] asm_exc_invalid_op+0x1a/0x20 [ 1142.232878][T16251] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1142.238339][T16251] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 96 68 49 f9 5b e9 90 58 dd 02 e8 8b 68 49 f9 90 <0f> 0b 90 e8 82 68 49 f9 5b e9 7c 58 dd 02 e8 97 21 b7 f9 eb d0 0f [ 1142.258119][T16251] RSP: 0018:ffffc9000588f160 EFLAGS: 00010246 [ 1142.264186][T16251] RAX: 0000000000080000 RBX: ffff888036b35398 RCX: ffffc90005f71000 [ 1142.272148][T16251] RDX: 0000000000080000 RSI: ffffffff88c01255 RDI: ffff888036b35418 [ 1142.280112][T16251] RBP: ffffffff88be6fb0 R08: 0000000000000005 R09: 0000000000000001 [ 1142.288075][T16251] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888036b34698 [ 1142.296063][T16251] R13: ffff888036b33fe0 R14: ffff888036b33fe0 R15: ffff888036b350f8 [ 1142.304056][T16251] ? __pfx_rxe_dealloc+0x10/0x10 [ 1142.309012][T16251] ? rxe_pool_cleanup+0x45/0x60 [ 1142.313871][T16251] rxe_dealloc+0x25/0xc0 [ 1142.318114][T16251] ib_dealloc_device+0x49/0x230 [ 1142.322966][T16251] __ib_unregister_device+0x396/0x480 [ 1142.328346][T16251] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 1142.334172][T16251] ib_unregister_device_and_put+0x5a/0x80 [ 1142.339898][T16251] nldev_dellink+0x2a7/0x3c0 [ 1142.344504][T16251] ? __pfx_nldev_dellink+0x10/0x10 [ 1142.349720][T16251] ? rcu_is_watching+0x12/0xc0 [ 1142.354513][T16251] ? cap_capable+0x10b/0x440 [ 1142.359647][T16251] ? bpf_lsm_capable+0x9/0x10 [ 1142.364324][T16251] ? security_capable+0x80/0x260 [ 1142.369295][T16251] ? ns_capable+0xd2/0xf0 [ 1142.373626][T16251] ? __pfx_nldev_dellink+0x10/0x10 [ 1142.378743][T16251] rdma_nl_rcv_msg+0x392/0x6f0 [ 1142.383533][T16251] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1142.388824][T16251] ? __lock_acquire+0x4a5/0x2630 [ 1142.393766][T16251] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1142.400209][T16251] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1142.407183][T16251] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1142.412490][T16251] netlink_unicast+0x585/0x850 [ 1142.417284][T16251] ? __pfx_netlink_unicast+0x10/0x10 [ 1142.422577][T16251] netlink_sendmsg+0x8b0/0xda0 [ 1142.427340][T16251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.432618][T16251] ? __might_fault+0x30/0x140 [ 1142.437327][T16251] ____sys_sendmsg+0x9e1/0xb70 [ 1142.442085][T16251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.447366][T16251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1142.452660][T16251] ? __pfx_futex_wake_mark+0x10/0x10 [ 1142.457951][T16251] ___sys_sendmsg+0x190/0x1e0 [ 1142.462627][T16251] ? __pfx____sys_sendmsg+0x10/0x10 [ 1142.467856][T16251] __sys_sendmsg+0x170/0x220 [ 1142.472474][T16251] ? __pfx___sys_sendmsg+0x10/0x10 [ 1142.477585][T16251] ? __x64_sys_futex+0x34f/0x4d0 [ 1142.482533][T16251] ? rcu_is_watching+0x12/0xc0 [ 1142.487319][T16251] do_syscall_64+0x10b/0xf80 [ 1142.491906][T16251] ? clear_bhb_loop+0x40/0x90 [ 1142.496577][T16251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.502467][T16251] RIP: 0033:0x7f6bd979c819 [ 1142.506878][T16251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.526507][T16251] RSP: 002b:00007f6bda6fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1142.534940][T16251] RAX: ffffffffffffffda RBX: 00007f6bd9a15fa0 RCX: 00007f6bd979c819 [ 1142.542902][T16251] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 1142.550865][T16251] RBP: 00007f6bd9832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1142.558835][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.566799][T16251] R13: 00007f6bd9a16038 R14: 00007f6bd9a15fa0 R15: 00007ffd7af74878 [ 1142.574783][T16251] [ 1142.578277][T16251] Kernel Offset: disabled [ 1142.582594][T16251] Rebooting in 86400 seconds..